Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: 62rynxwM+QdRlmqjcEph1v02RuCYEEcqDoV29MGxgGc=
Subject key identifier: 6B:64:0D:FC:30:98:CA:AB:B2:7C:31:58:AE:8B:95:9A:B1:BC:3F:3D
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019923A08309654965B4B575A5206E18F7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 01CA
Signing time: Sun 07 Sep 2025 10:02:25 +0000
Manifest this update: Sun 07 Sep 2025 10:02:25 +0000
Manifest next update: Mon 08 Sep 2025 10:02:25 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: n1MdWPU+eQ6RbghmRYYjBbY8KSezFb+sGiBTjeP7lJg=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:83:09:65:49:65:b4:b5:75:a5:20:6e:18:f7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Sep 7 10:02:25 2025 GMT
Not After : Sep 8 10:02:25 2025 GMT
Subject: CN=6b640dfc3098caabb27c3158ae8b959ab1bc3f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:ab:92:26:07:15:d4:c5:47:9a:84:82:7d:
2d:22:9a:33:8b:d4:f3:62:0f:b0:56:b4:6f:bd:b7:
6b:98:11:b6:02:a9:e3:33:70:4b:dd:11:7b:f0:d6:
db:92:31:0b:46:68:b2:fa:4c:40:fe:bc:82:dd:04:
93:c7:6d:21:1f:f8:1b:55:c8:a0:69:4e:2e:01:56:
ec:ae:db:d1:b6:4c:68:49:da:cb:56:03:cd:62:d3:
56:fb:90:ce:13:ae:9a:d3:4b:f7:d3:b7:97:2b:07:
ff:ec:31:89:5c:62:8e:47:50:9b:b2:da:8a:03:56:
78:23:bc:39:b6:6a:7e:66:bb:a9:54:32:e7:f1:d4:
ea:ab:21:e4:a6:08:63:8b:be:3e:99:24:23:b3:32:
43:86:9b:ac:99:ec:ca:d7:8b:2a:f2:6c:0b:5d:df:
c8:5f:c2:3c:4d:b3:02:43:f6:e8:ac:c6:6a:57:34:
aa:cf:d5:9d:a3:55:87:74:2a:05:f0:db:a5:f8:57:
71:fe:cb:5a:76:86:58:7e:1d:d3:34:84:38:f1:d1:
aa:25:d7:1a:55:59:14:17:eb:0a:1f:5b:18:fb:11:
35:e4:9d:b6:3c:38:ed:39:ab:9b:9c:78:cd:05:b6:
b9:fb:22:49:38:c7:81:60:ce:64:18:f1:ca:6e:ef:
73:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:0D:FC:30:98:CA:AB:B2:7C:31:58:AE:8B:95:9A:B1:BC:3F:3D
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b8:6b:56:60:2a:48:1b:be:66:61:39:4a:b6:bf:18:7e:94:
d5:69:96:1f:dd:9c:0d:47:77:f7:82:42:f9:59:da:7c:32:5d:
b8:16:44:52:74:e1:7f:6f:d8:3d:e8:9b:a1:a9:4d:1d:6a:84:
47:05:00:ef:6f:e0:30:eb:41:5a:78:6b:93:b2:8b:1d:c1:92:
e7:67:c4:95:de:66:3a:92:a8:d7:6c:6f:17:28:03:6f:c0:78:
36:f6:00:8a:33:54:65:8c:e2:df:40:4c:7d:53:6e:81:28:cf:
b2:ef:af:66:e8:b5:0c:dd:ad:a2:83:eb:71:56:2f:e7:7a:77:
e7:ab:44:f4:ed:45:5d:8d:48:5d:ce:e0:7a:3b:ae:1f:34:ac:
a0:20:26:4c:1f:a1:a8:e2:7a:11:a1:a0:7a:28:16:28:a4:c2:
6a:cc:f5:c4:43:21:d2:86:fc:7d:c3:d5:e8:9b:72:b8:55:61:
fa:d4:b3:d6:ab:92:fd:41:1a:35:87:7c:7c:3f:94:d4:67:a4:
72:c9:98:e4:ef:2b:78:fd:7b:aa:ed:a3:d4:57:d9:10:d9:90:
3e:b0:44:e4:6e:af:88:70:79:33:96:d2:07:b2:e7:cb:aa:75:
e8:1a:a1:d6:11:19:de:a0:a5:9f:fe:65:6c:96:c2:17:7f:91:
6e:ef:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:28 2025 by rpki-client