Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: YN2JAO0EwpWTNi/KRAyVr6QtWbc722Fbo036bYOo2jk=
Subject key identifier: 02:4A:B1:CD:2F:CA:4B:A7:35:32:43:D2:0C:1D:51:D5:C5:73:47:15
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 0198744FC8227E59D4657918CF828EBAE306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 02FD
Signing time: Mon 04 Aug 2025 09:00:42 +0000
Manifest this update: Mon 04 Aug 2025 09:00:42 +0000
Manifest next update: Tue 05 Aug 2025 09:00:42 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: JRVTylrlwm9+klgUoTiP11Kh85DT+57ln5jHxPqF6iM=)
2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:c8:22:7e:59:d4:65:79:18:cf:82:8e:ba:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: Aug 4 09:00:42 2025 GMT
Not After : Aug 5 09:00:42 2025 GMT
Subject: CN=024ab1cd2fca4ba7353243d20c1d51d5c5734715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:76:15:42:8d:bc:49:03:60:db:8d:73:ec:
c4:98:da:0f:fb:cf:ff:31:91:7b:8c:5d:b0:58:79:
7e:2c:ad:26:94:00:77:df:6c:8b:34:79:80:2c:c7:
21:62:f1:0a:4a:46:8a:96:a2:6f:b5:62:85:6a:cb:
f3:aa:15:10:e4:2c:1c:c0:ec:85:24:81:02:28:0d:
73:9d:85:7a:36:be:ab:d6:1f:72:15:8a:1b:9f:2d:
a3:08:83:b9:09:33:94:17:33:60:71:e5:aa:65:94:
16:9e:f1:f8:bd:28:08:51:4d:a6:db:75:18:46:51:
30:61:f9:6b:9f:26:ef:2b:f9:a2:df:1d:d9:86:f7:
c0:6e:44:7a:97:5f:59:82:63:4c:aa:91:27:ad:59:
15:56:13:7c:96:a0:af:80:5a:b9:67:3b:70:f8:ab:
ab:9c:33:a3:26:9a:70:19:ed:d1:ec:6e:03:16:78:
cc:f5:24:da:58:d5:e2:5c:f0:47:af:f4:5c:9b:20:
cc:de:c5:fa:5d:f1:ac:dd:4a:b9:fa:f1:31:e0:fc:
37:9b:1a:d3:0b:2f:85:07:44:63:cb:09:a0:72:bc:
17:07:f6:2a:b3:78:19:a1:ad:13:4c:14:61:89:fd:
d2:4e:fb:b4:c1:7b:12:b1:3d:1b:db:7f:b9:21:d7:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:B1:CD:2F:CA:4B:A7:35:32:43:D2:0C:1D:51:D5:C5:73:47:15
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:96:3b:48:ef:48:81:6a:14:62:e5:cf:13:d8:e5:e2:a2:
62:ea:f2:fd:02:fc:11:83:51:ff:a4:65:32:f1:a6:78:f7:35:
9c:40:85:93:89:d0:cb:98:12:e6:ad:0c:0e:cd:01:1a:f0:31:
a0:35:c3:85:3d:b9:0b:e5:f0:cf:de:be:95:63:b4:a4:d1:1e:
c7:c1:6e:4b:01:a4:aa:8f:e5:f7:1d:4e:9c:37:27:ad:16:0c:
7a:12:d2:ed:b6:5d:c1:8a:55:2d:f4:84:e1:77:d0:50:1c:c4:
de:3e:37:79:f2:b8:72:75:65:7e:a7:6c:5b:83:ea:6f:68:a6:
7f:d5:b8:3f:de:41:9c:1c:1d:0a:59:19:4b:72:61:69:e4:60:
9b:f9:99:f5:28:d9:2f:59:4b:13:b3:95:6c:cf:d5:98:e0:6f:
8f:23:39:d6:83:44:c4:2e:51:e4:7d:11:6e:41:0b:b8:d0:1f:
c4:47:af:f4:cb:f1:66:f2:86:37:16:3b:b6:a9:30:63:0d:ba:
6a:4e:c8:1e:ff:ac:00:8f:60:03:2a:72:70:b6:40:2a:09:bb:
3a:84:0b:b7:b8:aa:ca:6c:16:7d:a5:b2:a5:eb:7a:28:dc:59:
98:47:94:e6:45:ff:d3:87:88:22:73:3b:c8:31:e3:86:b2:13:
46:76:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:35 2025 by rpki-client