
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: bj/KaK50/7D+zgAdQ6LFeFgtD60ILdhYXK96ChqNqIo=
Subject key identifier: 8C:07:8E:DD:63:7D:B9:55:D7:AE:17:82:17:25:FE:E6:B8:70:45:3B
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019873E304236A7483116D6CB4DFB9734660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:01:54 +0000
Manifest this update: Mon 04 Aug 2025 07:01:54 +0000
Manifest next update: Tue 05 Aug 2025 07:01:54 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: mgzLJSy4flENy4mG6rFYiT0P5tSU64yWy3HpCSjSd+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:04:23:6a:74:83:11:6d:6c:b4:df:b9:73:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Aug 4 07:01:54 2025 GMT
Not After : Aug 5 07:01:54 2025 GMT
Subject: CN=8c078edd637db955d7ae17821725fee6b870453b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c3:94:e0:ba:f3:31:9d:f4:f6:2e:b1:1d:a2:
07:cd:0e:c3:d3:3a:fa:96:6b:db:22:0b:12:0b:37:
fb:96:23:93:82:fd:af:65:4c:fa:f9:fa:b3:3d:56:
26:36:b3:0d:00:29:cd:4c:f5:ae:66:e1:07:ae:6f:
fb:66:72:18:9f:ae:ed:6f:fc:9b:2c:97:39:ab:1a:
ba:c9:24:bc:56:c5:b0:97:2e:b0:4b:4b:4c:a6:32:
d3:d0:1b:82:d4:01:7a:80:f0:42:57:4f:d9:aa:be:
04:92:f9:bf:0b:8f:1c:a0:32:f7:a3:61:83:96:47:
c2:d7:9a:6e:bf:96:f1:b8:7d:a3:b2:f4:a9:3c:70:
a6:71:e1:6b:7b:eb:03:da:5d:e0:a2:3d:04:7d:af:
7e:cb:8f:a2:86:30:76:39:bd:9d:db:88:e7:12:91:
5f:ed:d8:a0:5b:d7:68:38:1b:bd:69:37:a3:c0:73:
ac:96:64:83:4c:78:7e:db:38:ae:31:25:ad:30:a4:
a7:dc:76:8f:d2:e2:88:8c:10:d9:1b:5f:e7:a8:b6:
cd:2d:64:e0:b2:37:17:01:8b:f9:a8:f7:9f:07:83:
be:c3:9a:bf:5d:20:9c:87:06:4f:eb:8c:fd:bf:43:
7e:0f:f9:ff:16:ec:55:88:e5:1d:e3:a3:42:0b:b3:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:8E:DD:63:7D:B9:55:D7:AE:17:82:17:25:FE:E6:B8:70:45:3B
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:54:07:a8:25:14:f2:f4:aa:52:c0:d2:00:28:e2:0d:37:da:
7f:2d:3e:40:f9:be:6e:bd:aa:92:ab:fe:f1:43:d3:1e:3d:de:
8f:06:22:da:6e:8a:59:71:5f:ea:7d:a5:a2:bf:a8:ba:0a:82:
a8:e2:45:23:06:99:1a:8a:ed:ae:c5:9f:dc:19:33:b4:e1:5c:
bb:ab:22:e1:57:a6:00:bb:2f:dc:a4:7f:f7:9e:da:78:e0:ef:
5e:1b:2a:99:04:fa:40:e4:7f:d5:a7:d3:be:d2:c4:20:0d:d4:
a2:19:96:a4:2f:58:14:c2:6d:30:d8:64:ca:61:40:3a:ea:85:
a8:5e:45:47:cb:e1:22:a7:83:04:49:88:19:55:64:7f:0c:c5:
00:33:27:0b:b6:dd:73:85:a3:04:3d:d6:7c:52:23:4a:1e:ba:
47:12:81:53:5a:76:0a:74:6d:f2:04:da:c4:b7:46:8a:3f:c5:
a0:4f:8b:5b:38:4d:fc:1c:0b:ff:a8:29:b6:7f:5d:bb:5f:a2:
79:e7:ac:c6:a4:a6:3d:a6:a9:66:c8:81:5b:cb:02:85:c5:cf:
1c:52:a2:d1:2c:d0:66:4b:83:5f:42:63:4c:7d:ed:2e:e7:37:
02:b6:4e:52:1c:81:85:ea:86:99:92:aa:72:50:0a:5a:50:95:
19:68:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:23 2025 by rpki-client