Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: RlmLf3efFZgRAI/3GE/D6j6BKDe9TUdNU06a4msEpuk=
Subject key identifier: 6B:41:15:9F:2A:08:75:4C:1F:BE:F2:57:9B:ED:C6:6D:75:EC:43:79
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 01988A32F5361BB882932E3B7BA929B10E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 15:00:52 +0000
Manifest this update: Fri 08 Aug 2025 15:00:52 +0000
Manifest next update: Sat 09 Aug 2025 15:00:52 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: gws2PaNCXWyGm0fN39lY27MKJzix3D6mb+FAP0YEZ6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:f5:36:1b:b8:82:93:2e:3b:7b:a9:29:b1:0e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Aug 8 15:00:52 2025 GMT
Not After : Aug 9 15:00:52 2025 GMT
Subject: CN=6b41159f2a08754c1fbef2579bedc66d75ec4379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:24:fc:61:80:cf:ea:27:b1:7b:12:90:30:
ff:63:b6:e7:dc:ae:fb:8a:a6:08:74:b0:64:66:3d:
36:7c:75:18:c1:07:63:fc:55:39:52:82:76:83:eb:
e7:b9:2e:7a:35:17:62:c6:ee:fc:b5:d4:ef:63:77:
69:dd:6e:75:ef:37:65:93:3e:61:52:19:ec:c7:0a:
1f:ec:bd:10:27:8e:ab:d6:df:3c:03:a8:f1:60:9f:
fd:81:08:ec:d0:5e:11:6b:23:98:f0:ac:34:00:10:
48:2d:ad:39:23:f8:a7:0f:a1:ee:6f:6f:41:2b:e7:
4e:02:3a:6d:72:40:29:8c:72:30:87:36:62:e7:a3:
b6:a0:98:b1:1e:fb:d0:c1:b6:66:e9:56:bb:54:1f:
b5:83:b0:14:05:76:44:50:93:52:1a:a9:7c:53:83:
1e:fe:9b:42:8d:48:4b:cc:68:61:60:4f:33:0f:55:
22:25:b0:47:37:7b:89:17:1f:b9:ca:77:17:a7:22:
55:3b:09:00:69:d2:62:9c:58:a5:ac:6c:2d:96:f6:
72:3e:87:76:c8:26:38:e8:08:73:06:dd:26:49:20:
0a:eb:9f:5f:c3:44:e6:27:a9:4d:39:e2:ca:33:da:
3c:06:3c:d6:2c:2a:95:bc:a0:79:98:7c:6e:b2:f1:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:41:15:9F:2A:08:75:4C:1F:BE:F2:57:9B:ED:C6:6D:75:EC:43:79
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c1:3d:8f:02:33:f5:79:3e:f7:22:4a:8b:b6:38:96:23:ae:
21:e6:3e:cb:8e:51:85:f7:d3:9e:a2:3d:c5:d2:ac:41:33:c5:
3f:77:50:8a:c7:3c:46:67:60:87:11:9e:75:99:78:db:a2:86:
22:46:c3:1f:e7:a4:5e:92:27:6f:37:00:76:9e:6e:c9:dd:b1:
2a:9e:9c:98:e7:fd:19:a0:39:16:2b:ec:7f:c4:73:4a:c6:00:
2a:87:f7:f7:e1:7f:16:f4:6c:01:49:7d:1f:1b:d0:c7:37:ac:
64:11:e0:5f:9e:c9:99:11:dc:4e:f3:86:7d:10:30:1a:7d:09:
22:5c:1f:1c:d2:a5:0a:60:9c:f9:b7:df:32:ce:df:8c:38:72:
a0:a9:3b:49:22:b7:65:83:f1:d9:20:c9:89:7e:d0:0b:33:d7:
d3:d7:ea:27:de:b7:83:b4:57:e2:bb:78:dc:49:c6:03:50:d0:
99:78:89:63:3d:38:d8:27:e7:b9:f4:8f:7a:83:27:37:80:ba:
8e:34:00:5d:ce:f7:d2:70:38:c8:d0:be:41:67:4b:ab:87:ff:
9f:fb:78:aa:45:49:ae:36:ec:8d:90:bb:6d:f0:ee:98:ff:77:
ce:c0:ec:ba:d2:cc:c3:8c:83:3f:3e:81:89:35:4b:73:07:8f:
2b:d6:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:15:22 2025 by rpki-client