Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: iiSPZBobvL7H9DT9rKeNy5oXTElHA4yHOcmqlrPXpc8=
Subject key identifier: 27:DB:15:79:BB:A3:AD:54:CD:E0:0C:9D:F5:A3:95:A7:D8:42:E6:07
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 01989034F215A135CD18B0DA9507F9702F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 19:00:45 +0000
Manifest this update: Sat 09 Aug 2025 19:00:45 +0000
Manifest next update: Sun 10 Aug 2025 19:00:45 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: mtCol2/UTxMQBVKCwAGYa4yKktF8hLskgpkVAoeO96o=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:f2:15:a1:35:cd:18:b0:da:95:07:f9:70:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Aug 9 19:00:45 2025 GMT
Not After : Aug 10 19:00:45 2025 GMT
Subject: CN=27db1579bba3ad54cde00c9df5a395a7d842e607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:23:bb:7a:a9:2b:f6:96:6b:ed:55:a4:bf:
db:48:41:18:00:bf:22:f9:72:34:38:46:e7:7a:25:
a2:98:42:c4:17:5a:a7:b4:86:2f:1b:97:61:e6:28:
24:c8:4d:f8:3c:c2:3b:8e:ca:ff:59:4f:16:16:c2:
8e:05:c7:20:6d:f1:9e:14:17:d8:e0:ed:d5:2f:2d:
97:b4:64:0d:c9:f0:f0:c1:f2:cc:c2:6d:fc:c6:77:
b3:01:9b:09:c0:2f:a2:07:8e:5c:47:b8:41:99:a9:
05:ba:54:59:2f:71:18:83:8c:c1:05:d6:d6:94:71:
e0:c5:73:0a:8f:2f:19:97:f6:86:57:63:25:74:58:
95:b7:e4:ec:b1:fe:09:06:23:83:f8:dd:c7:62:7f:
58:34:bf:f6:08:f2:6e:29:05:4a:06:e7:b0:c7:15:
e5:4d:c2:cd:49:09:1b:5f:74:c2:d2:6c:1e:ef:5f:
86:ce:4b:ab:f5:44:71:b1:72:2b:ee:b6:d5:ce:05:
a2:52:ac:13:f6:8d:ef:02:cd:70:86:bc:7b:35:b8:
b3:c1:5e:e1:a3:30:2a:a5:29:6a:2b:ba:39:c0:8d:
b5:88:54:2f:94:c5:be:88:e3:ac:b6:73:19:7f:50:
21:ab:64:b4:49:c8:f1:c4:56:2f:68:81:d3:3b:57:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DB:15:79:BB:A3:AD:54:CD:E0:0C:9D:F5:A3:95:A7:D8:42:E6:07
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:53:13:ce:a6:73:75:01:aa:d6:53:38:f2:03:87:55:dd:1b:
d8:74:12:8e:a8:69:be:86:27:75:94:29:ec:6e:5c:12:c2:8c:
78:aa:ef:37:fb:99:c3:03:e8:52:fe:39:77:a9:20:b2:a8:0c:
21:1f:dc:ef:93:32:2c:8d:c7:c3:38:b0:03:af:0a:db:d6:9b:
d3:9e:70:99:50:1e:e4:d4:88:97:a7:c3:bb:91:14:2d:4f:f3:
a0:82:6c:95:81:5f:a9:b7:53:99:1b:71:b3:46:35:86:21:fc:
6c:e4:34:20:cd:77:9d:17:51:e7:87:a6:bb:23:3f:ab:cb:65:
b8:39:c2:3c:9c:17:89:0f:93:22:8d:47:52:33:5d:f6:ba:9d:
03:bc:d1:33:32:8c:b6:f2:01:74:c3:1a:44:fa:af:46:3c:ca:
f4:7e:3a:8a:7b:21:cc:79:3c:74:3d:63:80:ae:c2:4d:1d:2f:
38:34:51:00:4d:58:c5:e6:39:53:0e:bd:1a:7b:a9:a2:e4:a6:
a1:27:0c:fc:40:5e:91:8f:93:2c:fd:f3:6b:ea:a5:e2:0e:13:
70:61:43:58:b5:3d:57:f2:f8:34:63:3f:12:40:48:92:a4:72:
c7:df:da:24:f1:e2:0d:c5:60:b5:f7:8b:a5:5a:bb:da:73:d1:
af:69:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:09 2025 by rpki-client