
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier: xylkED3U2oc2AaCLoDh46boVRwxJvz/xi92z60haIW0=
Subject key identifier: FF:AA:5B:58:89:C4:51:28:C5:E6:A5:90:B2:0B:F6:E7:37:E6:CD:21
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 01989FDF56C2EF51604453ED9DD908B1D061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number: 060B
Signing time: Tue 12 Aug 2025 20:01:10 +0000
Manifest this update: Tue 12 Aug 2025 20:01:10 +0000
Manifest next update: Wed 13 Aug 2025 20:01:10 +0000
Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: L50BcQwOuV2CxQQ+drv3Qbzy5M0ZcKq0WrBYkS4PkdI=)
2: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (hash: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:56:c2:ef:51:60:44:53:ed:9d:d9:08:b1:d0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Aug 12 20:01:10 2025 GMT
Not After : Aug 13 20:01:10 2025 GMT
Subject: CN=ffaa5b5889c45128c5e6a590b20bf6e737e6cd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:e2:89:17:f6:aa:57:b0:2f:df:ed:a4:a3:
ca:92:be:37:cd:cc:58:0a:1d:95:8a:9c:cf:cc:d6:
4d:a6:13:ef:ad:16:39:1a:05:a3:4e:c8:42:64:30:
61:3c:6c:67:94:97:e8:e5:51:63:99:a3:d0:c6:6b:
9f:33:4d:7e:2e:82:81:de:45:ec:15:f4:ea:b6:09:
80:a7:60:7b:04:6b:6b:ae:a4:f4:53:05:c9:06:b8:
d9:6d:ab:19:d7:1e:98:fa:82:d0:57:a5:c3:c9:01:
6e:a1:6e:d8:2c:8c:d0:ec:02:6d:89:d9:2b:37:34:
ae:ed:ab:7c:af:74:ee:6f:0b:2f:d2:4f:31:a5:f5:
f5:30:a1:76:4b:3a:6e:74:37:eb:6b:19:37:55:da:
e8:95:d3:e4:ac:6e:b4:03:77:a9:1c:69:53:37:d5:
2d:53:9c:36:8f:1a:80:e4:f2:0d:84:da:76:ba:bf:
34:8d:a5:1f:84:4e:22:cd:fc:c6:b9:8f:80:f3:56:
d0:2f:7a:24:94:f2:cd:bb:8b:6a:95:f9:34:53:a3:
c0:32:19:43:7b:08:bc:ec:b5:ca:7e:36:b1:62:ac:
c2:84:da:78:58:39:6d:68:39:3f:e6:bf:21:ba:8b:
96:2a:04:cd:5b:be:57:05:2d:48:31:f5:ef:f7:1f:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:5B:58:89:C4:51:28:C5:E6:A5:90:B2:0B:F6:E7:37:E6:CD:21
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:05:0b:4c:8c:0d:50:15:bc:40:66:1c:3b:f4:11:6d:74:1f:
b4:b3:71:ea:95:9f:ed:9f:36:ae:b2:12:56:71:76:54:72:3e:
85:98:f5:cb:ae:44:9c:3c:98:b3:a4:16:a8:d8:7b:74:1f:84:
94:94:b7:12:d2:cb:1b:31:7e:26:da:a5:3e:84:8b:8f:a5:b4:
d7:e8:8f:54:16:1a:a8:a6:62:e5:c8:a4:c4:7c:32:d7:da:50:
e7:be:d2:9e:0e:68:ed:5e:39:9b:5c:d5:b2:45:9b:1e:30:10:
5d:55:b7:b1:46:01:44:73:92:10:fc:a4:b3:c5:d6:6d:a5:1c:
a1:7c:e0:97:d6:a0:ed:26:f6:8e:57:72:c3:75:dd:ff:d1:a6:
3c:e7:35:18:9e:1f:69:43:8b:e3:2f:a2:51:33:68:36:db:79:
93:5b:3a:91:ca:fd:30:b0:71:35:66:82:92:60:ef:1d:bc:e0:
6e:59:51:0d:28:05:22:98:55:95:53:8a:1b:71:2f:e3:e0:cd:
fe:e8:cf:8d:91:34:65:ae:f7:db:20:f3:a9:b6:81:65:e7:3a:
e2:79:ed:dc:c3:34:f3:ee:ab:6f:99:3f:77:6c:5b:aa:f6:a3:
a9:22:e0:14:ac:8f:aa:af:56:a4:54:12:41:38:c2:6e:69:5f:
52:cb:16:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:27 2025 by rpki-client