Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: +il7z+1M9Y5LT5/zjiQMlKYeP7+4l2Z2uD0SFRblACA=
Subject key identifier: 41:2E:5E:D7:F6:8B:6D:47:00:63:03:4B:46:2B:F5:9D:C5:18:60:C8
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019893DA79FCC1378569D6CADF255181A1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0177
Signing time: Sun 10 Aug 2025 12:00:25 +0000
Manifest this update: Sun 10 Aug 2025 12:00:25 +0000
Manifest next update: Mon 11 Aug 2025 12:00:25 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: AAUCaW+fj7Zn8lqrkjoIVXtPUCNINmWbAoSiRcst1Is=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:79:fc:c1:37:85:69:d6:ca:df:25:51:81:a1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Aug 10 12:00:25 2025 GMT
Not After : Aug 11 12:00:25 2025 GMT
Subject: CN=412e5ed7f68b6d470063034b462bf59dc51860c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:34:02:d3:c9:d9:f9:df:a1:42:49:f5:b8:
da:f0:9e:79:4c:27:3c:a7:f4:51:52:35:7b:19:ac:
2c:13:34:b7:73:d0:64:3c:0d:76:9d:ff:48:a4:1f:
39:63:ef:78:b8:fe:16:7e:41:d1:94:cc:20:d5:6c:
1a:99:75:64:2b:87:ca:14:0c:52:e2:d0:9e:fa:0d:
dc:b6:86:bb:66:88:6b:97:44:b6:e2:63:8e:fa:63:
6a:5b:73:a1:2a:03:8d:e8:79:14:4e:a8:46:31:14:
09:93:26:ed:0a:11:a8:98:b4:ca:c7:b8:e6:c2:4b:
d0:e6:5e:da:4b:ed:66:69:3d:6b:0b:a2:bb:cd:9a:
34:1b:0b:f2:e2:07:a2:a3:2d:a2:de:45:67:49:d4:
a7:35:dc:e3:e9:b2:1f:84:ba:28:dd:06:a1:fa:31:
43:8f:7a:09:9f:00:c7:09:01:ce:da:d5:4e:3c:26:
4f:ec:41:0f:cf:90:c8:20:d7:97:43:f7:9a:ff:2b:
d5:c7:df:cd:98:71:ef:9d:e8:75:f2:57:d7:43:21:
74:7f:47:49:8e:f6:7a:a9:ea:3d:49:7a:25:7d:b7:
07:8a:bf:53:fc:cb:2d:2e:5c:f8:95:32:4a:cb:d1:
4e:42:10:e5:30:38:fb:b7:9d:69:e2:1d:60:da:7a:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:5E:D7:F6:8B:6D:47:00:63:03:4B:46:2B:F5:9D:C5:18:60:C8
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:35:37:27:15:cf:08:17:9e:00:b1:b6:32:42:64:0a:c7:d5:
a4:bc:c2:67:dd:81:7b:b4:4a:02:33:0a:a1:e5:e6:c9:5c:2b:
90:3a:d6:67:2b:8e:a8:68:e5:d2:17:ed:53:62:3f:1e:78:a3:
e1:cc:cc:3b:81:04:66:76:4c:62:8d:fa:6e:e2:b0:37:f3:aa:
f6:6b:e9:cd:c4:72:de:45:d0:24:16:d2:bb:b1:0c:41:3a:3c:
e7:ab:f1:fc:55:db:0f:f0:8b:2c:fb:dc:13:0d:d4:e7:da:da:
ae:b8:69:d6:d3:a3:03:91:0c:8f:2f:10:6c:50:bc:f8:d9:3c:
ee:1c:18:ec:69:9f:39:20:c4:88:ee:92:86:a5:1b:48:b3:3f:
a9:3d:98:da:2c:5c:5b:36:71:df:eb:16:dd:a5:8d:58:08:f9:
79:c1:d1:a9:0f:c6:97:0d:89:1e:e1:3a:e3:d4:f9:73:bb:03:
78:6e:82:b4:ab:67:71:a3:03:8a:04:66:c4:2d:09:0c:16:b2:
13:c1:04:7e:8a:37:22:7f:69:33:75:3c:e0:23:49:b8:fd:56:
f2:7e:02:05:32:8f:e8:77:70:3c:2b:a9:0e:22:5e:d1:d8:00:
57:b6:d6:cb:1c:b3:f2:73:ae:b1:e4:f6:92:cd:d6:b4:7e:22:
89:66:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:54 2025 by rpki-client