Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: OjxLZLAC6/tJQ5FS/UtAfqDWSLU0u9SwE0e7PLGeUDk=
Subject key identifier: 35:AB:49:F9:1B:FC:15:B5:4D:31:45:27:77:83:FF:4B:49:82:95:1D
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 019873E3632A7BDEC9A58A77F11056F95706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 084E
Signing time: Mon 04 Aug 2025 07:02:18 +0000
Manifest this update: Mon 04 Aug 2025 07:02:18 +0000
Manifest next update: Tue 05 Aug 2025 07:02:18 +0000
Files and hashes: 1: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: NGgmvJEoxFaEyvqBn5vM65T1sNBaASoPeziFB7e0It8=)
2: iWu72NaaTSDAiJGqIVfKYfSk9Cg.roa (hash: BiHkYnw80HRUON814fdKI0ZwVn2DSPqeEkVU4t9Jnsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:63:2a:7b:de:c9:a5:8a:77:f1:10:56:f9:57:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Aug 4 07:02:18 2025 GMT
Not After : Aug 5 07:02:18 2025 GMT
Subject: CN=35ab49f91bfc15b54d3145277783ff4b4982951d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:ba:15:d8:74:9b:51:96:48:39:a3:2b:f9:
82:0c:4e:1f:74:43:1e:e0:3d:98:aa:57:5a:0a:00:
3f:2c:33:47:97:2f:a3:db:09:b2:6e:3e:c6:8a:47:
9a:7c:fc:ea:85:8a:e3:d7:f5:e6:e3:40:5c:68:b3:
6c:bb:34:9f:53:4e:ec:83:80:d3:1e:63:aa:93:6f:
31:d4:35:8d:9d:38:17:1e:0c:a5:09:0d:d9:51:79:
80:2c:6e:ac:83:66:31:c6:83:23:30:f9:4b:31:33:
03:ed:91:6c:e1:e5:21:55:ea:c7:26:09:b3:5b:ba:
c1:5d:d1:ff:86:2b:6b:c0:2a:69:21:3e:da:c4:ab:
56:51:b0:b1:11:1f:b4:65:41:35:01:71:5f:f8:2b:
8c:c9:a6:16:f3:fb:64:56:aa:18:c3:4b:19:50:75:
4a:51:2c:5a:86:11:6c:75:56:f2:93:b6:4b:b5:8d:
d7:70:fe:57:d9:1f:79:46:ea:6a:c0:d2:97:b0:5a:
04:49:c9:98:b4:47:bb:69:ce:8b:84:f2:53:ac:d2:
c5:db:a4:65:1d:0a:93:14:7a:c4:3d:ac:0f:d2:0f:
d1:60:ff:b8:98:08:f0:4d:95:67:6d:c6:fc:be:7d:
9a:3e:01:e8:0f:25:86:3c:fe:cf:7f:58:83:9a:a6:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:49:F9:1B:FC:15:B5:4D:31:45:27:77:83:FF:4B:49:82:95:1D
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0a:90:a7:25:5b:a8:af:e8:38:a1:d2:d7:99:f5:07:d9:c1:
cf:3d:1c:46:b0:90:25:59:74:46:88:c0:44:c2:e0:a8:a9:7c:
37:e0:56:66:76:5d:6d:db:db:e8:b2:86:5a:94:63:b4:6a:d9:
7e:50:5e:39:f3:a3:d8:a3:e9:43:10:e1:87:5b:75:38:54:e7:
7a:f9:60:88:e8:b0:88:88:6d:8b:f3:4b:81:68:b4:23:24:a7:
c6:22:00:09:37:9b:10:a3:79:23:5d:f4:b2:67:de:32:cc:60:
14:ed:75:da:ef:4b:7e:46:41:d0:85:47:28:da:f7:ed:34:1f:
b4:4e:33:90:79:92:ff:a3:cf:9b:fb:ff:5f:8b:92:2e:f0:4e:
c1:50:e0:9c:ea:75:86:ea:df:8f:c8:00:8d:f1:bc:4e:0f:93:
45:8a:5f:a8:dd:b8:b6:07:12:95:fd:92:3c:24:52:25:47:4b:
09:b6:3c:50:86:c8:1f:bd:61:15:8d:48:98:4e:47:e2:ad:40:
a0:8e:c7:e1:22:95:20:56:4b:fe:23:a5:8f:71:74:dc:77:a4:
97:39:d8:9e:3c:ac:f5:8e:72:41:3f:fa:d0:91:9f:39:b8:d1:
e0:df:e4:7f:8e:2a:48:49:42:e5:95:37:4c:4a:b9:b5:95:84:
b5:09:bb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:26 2025 by rpki-client