Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: HVfhctbwujekroyHB9A5fTM7m/Asrlw0xSvMf9LIZ94=
Subject key identifier: 5D:97:BE:AD:75:F7:B2:5A:16:20:96:FD:F0:50:EF:2A:06:67:1A:07
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 01993123DF940AD32376710D29319ACB131C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1177
Signing time: Wed 10 Sep 2025 01:00:58 +0000
Manifest this update: Wed 10 Sep 2025 01:00:58 +0000
Manifest next update: Thu 11 Sep 2025 01:00:58 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: ihfIS39VsbH9K10FMm4PgCKnjcF5eb+R56ozseZYYI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:df:94:0a:d3:23:76:71:0d:29:31:9a:cb:13:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Sep 10 01:00:58 2025 GMT
Not After : Sep 11 01:00:58 2025 GMT
Subject: CN=5d97bead75f7b25a162096fdf050ef2a06671a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:d1:22:96:5e:07:50:23:d4:8b:c6:fa:41:
a2:75:3b:b1:f8:d9:5d:70:78:06:fa:b5:1f:fb:9e:
5a:c2:dd:d7:89:59:bc:e9:c4:b6:1d:30:05:f6:61:
6a:e7:3c:ec:34:a2:3f:fb:aa:2a:8c:8f:91:4e:98:
60:60:74:92:45:23:cf:4a:be:0f:a5:c2:8d:03:70:
65:41:e8:22:0c:d4:cc:b7:5e:f3:12:1a:6c:27:9c:
00:f6:d2:a7:f5:5d:37:b9:a0:a4:f7:ff:8d:96:22:
ab:95:65:38:93:40:2b:fd:ef:c4:ee:2c:67:a1:60:
85:3b:3a:ea:d3:ab:0f:a5:f2:88:07:d8:24:48:d7:
d6:33:de:a5:f4:22:0d:8b:e0:95:a6:e7:ec:3b:49:
0b:61:d2:6d:13:a1:99:b1:86:63:fc:4b:ac:33:94:
34:19:c8:d0:a5:35:db:35:a7:a0:b7:9f:68:4b:ae:
46:40:f9:10:36:c2:06:6c:c8:77:8b:14:f8:ac:92:
dc:1a:3c:2f:42:81:72:3e:e6:d0:af:e7:e2:b3:39:
96:86:4f:d0:c0:e4:4e:bb:be:3d:f9:ab:b1:20:7a:
fb:4b:13:9d:52:90:23:2d:74:d8:c6:b7:03:b9:45:
f2:93:4f:23:3a:9d:0d:6f:24:85:ea:30:68:9e:d9:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:97:BE:AD:75:F7:B2:5A:16:20:96:FD:F0:50:EF:2A:06:67:1A:07
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f5:a7:fc:dc:d1:b4:5d:9a:b6:62:8e:16:ab:ae:ff:2b:08:
f4:7f:d5:32:b1:d5:72:a6:b5:66:7e:29:2b:2f:ab:0a:dc:b5:
3a:aa:74:0a:39:31:0a:c6:5c:0e:50:8b:fc:84:a6:d6:f7:9e:
21:f4:a0:fb:ba:12:4f:8d:6e:fc:9f:cc:f6:5c:d5:c6:27:fa:
3c:40:10:90:31:8c:a3:a0:5c:bf:de:48:f3:fe:b7:6c:8b:66:
d7:55:70:6e:95:fd:54:73:14:f1:10:4c:3c:a3:9b:a3:c4:00:
c6:61:fc:af:54:d2:77:1d:11:ee:40:2a:14:2b:d1:3f:84:33:
4d:51:9b:c0:a4:73:c4:91:d5:37:81:51:c3:14:1f:df:68:b6:
8d:06:15:2d:09:24:e4:30:38:e1:ff:45:06:4e:cd:c7:90:d4:
d0:f6:2b:b9:a3:fc:a9:cc:be:42:6c:b3:e6:4b:fc:c1:b5:bb:
5e:53:e1:d7:8d:80:a8:6f:33:a4:55:c4:56:92:8b:87:df:be:
ff:54:28:d6:6a:65:0e:49:2e:c1:03:bb:59:6a:76:dc:c7:d5:
f1:0d:21:6d:80:78:2f:97:b6:7b:92:ca:0b:a2:4c:85:cd:69:
e4:3b:5d:c0:45:4c:a4:2a:7e:15:97:ff:15:26:07:3c:e4:b9:
64:59:89:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxI9+UCtMjdnENKTGayxMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4
OTczYjgwHhcNMjUwOTEwMDEwMDU4WhcNMjUwOTExMDEwMDU4WjAzMTEwLwYDVQQD
Eyg1ZDk3YmVhZDc1ZjdiMjVhMTYyMDk2ZmRmMDUwZWYyYTA2NjcxYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRjRIpZeB1Aj1IvG+kGidTux+Nld
cHgG+rUf+55awt3XiVm86cS2HTAF9mFq5zzsNKI/+6oqjI+RTphgYHSSRSPPSr4P
pcKNA3BlQegiDNTMt17zEhpsJ5wA9tKn9V03uaCk9/+NliKrlWU4k0Ar/e/E7ixn
oWCFOzrq06sPpfKIB9gkSNfWM96l9CINi+CVpufsO0kLYdJtE6GZsYZj/EusM5Q0
GcjQpTXbNaegt59oS65GQPkQNsIGbMh3ixT4rJLcGjwvQoFyPubQr+fiszmWhk/Q
wOROu749+auxIHr7SxOdUpAjLXTYxrcDuUXyk08jOp0NbySF6jBontm/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2Xvq1197JaFiCW/fBQ7yoGZxoHMB8GA1UdIwQY
MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt
OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5
LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvWn/NzR
tF2atmKOFquu/ysI9H/VMrHVcqa1Zn4pKy+rCty1Oqp0CjkxCsZcDlCL/ISm1vee
IfSg+7oST41u/J/M9lzVxif6PEAQkDGMo6Bcv95I8/63bItm11VwbpX9VHMU8RBM
PKObo8QAxmH8r1TSdx0R7kAqFCvRP4QzTVGbwKRzxJHVN4FRwxQf32i2jQYVLQkk
5DA44f9FBk7Nx5DU0PYruaP8qcy+Qmyz5kv8wbW7XlPh142AqG8zpFXEVpKLh9++
/1Qo1mplDkkuwQO7WWp23MfV8Q0hbYB4L5e2e5LKC6JMhc1p5DtdwEVMpCp+FZf/
FSYHPOS5ZFmJZw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 06:50:43 2025 by rpki-client