Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier: P4zRmWfV0JvMz4wQbptP78Ry9VA/yENyfw3++S7d9Tw=
Subject key identifier: 05:71:99:03:F8:B5:73:66:84:01:AE:5D:4B:A1:DA:3A:07:C5:75:F7
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 019880C2A0232E2532EE609CB921FC18C095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 19:01:35 +0000
Manifest this update: Wed 06 Aug 2025 19:01:35 +0000
Manifest next update: Thu 07 Aug 2025 19:01:35 +0000
Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: JzRNaSR3n6PmGXsOHbhPm1Zq+zFxRnbFvCYFrqsObEU=)
2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=)
3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:a0:23:2e:25:32:ee:60:9c:b9:21:fc:18:c0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Aug 6 19:01:35 2025 GMT
Not After : Aug 7 19:01:35 2025 GMT
Subject: CN=05719903f8b573668401ae5d4ba1da3a07c575f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:a2:3a:34:13:53:ab:12:f7:bd:7d:2a:a1:
f4:b5:20:36:35:f8:50:a1:89:0e:f2:86:9c:a3:9b:
dd:e9:2e:7b:fa:ab:03:22:68:17:eb:c9:48:cd:65:
12:9c:7f:83:eb:8a:58:c4:b1:6c:da:f1:80:10:a1:
b4:cd:66:32:7f:df:49:a5:6d:ca:e5:b4:34:b5:04:
69:65:c2:cf:2e:3d:98:5a:1c:b2:23:3f:21:0e:4b:
90:7c:cb:50:ff:f4:50:5e:5e:50:34:02:da:c5:bf:
4f:35:19:7b:7c:fe:d0:e1:2e:b5:55:7b:1b:ee:a7:
c6:c0:1f:00:9c:61:38:58:67:2b:88:e7:22:da:59:
6f:14:d5:31:fe:5c:a2:0c:fe:7d:81:75:90:ee:dc:
e7:ef:19:bf:3f:d6:b6:41:0a:01:77:b8:29:ba:af:
de:e1:97:9a:98:4d:6b:1a:dd:07:ef:e9:c3:dd:42:
d5:94:68:a4:66:5f:68:8e:26:fd:91:fe:6a:5c:66:
f9:aa:6f:b1:34:db:cd:a5:6c:00:38:83:2e:14:08:
33:57:56:42:45:2e:88:48:3e:f8:0d:74:60:c0:4b:
ba:26:41:15:a3:01:5a:9b:d8:a8:20:0f:3b:88:97:
33:bb:72:66:ee:f1:01:6e:20:33:d3:57:6f:3b:84:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:99:03:F8:B5:73:66:84:01:AE:5D:4B:A1:DA:3A:07:C5:75:F7
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:00:e4:22:56:4f:bb:9d:3b:cc:aa:a9:e1:b9:34:f5:e9:50:
30:55:6f:94:c6:7a:bc:1d:06:72:f7:78:13:5a:f0:df:d5:92:
ca:9c:66:5e:36:18:91:a4:46:00:b7:23:09:c4:4b:3a:d0:04:
26:f2:35:b2:a6:48:c7:11:9e:dc:d1:32:b6:d2:67:5b:68:b0:
5f:6c:02:bb:f6:30:70:c8:74:18:8c:fa:23:6a:17:c3:46:ec:
90:5e:c2:47:33:bb:32:9b:bd:9d:f1:ca:91:1e:dd:24:e0:2a:
9c:a0:37:c2:4d:f9:86:ab:84:f0:a2:e5:37:4c:f2:a1:d3:3a:
36:e9:72:11:e0:45:40:28:7a:7b:80:eb:cd:e8:de:f4:a6:e1:
50:fe:c6:03:08:1b:67:c7:65:c2:d6:83:02:d2:29:c0:0f:5f:
e8:1f:1f:d2:42:80:ff:fc:7f:2e:b0:ef:06:1f:34:89:7b:91:
44:22:0f:b6:a2:70:62:55:46:8a:f5:10:59:35:ab:3f:46:45:
66:34:fd:79:be:5d:57:0d:d2:26:e6:39:33:be:25:2c:ff:0c:
b6:c1:ec:6d:25:e7:a6:6c:13:64:ad:64:a1:32:06:cf:da:4c:
04:ba:fa:ee:ec:c7:8f:75:71:c2:36:b7:7f:8c:7f:4a:16:40:
8c:32:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:52 2025 by rpki-client