Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: /RF1oqmmVIYbkwe0m0dr7nbEUqRcK6LqRajPJywB0G8=
Subject key identifier: 6A:BF:03:74:EB:E8:C3:F7:3A:E3:85:7B:74:03:1D:82:09:B2:AD:1E
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019888446AB0EAC9607B36598D6CC57B7C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0ABF
Signing time: Fri 08 Aug 2025 06:00:41 +0000
Manifest this update: Fri 08 Aug 2025 06:00:41 +0000
Manifest next update: Sat 09 Aug 2025 06:00:41 +0000
Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=)
2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=)
3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: TpRlFBxAK7mHHKM61VE17+1HKMhvPni4x9kVkvfEvDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:6a:b0:ea:c9:60:7b:36:59:8d:6c:c5:7b:7c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Aug 8 06:00:41 2025 GMT
Not After : Aug 9 06:00:41 2025 GMT
Subject: CN=6abf0374ebe8c3f73ae3857b74031d8209b2ad1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:87:f2:29:e3:77:da:b4:63:fc:47:40:8f:
c0:68:80:d2:89:c7:3d:59:ab:f5:ea:bc:e6:93:60:
a3:33:bb:92:73:6a:12:3b:e7:17:15:8c:6f:6f:a5:
d7:20:35:39:fc:2e:e2:c8:7d:cb:1b:f9:62:90:f1:
10:78:68:6b:ea:66:36:4f:44:f8:2a:03:1c:30:22:
3f:9e:2f:7f:49:c4:0b:46:6d:a6:55:2c:08:eb:b0:
fc:f1:76:45:22:7f:d8:fc:91:78:5a:27:77:41:a9:
68:c1:01:0d:0b:5a:b8:6b:fa:31:55:55:4e:37:84:
0c:6e:70:ca:61:0a:14:58:aa:ed:37:bf:cf:ad:7f:
f7:34:4e:6d:9e:55:51:8c:6d:2c:e9:1f:c6:38:48:
95:2e:72:12:07:03:75:52:db:3e:67:a8:6c:51:80:
c6:75:e6:67:6f:1a:4b:92:f5:1c:e6:2e:a2:65:d1:
b9:14:2e:2c:e3:0e:98:fb:07:ed:6d:a2:aa:26:4a:
ab:9a:c2:a0:bf:25:c9:61:70:68:62:e4:b8:fd:81:
86:f7:84:38:6e:da:22:cb:af:31:4b:c9:f4:77:7e:
03:a1:70:9c:cc:da:89:f1:04:90:1d:34:25:61:a9:
7f:c4:b0:0b:f3:9c:93:7f:62:dc:53:64:6d:fb:28:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:03:74:EB:E8:C3:F7:3A:E3:85:7B:74:03:1D:82:09:B2:AD:1E
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c5:cc:26:dc:a0:61:d9:62:84:4e:84:7e:fc:9f:dd:8c:29:
47:b8:e7:3e:c1:86:18:12:bf:9a:87:38:e9:1c:9c:18:51:b4:
74:7f:18:bd:bd:2d:ad:83:fe:f4:32:a6:f5:2d:b3:32:e6:85:
8f:85:e6:20:4b:35:92:26:61:a7:11:1c:12:ca:71:39:af:e5:
39:6e:12:59:97:85:21:4d:8f:24:58:f2:a4:6e:33:ee:1f:2b:
ce:9c:08:fb:a7:62:3f:00:28:b0:83:cd:33:ff:bd:3a:32:d3:
6f:a0:10:31:cb:36:b0:4e:f3:8c:85:ab:d9:40:4a:c9:ab:0c:
40:d2:fe:94:86:67:4b:60:9c:eb:94:bb:45:58:39:ac:59:43:
a5:14:dc:07:ea:9b:5d:d1:ff:07:3e:2c:d6:3b:aa:cd:58:fc:
b3:66:4d:f3:5a:18:6f:b5:f4:0b:03:8d:2b:b1:72:41:d7:18:
32:57:bc:ec:dd:8e:c1:97:23:cf:b1:86:44:88:4c:82:55:bf:
58:db:21:e8:88:29:f8:e5:f9:74:0e:a9:57:77:f3:cc:1c:4e:
7e:89:89:cc:f4:3a:3c:72:e9:fa:38:08:f4:d3:03:42:8a:c9:
51:b7:66:de:44:17:37:54:83:d8:96:fd:54:a9:fc:ff:6d:fd:
8d:6e:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:05 2025 by rpki-client