Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: MT8CWdPA2YIY4ZuIPgwBCPdjThq9O+JkdPF8uxyJF3U=
Subject key identifier: 5A:46:35:76:89:A2:76:2D:27:61:B7:3B:86:6D:5E:75:DB:1E:16:B2
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 01988E7DD2BFCAE569E7D555538EDF34F8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 11:01:07 +0000
Manifest this update: Sat 09 Aug 2025 11:01:07 +0000
Manifest next update: Sun 10 Aug 2025 11:01:07 +0000
Files and hashes: 1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=)
2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=)
3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: 7a4yBPW2UuItDCQ3qefwuRd8BuiSSsQib/TNV0riR8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:d2:bf:ca:e5:69:e7:d5:55:53:8e:df:34:f8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Aug 9 11:01:07 2025 GMT
Not After : Aug 10 11:01:07 2025 GMT
Subject: CN=5a46357689a2762d2761b73b866d5e75db1e16b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:46:e8:d0:61:aa:7a:f2:6b:98:eb:c5:d3:
eb:af:8d:c5:9b:55:75:54:be:df:8a:d0:10:28:3f:
a2:1c:0c:6a:f0:6d:0c:e0:3b:4f:74:94:ea:6d:88:
27:1a:72:3c:78:44:56:6e:da:86:15:22:2e:41:06:
dd:ff:8d:7a:e4:51:09:58:5d:2c:5b:86:9f:44:a5:
24:ad:69:68:66:d3:53:16:3b:bc:b5:a7:65:b0:08:
07:1a:84:a2:f5:37:7e:61:0e:4c:5d:c1:79:34:eb:
43:a9:3f:2c:6d:68:a0:94:7c:be:b1:64:29:79:98:
a1:05:61:8c:f2:50:b9:21:5c:a1:92:55:3d:8a:fd:
02:48:84:7f:4c:ee:f7:bf:7d:b5:57:fc:10:1a:f9:
2e:8f:d0:50:b1:94:1c:b6:80:03:9b:0f:e6:b5:eb:
bd:aa:c2:1d:70:0f:3b:f5:d8:b3:96:91:ec:10:fe:
c3:4c:a2:09:dc:a2:9b:97:35:3c:0b:88:48:bf:74:
bd:97:98:88:ab:39:70:45:02:da:19:53:bc:aa:4e:
e6:9d:2e:ad:75:55:d9:ea:b4:10:15:8c:90:e4:96:
7b:68:9d:b8:4d:26:d1:74:cf:e7:da:3c:e2:2f:7d:
c6:3e:15:d8:45:91:02:05:8a:2b:e5:73:1a:22:25:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:46:35:76:89:A2:76:2D:27:61:B7:3B:86:6D:5E:75:DB:1E:16:B2
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7a:62:88:5c:03:35:c2:f7:14:67:26:dc:ff:ae:cc:2c:5d:
0a:36:9e:09:a3:d9:49:93:62:10:a0:83:2a:ba:fc:73:f2:a9:
1d:8e:94:6f:9f:15:d7:8a:aa:37:ef:4f:3b:10:e0:61:55:d9:
48:9d:93:b3:0c:0d:ef:d7:9d:b4:c4:4e:29:bc:6b:10:0c:cc:
f5:51:e3:4c:be:f4:4b:7f:ae:f1:23:15:25:33:7e:6a:b0:20:
28:91:5e:7f:fd:a1:43:30:5e:c6:3a:7f:14:8f:d5:76:b1:03:
7c:47:07:0d:64:ad:27:6a:d9:96:36:9b:75:8d:03:94:dc:52:
d7:82:85:aa:65:89:f3:90:12:b2:53:b9:0d:0f:bb:db:1b:da:
d0:fd:5c:81:b1:24:c8:37:68:3b:7f:96:b1:90:f4:55:12:b5:
6b:eb:36:73:60:cc:95:c1:c9:1d:8d:3a:d2:33:4a:b0:4a:49:
2c:15:ee:23:43:98:80:80:da:73:09:90:aa:95:33:c4:19:64:
b4:2a:70:c2:f9:cd:fa:4c:ae:f6:65:63:b5:df:ba:92:81:ee:
c4:9e:0e:db:d4:22:82:c6:71:92:3c:81:f5:cb:84:68:3d:95:
c1:32:24:ad:da:87:7c:4d:33:95:aa:5a:44:60:9d:3e:45:51:
7a:87:19:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:16 2025 by rpki-client