Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: pkqE05lKmEmzKPsYmhnqROxcD/6762W0iBJpLiPrlB4=
Subject key identifier: 62:FC:7B:89:27:BE:76:D9:03:BC:AD:0A:AA:F0:C0:22:F0:F7:F7:57
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 01987CAE5BFFF05F4FD912297B4D9B57CD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 00:00:58 +0000
Manifest this update: Wed 06 Aug 2025 00:00:58 +0000
Manifest next update: Thu 07 Aug 2025 00:00:58 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: oeBRIkhCXnrMlK+s09IDkxkIIoJ4aI3d1qvr6YpCtxM=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:5b:ff:f0:5f:4f:d9:12:29:7b:4d:9b:57:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Aug 6 00:00:58 2025 GMT
Not After : Aug 7 00:00:58 2025 GMT
Subject: CN=62fc7b8927be76d903bcad0aaaf0c022f0f7f757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:b7:2f:00:1f:6d:4d:2b:aa:76:1b:d9:9c:
c4:f5:40:4b:f3:f9:30:12:6d:d9:df:8f:3f:58:7f:
d7:ac:a0:5c:86:89:07:2a:df:ed:a9:62:04:63:44:
11:6c:e7:e7:25:92:d5:6a:19:7a:52:7f:9b:4c:b7:
38:4f:1c:b8:f2:05:d8:a0:91:37:50:6c:af:ec:eb:
d2:2c:84:34:68:78:eb:40:0a:6a:26:a1:3a:06:ee:
96:fd:8f:96:0c:61:57:a2:17:cb:09:81:c1:fe:02:
76:35:52:89:fa:50:ff:14:8f:4e:4f:e1:84:e9:91:
39:cf:c7:d9:2c:77:d7:d4:19:bc:cc:cf:a4:6e:a4:
0f:81:9f:eb:40:9d:0e:f4:38:01:85:b8:b9:5d:a1:
fb:c5:14:1b:80:01:3e:95:49:db:0f:e0:72:5c:a9:
80:8b:b4:45:4b:f8:97:cc:fb:97:d1:9b:ec:8f:68:
9c:17:8e:21:6a:ff:ad:e7:25:70:b4:d8:ed:a8:95:
9b:3d:6d:98:99:88:8c:29:02:2e:ec:a0:cd:87:e0:
e5:1d:c4:22:9c:f8:54:65:50:60:a4:c9:75:12:39:
23:b3:93:6f:d5:e8:da:85:9e:4e:66:8d:40:7a:f1:
11:22:5c:23:cc:66:58:d4:f6:11:a3:d9:24:9c:70:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FC:7B:89:27:BE:76:D9:03:BC:AD:0A:AA:F0:C0:22:F0:F7:F7:57
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9f:72:c6:4c:ad:59:88:50:fe:46:4e:a2:91:9e:04:47:a3:
98:eb:c7:d3:a8:f9:61:40:6f:37:1a:99:8a:57:cf:e5:87:66:
dd:c7:16:a2:8c:f7:f6:00:09:1c:ad:ab:17:df:cd:cb:1d:23:
83:aa:54:08:67:f0:14:c4:ab:2b:25:ee:d5:2e:a9:48:4b:70:
43:9f:79:c9:91:2f:60:1c:06:ea:63:2d:27:cd:86:66:fc:3b:
f7:43:ad:92:cf:ba:7e:50:db:2f:d4:a8:50:ec:21:0e:ee:49:
96:1b:a0:50:a6:7c:15:7d:aa:66:4d:9e:d3:52:6f:04:73:f4:
f1:ad:10:dc:28:57:f0:79:41:e7:12:80:20:ec:13:61:b8:28:
88:fc:2d:ce:7d:b4:00:15:fa:b8:e3:47:97:cd:b5:0e:ce:3f:
85:e3:26:4e:fa:32:a7:0e:5d:00:fd:87:58:08:ed:d4:b9:8a:
41:8b:7e:58:cc:6c:2f:da:8f:87:d1:21:e1:b2:69:58:2e:2c:
78:06:ef:f9:f8:71:da:8b:81:f5:c5:3e:57:bf:4a:7a:37:cf:
65:64:d0:3a:5d:b0:fd:5e:9b:f1:e8:ce:95:13:20:97:95:ba:
81:d6:74:72:95:f6:e0:0e:c7:a3:68:28:17:9c:05:7f:9c:32:
ae:11:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:26 2025 by rpki-client