Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: 4qRvTRaf04YQfA14AL7wRCCWrT6JGVRysaJkMOQPzRs=
Subject key identifier: E1:26:32:B5:BC:39:8B:96:1B:39:FA:AA:4E:97:DD:7E:61:E4:F7:9A
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 0199221E521652D77067F8BC99E6A56DEC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 0357
Signing time: Sun 07 Sep 2025 03:00:36 +0000
Manifest this update: Sun 07 Sep 2025 03:00:36 +0000
Manifest next update: Mon 08 Sep 2025 03:00:36 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: sK87/Qq8vobr/QhZg+aXxdkbafRCZWmSdkPg8uW0sK0=)
2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:52:16:52:d7:70:67:f8:bc:99:e6:a5:6d:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: Sep 7 03:00:36 2025 GMT
Not After : Sep 8 03:00:36 2025 GMT
Subject: CN=e12632b5bc398b961b39faaa4e97dd7e61e4f79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:96:b8:b5:d5:22:21:83:a6:75:c5:f0:76:
29:3e:ea:c1:cd:ba:d7:4d:9e:41:d0:97:dd:2e:ef:
17:9a:a6:ed:1b:b6:a2:45:49:b6:4d:09:30:68:97:
69:8f:82:16:76:cb:28:18:9b:71:42:31:28:14:fb:
6e:55:76:f1:3e:04:a6:0b:ec:25:6d:05:a7:38:dc:
94:7c:5e:52:58:f0:de:39:00:99:ee:08:3b:5f:20:
e6:a3:57:a9:8a:8c:e6:5d:7c:b9:cd:2b:2e:94:58:
1b:d4:26:e5:5b:df:af:2a:88:3d:09:18:b0:de:e6:
97:b1:74:6a:1d:6a:eb:d9:f7:5e:6f:b4:ca:7d:e9:
b3:b4:d1:bb:d3:05:8a:4a:50:5f:ca:17:7f:bc:50:
8c:2e:82:1d:48:0c:3d:70:0b:ea:06:c7:5e:fe:f7:
86:ea:36:bc:31:a9:17:7d:32:60:b2:7a:fb:53:53:
b5:c2:54:4f:ff:55:5c:3d:be:a3:b7:97:af:b9:7c:
a1:13:87:01:7a:9d:92:2e:23:f2:ef:8e:c0:65:4d:
a6:8c:52:d3:be:c0:a2:fb:81:96:e9:83:dc:5c:96:
eb:36:2a:1d:25:e3:a6:8d:53:4c:6a:e5:79:69:98:
26:22:88:24:60:f3:03:2c:a3:3b:72:20:84:c0:d3:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:26:32:B5:BC:39:8B:96:1B:39:FA:AA:4E:97:DD:7E:61:E4:F7:9A
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:83:09:2a:37:ca:97:6a:a4:79:2a:8d:19:7d:11:34:5d:ad:
e6:85:93:d5:3b:f1:d7:cc:b5:f5:ea:ee:ad:b0:18:7c:15:04:
d6:a1:27:ec:b0:34:f0:16:0d:04:7a:5c:fe:3c:12:89:7e:ef:
4c:55:cc:96:4b:c5:77:e6:79:a2:46:97:c4:60:62:16:3f:8b:
24:ad:f1:18:dd:fb:2b:d8:70:a1:ee:ed:58:b9:f8:e4:c1:07:
e8:7d:27:e0:08:55:54:12:43:bd:9b:54:fb:7e:3d:2f:d6:bb:
b6:e6:6b:d6:d5:2c:f0:4d:d0:b5:1d:47:4c:18:bf:0c:09:c9:
b6:d1:b1:9e:f1:b0:21:dc:64:88:83:79:f2:6c:17:5e:5b:f4:
73:30:57:c6:f7:0b:02:f6:39:91:b9:1f:7f:e0:6a:26:8d:52:
be:18:93:de:7b:a8:2c:b9:2b:43:f4:b5:da:cb:6b:d2:01:60:
86:6a:38:41:0a:86:cc:7e:b8:2b:70:74:b3:a2:10:cb:4f:01:
ae:41:ec:9b:23:3a:9f:64:9e:5b:23:f5:8c:88:9f:ca:a6:94:
b5:03:7f:90:1d:d5:c6:9d:a5:04:e5:8b:78:aa:a3:44:a3:3c:
9f:51:eb:59:3c:d5:f1:b0:41:90:c6:ba:e9:50:bd:9b:ad:5f:
cf:f5:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:45 2025 by rpki-client