Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: 1JQQh6X6fIARjge/Ygg5GXx8u2KESPh32wAIhhHvrno=
Subject key identifier: C5:28:01:6A:8F:37:CC:AB:88:B0:A4:39:79:1D:21:1D:A9:3A:47:B2
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 019921E7482C9153BD6D664EB7B382A02D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:00:29 +0000
Manifest this update: Sun 07 Sep 2025 02:00:29 +0000
Manifest next update: Mon 08 Sep 2025 02:00:29 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: 5S/jfDrvfo2myrxZkxMyboECHnSWZ7RnpFxuwRhbuMA=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:48:2c:91:53:bd:6d:66:4e:b7:b3:82:a0:2d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: Sep 7 02:00:29 2025 GMT
Not After : Sep 8 02:00:29 2025 GMT
Subject: CN=c528016a8f37ccab88b0a439791d211da93a47b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:78:7c:1a:9e:e4:41:ec:01:b1:a1:a5:ec:
c2:c4:3e:02:31:5c:3b:7a:fc:b8:db:98:2c:6c:d0:
9a:e9:07:99:02:7c:13:ec:03:32:20:0d:f3:34:bd:
c1:b6:e7:50:58:ee:4b:c6:fd:d2:b4:0e:47:07:2e:
72:21:55:e9:a4:ce:d8:74:5e:fc:84:33:3c:f5:a7:
a4:c0:0a:ed:e3:f0:43:05:d0:df:b2:f7:ca:45:be:
4a:5c:eb:d7:16:86:c8:41:72:da:1d:d1:de:a7:53:
65:1b:98:32:fe:eb:4a:c4:f1:f8:13:8e:96:e7:f2:
25:99:fc:0d:fa:a3:e6:88:20:47:8f:5a:62:60:78:
02:32:28:65:2a:9a:af:e1:d6:6b:8d:c4:83:12:b3:
8b:e2:8d:f7:ec:de:cb:41:80:37:ee:a1:e5:34:3c:
0e:e4:d5:fd:e6:5f:89:97:79:1c:f0:a0:24:24:c7:
62:51:c4:b4:1c:69:2c:5b:01:47:45:3e:44:87:96:
8c:9b:25:34:39:a2:0d:6a:e4:1a:7a:f7:2b:74:91:
00:56:24:d5:f8:bc:e5:b2:b4:0d:1c:f5:12:2c:b9:
6a:e8:ef:d8:1e:90:42:a2:92:0a:ad:76:d4:3a:b2:
8a:f9:64:8c:0d:e6:be:d9:3a:25:5e:5d:14:2c:a9:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:28:01:6A:8F:37:CC:AB:88:B0:A4:39:79:1D:21:1D:A9:3A:47:B2
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:88:f3:79:80:f8:00:64:86:a7:71:3f:03:30:40:f6:83:26:
a6:17:db:bf:5e:3c:a7:50:aa:06:25:30:d5:74:52:6e:71:48:
96:5b:21:3e:48:07:12:84:86:18:02:8d:cb:6c:d0:2d:a1:dd:
56:3a:e2:0d:3c:b2:d0:f8:e0:ce:4f:f4:89:6f:66:35:4a:c2:
bd:55:7f:cd:e6:01:6f:41:cc:e1:e0:df:2a:99:de:55:ba:80:
10:52:19:a5:3d:24:b4:77:89:a3:49:a4:b6:fc:2b:9e:3f:a8:
7d:7c:8e:ef:5c:b3:11:61:47:33:c1:35:e7:2d:f8:f7:fc:ff:
12:60:33:97:cd:5f:9c:69:01:13:f9:f8:89:13:bf:74:fa:9a:
51:1e:d3:af:b3:38:af:b6:4e:21:fe:d7:09:cc:07:a3:be:8e:
18:c4:43:cd:21:68:16:12:70:7a:87:5b:b8:b9:f5:f7:6e:a1:
67:b1:9f:1e:6d:9b:28:82:10:fd:5d:8f:59:7b:dd:c0:ad:2b:
33:ee:0f:5d:bd:de:47:23:2c:40:ba:f5:23:1c:c7:a6:94:63:
3a:68:dd:fc:22:b1:52:b9:93:b4:40:17:cb:25:18:64:fa:af:
07:d0:e3:d5:0e:0b:69:a2:61:08:72:29:7e:a2:35:e5:e0:91:
05:fc:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:15 2025 by rpki-client