Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: JFnp2fl/v7Kdbu1i3WdN+SwHmcHVJVMnlXPyffn+yDw=
Subject key identifier: 1F:5A:38:9F:46:C4:8E:A0:3C:0E:FE:F2:16:32:F8:7C:EF:3D:C8:6A
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 0199240D493D658D8DC7B5C7A32EEC9BDE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 137F
Signing time: Sun 07 Sep 2025 12:01:14 +0000
Manifest this update: Sun 07 Sep 2025 12:01:14 +0000
Manifest next update: Mon 08 Sep 2025 12:01:14 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: 5214X4mYU6hwxuZ6H+FPDK4pJZFdHBwi9M/gefgtji0=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:49:3d:65:8d:8d:c7:b5:c7:a3:2e:ec:9b:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Sep 7 12:01:14 2025 GMT
Not After : Sep 8 12:01:14 2025 GMT
Subject: CN=1f5a389f46c48ea03c0efef21632f87cef3dc86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:9a:58:56:3b:13:b9:b5:48:06:bb:de:ef:
50:ab:d6:a5:51:e9:37:53:b5:44:6e:ad:da:93:ee:
93:29:7d:9f:51:ef:65:9c:73:4f:c0:f6:8f:0b:91:
9e:88:ce:d0:e0:00:2d:1f:7f:18:e2:33:51:27:01:
d3:ad:c9:6c:8c:c3:5e:c6:c9:19:ba:06:87:c4:18:
aa:56:65:c3:a9:f1:8b:a7:98:9e:b1:fd:ac:29:12:
ce:bf:75:e0:03:6d:ec:a5:b1:17:e0:a6:00:4d:ac:
2b:4d:c0:df:af:b9:98:5f:c5:70:f6:24:03:9a:a4:
84:38:5e:ee:48:03:cc:2b:39:5a:8a:1f:e1:82:fc:
e4:28:31:d1:af:b8:c9:51:22:af:c8:6f:0d:7e:79:
22:3a:01:93:11:ab:d3:15:35:75:09:c1:eb:72:79:
ed:c9:20:07:2b:2c:f6:ee:26:32:b8:f1:1a:4a:ae:
ab:13:1d:5f:7d:89:59:ee:f1:a4:2b:e1:cd:33:6b:
b8:a8:58:54:7d:d2:3f:ac:7f:07:6d:d4:9d:13:3c:
f4:55:8e:7e:5f:32:7d:58:0a:15:6c:e6:cb:2a:91:
4f:b6:c6:48:cd:2f:9b:ac:72:23:dc:41:94:74:46:
8b:e6:7a:5a:bb:24:d6:c4:a6:5e:5b:d6:b8:cc:da:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5A:38:9F:46:C4:8E:A0:3C:0E:FE:F2:16:32:F8:7C:EF:3D:C8:6A
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:03:f7:a6:00:2e:bc:26:be:ff:55:c5:d9:33:74:ce:81:d0:
03:78:82:bd:7d:6e:a6:63:38:ce:e3:a0:2c:2a:47:70:d8:8e:
69:e4:96:03:14:59:0f:f8:5e:92:f7:f5:cb:90:df:ef:d1:b8:
b2:c4:b1:90:fd:69:43:db:43:34:86:2b:d7:36:d6:c0:7f:54:
45:d0:5b:9a:3b:d0:35:93:8b:5d:b7:10:b8:f0:54:21:b2:6d:
84:11:df:0d:57:b3:b7:6d:9f:6c:67:36:28:87:70:3f:56:28:
78:3f:79:ee:95:b0:3a:ad:07:68:7d:0c:a2:d9:d5:f6:1e:97:
3b:3b:bc:55:10:a5:6d:46:19:db:86:40:6a:13:a3:d6:57:3b:
a6:33:11:a3:89:c3:a4:88:6a:d3:66:8d:35:d6:01:c4:86:bb:
cd:05:57:e8:5d:81:37:be:c6:f5:3c:11:97:c5:20:1a:4c:8a:
1b:2c:e3:27:a4:96:1c:84:21:51:cc:e2:6f:8e:11:49:8e:5b:
12:5e:a8:bb:e5:72:5a:a8:b6:65:04:7a:81:fe:d2:14:a0:de:
14:a0:85:48:e0:9a:ee:66:86:db:03:99:95:45:52:fa:51:19:
62:f9:40:45:0d:e9:c1:c1:84:93:ee:75:1f:80:14:84:e2:c2:
cc:02:ca:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:37 2025 by rpki-client