Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File: UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier: YjEgc0NPLHh327kvB7zB/xXFyPOAtHxRfBdyFrP9HdI=
Subject key identifier: D2:81:8A:0C:73:62:FC:B3:E2:4A:AE:E2:11:F4:50:B2:15:D3:03:A0
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial: 01992330D528D1D73AD07D024BA4665D44A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number: 052B
Signing time: Sun 07 Sep 2025 08:00:26 +0000
Manifest this update: Sun 07 Sep 2025 08:00:26 +0000
Manifest next update: Mon 08 Sep 2025 08:00:26 +0000
Files and hashes: 1: JfX_uE4ZrNpyAWrN6XZ19h68cHI.roa (hash: von2tcOSfatHPq0+8nIPwywF9HUMabxhy1Hbp0s6xOY=)
2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: 3pkCPpdmBAaIhOQz6/qIj996e7yPOey3Q2hMIVgZFeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d5:28:d1:d7:3a:d0:7d:02:4b:a4:66:5d:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Validity
Not Before: Sep 7 08:00:26 2025 GMT
Not After : Sep 8 08:00:26 2025 GMT
Subject: CN=d2818a0c7362fcb3e24aaee211f450b215d303a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:b0:70:7b:5c:ee:9a:2f:69:6a:5e:bb:28:
4e:60:52:27:ab:98:2a:4c:26:ea:19:05:3a:ea:55:
2e:e5:22:d9:51:8d:64:a8:3e:b7:31:58:e2:86:03:
53:cd:25:8f:48:fb:b7:56:d1:01:04:e0:e8:6a:4b:
69:85:bb:ca:e0:f6:96:7e:d5:2c:78:50:d8:41:19:
a1:d9:80:1f:d7:a5:ad:8a:53:d7:01:6b:7e:46:c9:
57:e5:84:c7:66:99:ef:6a:68:d8:54:d7:7f:2d:85:
46:e2:f0:93:bb:8c:25:e9:36:dc:e3:32:c3:58:af:
53:2d:5a:c5:6d:db:50:c0:01:5c:22:b3:6c:e9:47:
e5:08:8f:8d:24:9d:b8:74:b9:8c:b6:2c:cc:01:be:
fe:24:25:a2:f2:69:bb:21:f3:00:7e:fa:32:e3:4b:
51:0e:98:7a:14:62:22:07:37:7e:e0:89:dc:f0:7d:
46:99:ce:c1:05:7b:72:48:ce:81:45:d3:73:8d:e0:
4e:00:44:74:eb:86:56:aa:50:55:f3:a6:99:50:7a:
42:61:d2:59:d4:12:74:c5:df:48:b1:8a:f1:09:03:
80:d5:a6:1d:af:dd:0c:5e:e5:69:48:da:8e:55:63:
e9:b2:6a:b6:5f:ab:91:4d:8a:05:96:f5:15:b0:1a:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:81:8A:0C:73:62:FC:B3:E2:4A:AE:E2:11:F4:50:B2:15:D3:03:A0
X509v3 Authority Key Identifier:
keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:16:f7:68:b7:eb:3a:a9:b6:4b:a8:79:00:b6:b5:0f:4e:5c:
a5:c4:57:f5:ba:bd:83:ae:21:b5:89:5e:ca:d1:57:42:b9:cc:
72:d4:2b:de:a8:e8:2d:fd:75:7d:37:18:fb:3e:32:6f:a1:44:
98:8a:75:86:6e:4f:ab:3b:a8:60:a6:94:fa:77:e7:59:ba:48:
9b:fe:85:b4:10:26:38:0f:8e:4b:14:8f:d6:a9:3a:74:95:d5:
2b:8a:5a:b1:17:59:58:43:77:ed:fe:cf:8c:f1:d7:69:f7:12:
28:ad:f3:46:63:d7:2a:1a:95:a7:22:26:11:5d:4c:a3:e2:9b:
6a:de:20:31:99:c8:84:33:43:a0:db:12:1e:76:5d:c7:31:03:
3e:e7:e5:78:68:6a:52:ea:ef:f5:93:e6:ac:ac:8f:2f:4c:93:
64:a4:ed:02:36:9e:04:5d:07:ee:63:d3:29:48:a0:db:1c:d7:
6d:fa:67:90:16:44:d1:02:ca:dc:68:e3:9e:23:99:56:e6:34:
35:0f:5f:29:7c:8b:6f:c0:38:88:af:b5:b1:15:06:bc:9d:c1:
9d:fa:b5:9e:23:fe:4c:17:18:f8:95:a0:f0:0c:7e:96:64:87:
0b:e8:ab:f2:03:a1:dc:5b:89:bf:06:2b:ea:0b:5c:4d:f7:22:
7a:f5:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:14 2025 by rpki-client