Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: rgZAs3hFlV8Lq0bxP3ucmOE6BlxWFbP6B7nt3z17Yug=
Subject key identifier: 5E:44:77:B1:E4:BB:37:50:66:40:97:F5:CB:CF:66:C8:CC:85:44:9B
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019893A450E5AB16A2B792423FD76335D892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 11:01:16 +0000
Manifest this update: Sun 10 Aug 2025 11:01:16 +0000
Manifest next update: Mon 11 Aug 2025 11:01:16 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: WFVTG6NuAQT9YY58yo02P7Y3q7Cx1oIQI/baVRIkahA=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:50:e5:ab:16:a2:b7:92:42:3f:d7:63:35:d8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Aug 10 11:01:16 2025 GMT
Not After : Aug 11 11:01:16 2025 GMT
Subject: CN=5e4477b1e4bb3750664097f5cbcf66c8cc85449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:b1:7f:ff:27:a8:23:f3:83:bd:20:6a:ce:
24:22:69:d1:fd:b4:fc:8a:52:40:17:6c:f9:98:44:
9b:de:24:4a:c1:cb:7d:a9:7e:f5:b5:0d:e8:e6:12:
f8:ea:b0:f5:f4:78:06:fe:94:eb:d1:1c:53:d6:eb:
24:87:fc:e8:be:d1:3c:3b:b8:44:31:f0:6a:35:5f:
17:9a:ed:a7:49:b6:97:b4:a3:69:1a:05:40:0d:54:
bb:15:e9:e6:09:da:28:4a:53:df:5d:ef:b5:e5:1f:
42:94:e0:5f:0a:de:95:e1:fe:32:5f:88:a8:0a:03:
50:4f:21:12:86:49:20:1f:a6:9c:9e:12:ef:27:24:
b4:67:1a:fc:82:95:ed:de:a3:19:aa:57:b9:03:b6:
96:4a:3d:90:a6:70:e3:b0:c1:fa:49:d2:8c:47:46:
ec:ee:53:7d:95:8e:82:8f:e1:58:2f:a1:db:58:1e:
0f:ea:dd:45:82:20:f5:aa:66:8a:ce:41:73:c7:88:
55:76:ef:bc:6b:6e:cd:cb:15:f4:1d:9b:73:7f:62:
99:ae:c6:fc:2d:f8:50:1b:34:54:37:f9:05:49:4f:
f3:0c:7a:8b:ea:0b:a0:ca:86:e6:2f:18:c0:6d:38:
98:84:ad:98:fd:a6:0c:72:81:8e:11:ca:87:5c:c8:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:44:77:B1:E4:BB:37:50:66:40:97:F5:CB:CF:66:C8:CC:85:44:9B
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:83:58:45:a5:19:8f:ff:89:8a:73:15:c8:d3:3c:52:4d:b4:
1f:6f:c5:7e:da:e1:60:a5:6a:9e:0e:08:2e:4c:5f:fa:c9:4c:
fb:3c:5b:c4:43:e5:ff:3f:9b:02:75:fb:44:d4:23:ca:8d:4b:
9c:97:f1:69:4b:99:e2:0e:d2:e7:ed:73:34:79:7d:fd:95:42:
b9:6f:74:d0:86:91:74:36:da:dd:cc:10:3b:f1:55:48:bd:ac:
13:76:20:51:fb:67:82:d9:54:05:bd:13:9e:25:8b:a2:df:9c:
80:55:1d:ec:65:bb:12:d7:af:ce:4a:d1:3d:fc:92:0c:2c:4e:
de:07:c3:1f:37:21:e6:77:24:99:29:7f:1d:06:85:e1:5e:68:
8e:d1:97:19:59:b6:e0:7e:29:0d:ab:cd:41:da:0d:a6:bf:18:
b7:f8:1a:1b:08:14:ec:8e:98:49:22:e6:6d:43:b9:e8:65:6b:
02:a2:0a:0d:21:a2:d9:2c:c0:f0:79:2f:19:41:ef:13:d1:b9:
54:c8:02:48:7a:01:aa:dd:f4:77:58:d5:95:3e:6d:fc:c2:5c:
a8:0e:22:50:ba:85:72:8f:62:7c:ba:96:c9:32:9c:6e:01:3a:
08:7a:ab:03:43:86:91:70:9f:5d:23:90:d7:0a:9a:bb:f1:2c:
8b:4d:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:34 2025 by rpki-client