Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: qju6fPeXdDxu2KFprCgSyZytcMebTv58LE6O3+jVrEA=
Subject key identifier: 96:01:A1:F2:43:38:82:EB:A9:A8:BA:2E:6D:4D:E8:49:59:06:F7:A0
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 0198EAC2DB1EB1E9EC6397DC6C3E6347D362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 1655
Signing time: Wed 27 Aug 2025 09:01:35 +0000
Manifest this update: Wed 27 Aug 2025 09:01:35 +0000
Manifest next update: Thu 28 Aug 2025 09:01:35 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: ZGphOqIFY63OrNmXuY52u+6E8OTP+ocIRvwXiFS11m0=)
2: bldtfvyuIcb6nqjUAl8Ak0zMF30.roa (hash: dx6ZT1WJQ+QEzva9Bd5tv/adJVLszcwVSLKhJy+UO24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Aug 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:c2:db:1e:b1:e9:ec:63:97:dc:6c:3e:63:47:d3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Aug 27 09:01:35 2025 GMT
Not After : Aug 28 09:01:35 2025 GMT
Subject: CN=9601a1f2433882eba9a8ba2e6d4de8495906f7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:a6:fb:71:6c:29:02:54:82:61:86:ac:af:
14:01:97:3a:8f:e4:98:92:b2:95:d2:82:8e:19:05:
4b:a2:bd:f8:a6:5b:0a:c1:3c:f5:71:5a:6c:c6:9f:
2d:be:0f:23:ff:e0:18:f5:a7:c7:22:39:64:0d:88:
4b:a1:93:d5:fa:eb:82:cc:33:a9:eb:d5:ba:b8:82:
4b:f4:db:05:34:08:f9:a5:f6:a7:e1:91:70:95:73:
9e:13:c8:0e:42:23:76:10:d8:a9:45:41:e0:d8:ab:
5a:ba:b1:32:2c:19:3a:76:1b:68:57:d4:a2:39:51:
79:95:5b:81:a5:cd:c2:68:58:e0:3f:5a:45:49:db:
18:6b:3b:9e:0f:c7:4a:4e:1a:02:fb:eb:d8:4c:3e:
9d:c4:95:96:c0:68:6b:b9:8a:b5:4c:ff:ce:33:30:
d7:e1:dd:10:fc:b4:44:44:e9:90:01:0e:5a:48:de:
bc:45:24:b2:21:69:81:4b:69:fe:22:29:8a:6c:05:
4e:b4:89:91:83:6c:1b:e1:40:25:d2:b5:a4:59:58:
d2:c5:62:f1:b1:e6:ae:e6:b2:3f:1d:87:e5:39:1b:
33:cf:1b:15:e9:f8:cf:28:a0:b1:bb:5c:f2:85:06:
79:23:a1:58:dd:fb:fc:0b:95:eb:13:8a:da:57:3f:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:A1:F2:43:38:82:EB:A9:A8:BA:2E:6D:4D:E8:49:59:06:F7:A0
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:84:31:f0:79:bf:04:1e:85:66:10:ed:78:34:02:ba:8e:e8:
e6:ef:de:0f:29:20:02:fd:69:67:23:98:08:f1:9e:c7:97:1e:
44:c8:91:d8:e6:b7:7e:97:65:63:6b:da:97:a8:bc:0b:d7:31:
f4:60:cb:d5:25:20:bb:6e:76:63:cb:8b:5e:3d:1e:a2:be:e3:
0e:8b:0e:91:c7:c9:05:47:72:21:5d:d2:6e:26:77:e4:12:c1:
ca:57:74:1f:9b:ae:08:6f:9e:e0:04:f6:2c:fb:23:25:5b:d1:
56:98:6d:2c:1a:19:f0:95:ee:9b:56:10:f7:09:dd:68:7a:a2:
4e:a7:2e:36:d6:48:ad:b9:1c:c3:35:d6:4c:e0:51:3a:c9:30:
ae:95:1c:e3:5a:f3:53:09:5f:25:fd:5b:49:80:e8:d5:89:31:
4c:7d:e3:63:f2:83:6c:15:6d:7c:3d:e6:30:e8:cd:4e:7a:5b:
45:5b:02:e6:b7:30:37:81:29:29:49:87:73:33:6a:02:43:42:
61:6f:0b:cf:a2:a3:c9:10:f5:a8:e9:8e:3b:41:53:7e:0b:e8:
b3:09:b3:9b:b5:17:4c:2c:58:54:04:65:b0:c7:e1:8d:0e:6d:
d4:05:23:b2:9b:fd:23:87:0a:45:3e:e9:13:de:e0:e0:60:0d:
30:5b:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 27 11:10:42 2025 by rpki-client