Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: Oj0fZalbfTFxUlTEPzzzxNB9VtPCaEsVfO+B7fNOAdA=
Subject key identifier: 6F:92:15:63:75:A9:0B:74:24:E4:E5:6F:D8:7F:76:E6:01:43:4C:38
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 019923312864014EBE0ED5101FA6E434458B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:47 +0000
Manifest this update: Sun 07 Sep 2025 08:00:47 +0000
Manifest next update: Mon 08 Sep 2025 08:00:47 +0000
Files and hashes: 1: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: SU61ukwUfa0ZfaMjVougi8vxlU2/lWltLxnEGbWV5eU=)
2: ax8BOGm-GJfb7NvYozzZ62QdRvA.roa (hash: cIhLyiLj0Foy8DN1xACbtMKul9Di0Oi3YIqfjaju72U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:28:64:01:4e:be:0e:d5:10:1f:a6:e4:34:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Sep 7 08:00:47 2025 GMT
Not After : Sep 8 08:00:47 2025 GMT
Subject: CN=6f92156375a90b7424e4e56fd87f76e601434c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:aa:3d:27:35:cd:ab:e9:24:9a:e8:b2:be:
94:41:1f:22:81:29:f2:a1:4d:79:41:3c:8e:f2:d4:
cb:f4:f3:7b:c4:70:e9:83:62:76:c6:0d:ce:39:4a:
f1:94:73:56:e4:3e:f6:98:78:44:15:b5:45:87:ef:
30:95:c7:ee:9c:39:4c:65:c0:3b:9f:58:52:58:5f:
a6:00:f1:12:b0:2f:8e:f7:8a:33:93:97:84:d7:12:
f8:ee:32:57:da:22:40:01:06:61:e1:ae:6c:68:e4:
61:82:56:c0:c2:ee:71:46:f8:0a:a6:98:c4:db:5b:
57:66:7f:e6:ed:9f:ba:68:c1:6e:86:18:29:32:01:
6f:9f:60:57:1c:ac:38:13:28:f4:f1:54:0e:7a:44:
db:9b:9b:14:12:c0:77:33:11:20:da:da:59:6c:44:
ab:72:21:fc:61:4a:1a:46:bb:32:32:31:a1:ba:e9:
87:9a:88:aa:a3:6d:fd:42:c3:8b:3a:df:b6:55:46:
19:55:fd:d1:c9:70:c4:e7:66:fc:91:85:16:3e:c4:
7b:a4:82:3d:59:49:af:ac:dd:8d:62:7f:6b:91:b8:
8d:e0:2c:66:52:69:ca:b7:a3:b6:61:41:af:36:5b:
01:db:77:31:e1:ae:23:b9:cb:c7:2d:a6:29:82:28:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:92:15:63:75:A9:0B:74:24:E4:E5:6F:D8:7F:76:E6:01:43:4C:38
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4b:cd:1d:d0:08:00:b7:b5:02:72:67:d6:89:bd:82:d4:db:
88:ab:85:9d:11:b6:cc:52:a3:42:e3:92:16:ec:e2:5b:3f:d4:
fe:1e:4e:12:32:5f:39:6d:a6:e8:4d:f4:eb:f0:11:ee:d8:9c:
81:c5:ab:f4:a2:e6:98:4b:79:17:54:4e:42:53:e3:f4:1f:f4:
b0:00:57:68:62:25:10:90:80:0d:06:94:ed:d2:82:f7:d4:92:
ab:28:30:eb:76:8d:10:b5:3f:3a:75:51:a7:f9:d3:d5:6d:f4:
eb:bf:77:a3:09:d9:7b:db:a1:61:57:83:16:aa:89:a2:12:b4:
aa:29:b6:81:d1:02:c1:80:64:d0:8b:c2:77:15:01:db:7a:ff:
34:26:bc:71:63:15:32:f7:27:dd:98:84:a8:94:09:97:9a:83:
75:5c:78:a4:fc:b1:43:d5:f7:08:a2:1b:8a:93:86:13:76:fc:
f1:68:28:f4:b6:eb:dc:4c:4c:03:d1:00:c6:50:06:ff:b2:33:
c0:f7:39:a9:43:8b:8e:11:a3:43:32:5b:83:96:61:2e:46:e7:
1f:26:94:f3:d8:c2:02:43:bc:69:68:5b:af:cf:f7:52:60:0a:
ff:23:1f:a1:62:8c:8e:21:d3:ac:f2:48:33:4b:87:54:00:42:
85:79:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:42 2025 by rpki-client