Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier: cVFirNfhIaRg5PP+Z3uszqi+Z22VJbeGI+PMLbd5D3A=
Subject key identifier: B1:20:44:22:AD:37:F9:B8:1A:8F:02:5C:17:67:01:C3:5A:63:D4:FF
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 019922FA5DC281F5F84FA8FEC57AFC65BF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 07:00:57 +0000
Manifest this update: Sun 07 Sep 2025 07:00:57 +0000
Manifest next update: Mon 08 Sep 2025 07:00:57 +0000
Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: GyZ0Hz4OwLLCE4oc7VvZROH/mg2zlAwDk/VaOJiXMXc=)
2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=)
3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:5d:c2:81:f5:f8:4f:a8:fe:c5:7a:fc:65:bf:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Sep 7 07:00:57 2025 GMT
Not After : Sep 8 07:00:57 2025 GMT
Subject: CN=b1204422ad37f9b81a8f025c176701c35a63d4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:79:d6:10:04:c0:48:18:26:64:97:e3:ff:
2a:48:88:5c:84:5d:3f:f6:9e:ec:ec:04:cf:83:b1:
0d:48:6a:00:62:20:df:84:66:74:71:8d:b6:cc:d9:
5e:ad:5b:7e:b6:3e:4e:66:b7:e3:2b:16:28:41:21:
f9:be:4e:32:e7:5f:0e:3b:d2:6b:71:49:2f:05:84:
8d:be:a2:85:b1:17:b8:30:0e:17:3f:c3:cf:60:93:
eb:2d:aa:e5:4b:b5:2e:66:ad:a7:c5:b8:45:c7:d7:
2d:d5:cf:33:24:15:cf:d9:06:3f:fa:f3:d3:43:17:
1f:b2:d1:e4:95:cb:97:7d:cd:4a:d6:42:e1:09:2f:
8b:17:94:84:82:7c:cb:7b:ce:a2:73:96:35:67:95:
bf:ec:50:21:3c:7f:60:7c:64:c1:14:73:41:b5:b4:
98:2e:15:75:71:23:32:57:81:b5:eb:c2:4c:e6:e7:
d2:2a:f4:a4:97:d5:d4:11:0d:7f:36:d6:6c:25:11:
95:e2:ab:2f:ab:9c:19:49:16:ca:47:25:f9:40:5e:
88:ef:42:cb:7f:7a:ab:e6:32:1b:2f:04:04:57:e2:
71:71:2c:ee:3d:50:45:2c:4a:42:4f:87:c5:32:4c:
ae:c1:76:fc:d9:79:49:21:95:3e:75:e8:16:6d:d8:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:44:22:AD:37:F9:B8:1A:8F:02:5C:17:67:01:C3:5A:63:D4:FF
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:43:83:2e:d2:74:9d:ed:97:13:89:52:b8:85:1e:48:b3:8d:
08:51:62:82:c4:ed:24:bd:ef:be:8c:4c:c3:d2:76:7e:43:73:
f3:7d:bd:bb:44:d9:25:6a:54:8c:42:e4:f0:ab:45:23:be:ba:
98:6d:80:f1:73:44:09:40:b7:ec:f2:a8:70:25:29:bf:10:3b:
d7:8f:a6:3b:22:6f:fb:86:36:ad:83:73:25:57:a8:69:2c:be:
3b:c8:94:03:d8:10:5d:cb:5d:47:5f:f3:27:a2:18:5d:e3:5c:
63:90:d6:eb:bd:9e:35:50:34:3b:12:55:bd:2c:a7:d3:66:7b:
6a:11:c3:7c:7f:ab:16:7e:ca:f5:46:24:5d:5c:fe:89:82:0c:
0a:87:09:00:4b:84:49:c3:92:11:e4:bc:50:7e:c1:27:4a:ee:
57:57:f0:8b:a2:6e:f7:b7:b7:99:bb:d4:6a:fd:40:51:97:0a:
b4:dc:85:b4:f7:82:97:fe:ce:fc:be:38:ae:e8:ff:df:74:20:
73:31:bb:74:8e:b6:5d:e3:68:2a:34:e2:07:20:3d:58:a0:f5:
d4:5c:d6:e2:3e:3f:0b:63:f4:68:5c:9b:52:3c:0d:f2:5e:83:
e2:1c:0d:84:45:80:db:58:a1:09:47:03:1e:29:f7:66:53:63:
a2:66:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:24 2025 by rpki-client