Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: jlivnIPLTxB9UHzaEVEkoX1z8/WCKcxz1Hnv9dC9gUw=
Subject key identifier: 48:B9:CB:FE:23:B4:29:78:79:61:F6:7A:C0:92:E4:3C:C8:B3:2E:70
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 0198A4CEE430176EEF960340C04E453D3646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1632
Signing time: Wed 13 Aug 2025 19:01:18 +0000
Manifest this update: Wed 13 Aug 2025 19:01:18 +0000
Manifest next update: Thu 14 Aug 2025 19:01:18 +0000
Files and hashes: 1: ECD7apX3eHOOfrh7KlF7PFjYZG4.roa (hash: 71V9g38SO7JBAaQym2ThymDLgJtxxyPJi6oj0bVn0zY=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: fWHviQYKprAV/YFCrlTpSmkBGdxjV5rshBWLyPa47Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:ce:e4:30:17:6e:ef:96:03:40:c0:4e:45:3d:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Aug 13 19:01:18 2025 GMT
Not After : Aug 14 19:01:18 2025 GMT
Subject: CN=48b9cbfe23b429787961f67ac092e43cc8b32e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:42:69:10:9d:07:67:83:33:53:f1:28:a8:
24:f1:21:86:31:35:6b:47:b9:c9:3e:20:8e:f4:fd:
e5:4a:d1:40:1f:a6:1b:55:8c:e3:e3:57:87:e7:2a:
57:00:f8:e4:3b:47:c2:c5:11:e5:b0:ad:ab:30:b5:
2c:85:d0:de:46:37:a5:7d:4a:c5:ac:6c:d8:5b:f6:
b8:81:ac:0c:84:1b:58:05:eb:e4:10:e1:84:34:d2:
0a:f1:3e:a8:61:68:c8:0b:c5:fa:6b:4b:5f:28:19:
f0:e5:20:05:be:b0:54:72:5e:48:41:a2:8d:6b:cc:
a1:c8:5f:65:16:58:10:ec:65:6b:71:2c:0d:1d:7c:
a4:07:76:22:b4:d9:a4:8a:18:31:7a:70:43:cd:ae:
36:9b:37:df:df:b2:ae:0c:8a:7a:3a:b6:ae:a7:41:
83:fa:d4:98:ff:07:88:88:1f:14:c0:e8:4e:d5:ba:
48:2e:e7:a7:32:69:e4:64:1e:9a:2e:24:87:2d:19:
3f:36:56:4e:58:54:a1:5b:64:a7:3e:93:8f:3f:e2:
c0:5f:70:cf:69:db:17:ba:ae:bc:26:d7:f7:e3:a4:
98:3a:7b:83:94:d6:88:cc:77:20:0d:70:70:af:33:
6a:3a:07:64:28:aa:5b:e8:f4:27:f1:78:b4:ec:5d:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B9:CB:FE:23:B4:29:78:79:61:F6:7A:C0:92:E4:3C:C8:B3:2E:70
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:97:23:24:e0:bb:fd:6b:3f:08:96:68:e2:02:7d:77:bb:fe:
1e:3f:53:c1:59:38:e0:56:d8:17:8a:10:1b:26:e7:08:fc:56:
e2:6b:15:8b:1b:63:70:36:21:5f:8d:c1:32:ef:72:8c:17:09:
e8:e0:52:e4:89:e3:0b:8c:06:7c:5b:84:6e:9e:83:40:e7:e5:
e7:3c:71:49:ef:ed:34:9f:11:ac:4e:90:79:90:65:8c:f8:ca:
56:2f:ea:20:28:81:21:8a:3f:9c:5a:4b:66:70:7a:b1:d0:0c:
34:42:83:6c:67:6a:a2:4f:d4:1e:da:8e:19:f4:7c:9a:5f:73:
cd:fe:b9:7d:92:a5:4b:00:55:60:36:cc:7a:f6:a0:53:fa:37:
b2:a4:e9:e5:f0:f3:0a:4e:6d:1f:6d:59:5f:67:73:9c:31:ba:
39:47:58:e8:47:8f:7b:61:c1:ff:d9:10:db:ae:5a:69:f0:ba:
1d:90:68:48:db:b3:69:df:6d:cf:6d:c2:c7:61:a7:fc:84:4c:
d3:92:ee:1f:28:f0:c3:63:4b:9a:af:2e:2d:ca:15:62:f3:dd:
04:01:f9:19:8b:40:5a:7b:ff:b0:01:3b:0e:cd:d5:21:fb:67:
c3:61:c4:f4:84:0f:b3:50:c1:18:b2:3f:b6:be:60:52:94:1d:
51:69:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 21:21:11 2025 by rpki-client