Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: 6Xl5le6mKcVHvfH1PjgMQTCJ4igf4uhtLxjdHuDonzw=
Subject key identifier: 05:A8:C6:5E:5C:D6:0C:C1:71:61:38:A0:FB:ED:A3:4D:14:91:35:08
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 01987BD239EBCCCB4F7BB3D5A7A11F09DC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 0240
Signing time: Tue 05 Aug 2025 20:00:31 +0000
Manifest this update: Tue 05 Aug 2025 20:00:31 +0000
Manifest next update: Wed 06 Aug 2025 20:00:31 +0000
Files and hashes: 1: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: SHjNoALsHTFlWMBNCq2VVBobgWdNefJaBJD9lVBzMQs=)
2: tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa (hash: 4b/TkGaMkrVO4glHhMzqT0WO1c7HhD8mCemv7gvN81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:39:eb:cc:cb:4f:7b:b3:d5:a7:a1:1f:09:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Aug 5 20:00:31 2025 GMT
Not After : Aug 6 20:00:31 2025 GMT
Subject: CN=05a8c65e5cd60cc1716138a0fbeda34d14913508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:be:80:06:f8:8f:80:4c:a0:0d:f0:59:f0:
a4:28:d4:cc:87:91:0d:6f:1f:77:04:f6:8c:75:5b:
2b:60:39:f3:65:e3:de:67:c1:63:03:b4:a2:62:e3:
d4:00:20:76:8f:04:f4:fe:fc:09:cf:4e:60:67:01:
96:9b:f2:4a:34:fd:a0:b4:95:85:4d:57:46:dc:7f:
8b:8f:72:dc:4f:82:f4:7d:f6:95:de:45:79:4e:b4:
44:88:4f:e0:9d:1b:19:22:87:03:31:6c:48:78:d1:
7d:3c:84:8e:80:6a:b0:3d:7f:58:b8:a3:c7:61:58:
45:1d:78:a3:f8:e7:26:73:22:91:a4:d1:1e:bb:ef:
bb:2a:08:95:51:79:dc:12:ed:3c:c5:a8:cc:4e:46:
67:db:18:f5:58:c4:6c:10:01:8d:65:1e:d9:1e:7c:
7a:9e:33:59:b8:fe:ef:b0:f5:c1:1d:86:f3:84:5a:
15:14:6a:ad:82:f5:3c:bc:f6:ee:36:dd:c0:32:87:
12:ac:95:ef:86:64:a6:26:1b:91:95:a3:75:20:74:
2f:2d:f9:7e:f8:c4:b2:be:9d:00:1a:84:87:ca:04:
97:f9:29:79:e1:ef:70:ec:1e:a0:f1:50:07:2a:e3:
de:ff:39:1b:0f:84:65:73:0a:bc:49:a1:00:d4:7a:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:C6:5E:5C:D6:0C:C1:71:61:38:A0:FB:ED:A3:4D:14:91:35:08
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:04:8f:2b:a6:e7:5b:17:fc:e2:eb:85:60:cf:66:55:57:c3:
b6:f3:67:af:d0:72:f4:90:6c:b0:26:94:58:fe:68:cd:f0:da:
d6:56:a8:ab:89:f8:14:ea:f8:74:7c:d3:1b:c5:df:f8:6b:b2:
cb:46:9a:e4:7e:65:70:9d:13:91:07:10:81:61:81:2f:8f:44:
50:12:4b:3c:a3:a1:50:34:81:fa:0f:d2:d2:92:df:58:d7:ab:
fd:a8:a2:82:5c:af:c2:49:59:1e:41:b5:48:55:97:f4:f4:20:
d3:92:30:1b:1a:9b:7d:49:04:78:8d:23:9b:40:9b:55:ae:0f:
02:e7:2d:c1:04:47:fa:fe:ea:c4:79:c1:9e:88:99:ec:85:07:
4c:21:48:3f:2c:65:eb:10:98:bb:12:f9:f0:07:97:dd:a2:60:
01:64:45:50:79:d3:25:98:f6:1b:41:2e:3f:a3:8f:29:ee:93:
be:4e:ab:e2:a0:5c:8d:da:76:f3:31:1b:63:94:ba:e6:06:63:
ff:ed:05:94:c6:ba:ad:8e:27:7d:e0:0f:aa:91:c2:a9:96:01:
54:f6:3b:04:8a:6c:4b:bc:cd:18:5f:c5:f3:2c:cf:0f:ff:48:
14:f1:fa:74:28:78:c0:14:b6:01:40:65:6b:67:ca:e5:53:68:
b2:02:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:14 2025 by rpki-client