Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: msYHEkrFh2Jhx16oR8uQH4tpsetJyF6B+WDwkdn325M=
Subject key identifier: D4:8C:2D:79:63:4E:C0:00:FD:D9:04:79:5B:4D:02:7B:60:09:DE:B5
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 0199225541BABFF6E66A8E320A3A6C4F0854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 04:00:36 +0000
Manifest this update: Sun 07 Sep 2025 04:00:36 +0000
Manifest next update: Mon 08 Sep 2025 04:00:36 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: mI1EV4LVGWQg2u3nE3d8Gl6zoH3zRTtqGWQwZJl4N4M=)
2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:41:ba:bf:f6:e6:6a:8e:32:0a:3a:6c:4f:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Sep 7 04:00:36 2025 GMT
Not After : Sep 8 04:00:36 2025 GMT
Subject: CN=d48c2d79634ec000fdd904795b4d027b6009deb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:b0:b9:42:e1:2b:f1:49:8f:3f:77:22:90:
74:18:6e:58:41:e5:da:89:1a:a2:2a:41:f8:ac:ed:
30:b4:04:d1:92:e3:09:0e:c2:13:f2:a0:e9:70:55:
e2:8a:45:b4:02:e4:18:93:9d:ac:40:f2:a8:e8:08:
b2:1c:09:fa:1a:ca:f7:bb:76:78:97:33:b4:8d:69:
cf:8b:93:bd:c3:13:bf:1d:bb:b0:32:a8:cb:56:8a:
71:8d:b1:34:14:04:9f:1f:9b:d4:48:0f:b4:73:a3:
6c:be:6e:c2:89:f3:8b:63:44:32:0a:86:3d:7a:46:
07:9d:b8:e7:fc:17:82:d8:d6:66:34:64:1c:ce:32:
c1:22:0f:64:27:de:c8:f1:11:6a:a1:55:ee:74:14:
43:7b:3c:b8:a0:43:33:48:ad:b7:9d:58:98:fd:99:
d2:dd:e6:bf:28:99:d0:33:0f:82:4e:4c:db:c8:90:
46:a3:12:cc:5a:22:4e:b2:e9:cf:84:7e:4a:4b:30:
3d:bf:2c:5d:c2:56:16:f3:f7:d1:f3:a6:b8:6c:10:
9c:43:4f:86:7e:73:8f:05:5a:57:35:e0:67:0e:5d:
d1:c1:92:f4:47:04:9f:34:ea:12:a9:c2:b2:8a:0e:
9d:79:25:b6:2b:1b:b7:fd:5b:08:47:30:71:f8:ee:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:2D:79:63:4E:C0:00:FD:D9:04:79:5B:4D:02:7B:60:09:DE:B5
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c0:48:39:f6:46:f4:ac:a2:99:db:9d:c8:8d:91:c6:9c:a1:
36:cb:c3:84:56:c6:fa:c1:c9:6f:34:8e:65:88:5c:c7:1c:d0:
39:35:2e:7d:d6:03:b7:d7:c7:bc:9b:0c:a3:85:7b:95:a1:cf:
6c:6f:bd:ec:62:c2:1c:9d:20:24:d4:08:84:87:70:5e:99:7c:
77:d3:aa:17:a1:ec:27:b3:c4:42:ab:bc:3f:e3:52:22:6f:c1:
9d:a6:a4:ba:d5:f4:7c:26:0c:be:73:9c:5e:e6:ca:be:78:40:
a6:79:1d:69:88:fc:24:59:42:de:ab:89:91:96:2b:66:28:67:
b2:8d:c4:d8:d7:be:fa:df:66:94:19:64:81:fb:c6:a1:b2:43:
89:13:58:68:f0:85:e7:14:38:2d:62:89:53:a5:ae:73:be:b0:
b3:29:0d:70:bd:df:b7:05:78:e9:cb:64:37:60:ed:9a:57:d1:
2a:c9:a7:b0:cf:57:44:db:0b:40:d4:c1:12:af:60:03:c2:23:
57:54:7e:d4:21:29:44:cc:df:33:7e:ca:e1:27:28:2e:cf:09:
5a:a4:26:d8:fa:b0:47:fa:f1:88:4c:77:cb:1a:34:44:d9:80:
d4:92:31:d7:b0:91:29:0f:96:ef:d9:56:b9:fc:2b:5a:96:94:
73:84:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:29 2025 by rpki-client