Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: r7OiYsmkcbr6BdlWh/fcV6nIBokD6y/tQato/DBOLVs=
Subject key identifier: 7A:CF:64:35:52:65:E9:72:BF:D6:75:47:98:80:7A:FE:8D:DF:F8:DF
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 01987B9C2E02B6183DB0FFB58AE06BFDA6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 0173
Signing time: Tue 05 Aug 2025 19:01:29 +0000
Manifest this update: Tue 05 Aug 2025 19:01:29 +0000
Manifest next update: Wed 06 Aug 2025 19:01:29 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: 3dsDuTtBj2uL+oY5EyHL1VcXO9n0wSEWFBWnBWvVqDQ=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:2e:02:b6:18:3d:b0:ff:b5:8a:e0:6b:fd:a6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Aug 5 19:01:29 2025 GMT
Not After : Aug 6 19:01:29 2025 GMT
Subject: CN=7acf64355265e972bfd6754798807afe8ddff8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:d2:bc:5e:e3:1b:77:fa:4b:52:9d:f2:09:
24:8a:5e:ad:6e:56:33:ed:d5:19:13:b4:15:ff:e0:
49:65:c5:e0:40:6c:d4:12:49:78:3c:bd:8c:51:25:
44:76:3c:ee:83:96:2a:9e:50:15:15:90:d3:64:26:
9b:91:8a:4d:dc:ff:db:e4:18:d8:43:6d:94:19:5c:
87:2a:19:14:1f:08:ea:c5:40:48:5b:0e:2e:8c:7e:
34:86:cf:71:85:bb:0c:ce:f9:d2:fb:90:a0:c8:f7:
04:a8:4f:34:49:2a:1b:d4:74:b6:d8:c0:d8:28:9e:
71:cd:f8:a3:78:de:ce:e1:4c:60:e0:64:d2:f3:79:
c1:94:0d:6e:20:90:63:71:9b:7f:ca:00:3f:eb:ea:
23:74:92:1d:78:cf:48:63:ef:fb:9e:76:b9:cb:37:
66:e3:a6:35:2a:76:94:3d:30:12:a6:a2:d8:de:31:
0f:09:80:d7:91:77:9c:ae:83:87:62:b0:32:2e:c3:
97:e8:50:ad:71:76:9b:7b:d2:b6:e6:55:2a:de:67:
f6:27:bb:14:ce:16:08:92:68:58:22:5d:dd:18:18:
d0:b0:81:cb:bf:2a:61:5c:f7:f7:5e:04:92:c8:9c:
0d:e8:f6:78:d5:be:e5:d2:1b:7b:fc:cf:16:64:a0:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:64:35:52:65:E9:72:BF:D6:75:47:98:80:7A:FE:8D:DF:F8:DF
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:bd:12:8a:ad:5f:d1:8b:9f:d4:93:6e:b3:54:c5:d1:ea:
6a:2f:64:2f:b1:da:67:c5:37:d4:f3:c0:6e:fe:99:04:c2:12:
26:12:74:05:0e:0e:aa:b3:d6:5e:78:82:8a:02:f8:f4:0e:8e:
c1:2a:ea:19:e0:af:cf:6b:d6:0d:a6:74:07:c4:23:ff:93:a0:
42:3d:69:51:34:d7:5e:f9:54:7d:5a:67:02:68:80:ed:da:37:
ec:63:57:ba:17:45:1f:40:16:42:74:18:10:c5:1b:09:fe:b0:
8b:38:03:8b:ed:21:8c:e9:7a:73:c5:a0:63:87:ee:cc:13:4e:
b3:33:5e:ea:39:4f:e2:5f:b2:62:7d:83:cf:3b:e1:b3:a5:ae:
7c:d2:a6:48:e4:85:f8:af:fd:b5:4d:ad:b7:8a:98:19:e1:eb:
35:8d:f8:8a:bd:4c:f0:b5:0c:ab:26:44:8e:66:19:cc:c7:3d:
ce:55:01:21:71:8e:3f:9f:82:50:b6:5e:30:ea:06:b2:01:eb:
a2:5e:88:72:b6:70:60:f0:4c:bb:e2:70:6b:ed:11:9f:4d:99:
f4:d2:79:ae:ed:31:95:54:e1:ec:83:69:92:67:84:c4:f1:ef:
b6:d0:05:01:db:45:21:32:79:7d:e7:e5:f9:1d:21:85:f6:97:
d1:a0:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:14 2025 by rpki-client