Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
File: U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft (raw, json)
Hash identifier: JMpEpiftjMqj+MXSUrwMHA6D7Q9yeu8LABbYOpZQpn0=
Subject key identifier: 59:42:D0:1B:9A:84:41:05:12:0E:6B:5F:AD:3C:F5:D5:AD:F3:A3:4E
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Certificate issuer: /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial: 01987D8AB7EF11BBB7A24E03AD069CE59CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
Manifest number: 0A50
Signing time: Wed 06 Aug 2025 04:01:39 +0000
Manifest this update: Wed 06 Aug 2025 04:01:39 +0000
Manifest next update: Thu 07 Aug 2025 04:01:39 +0000
Files and hashes: 1: GPBna_IoKKdQyaNksGJT2yWTCj4.roa (hash: TAihNlvs0SdUgl2vxovWMBnyUqa0RWqHLKo09+4ZR88=)
2: U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl (hash: osaIGPUgqViU7yzaiOdKzR9eZQNyN0vME/6WNZyPd7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:b7:ef:11:bb:b7:a2:4e:03:ad:06:9c:e5:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Validity
Not Before: Aug 6 04:01:39 2025 GMT
Not After : Aug 7 04:01:39 2025 GMT
Subject: CN=5942d01b9a844105120e6b5fad3cf5d5adf3a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:29:e1:4d:fc:9e:94:4c:1d:3a:c9:80:5c:
8f:30:bc:4d:ea:ab:b9:7e:f4:37:59:01:a6:c3:c0:
b6:96:e2:bb:61:e0:a9:ec:89:c4:70:f1:fb:ca:0a:
33:75:ad:5c:f9:73:84:d4:09:60:bc:b7:52:67:e5:
72:1e:d5:c7:5a:28:7d:10:84:3b:a9:b2:8f:9f:93:
fd:5f:d7:fb:94:ec:2a:b3:79:53:52:ea:6c:3f:62:
5b:9e:f8:ab:e2:99:cc:28:ff:43:16:21:f1:c2:17:
ac:8e:97:b8:a8:82:cb:c7:1a:07:a3:d0:f4:4b:ae:
62:c7:55:55:bc:86:30:c1:43:0c:d8:4d:df:8a:1a:
4a:1b:70:e5:08:90:49:e1:04:05:d4:36:1d:7e:64:
66:c5:7e:3c:da:70:dc:1b:c4:0f:2a:06:5c:64:e0:
5c:d5:37:b0:5b:c4:57:53:f8:70:22:2a:9a:8a:a6:
64:02:21:5a:ee:80:a7:70:11:c7:f6:50:57:a6:0f:
bd:17:d9:38:4c:94:f6:12:9a:45:ba:90:aa:58:36:
dc:67:71:18:d6:de:72:70:08:83:a0:30:b5:06:2d:
18:26:a8:fa:67:26:c7:30:60:19:c8:2b:e3:95:8a:
34:e6:3b:cb:a1:27:82:4e:94:c3:2d:96:db:88:f5:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:D0:1B:9A:84:41:05:12:0E:6B:5F:AD:3C:F5:D5:AD:F3:A3:4E
X509v3 Authority Key Identifier:
keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:39:02:06:99:e4:f5:3b:c5:e6:35:b1:e6:9f:78:6a:a3:ab:
5a:f1:b6:72:75:15:ca:d8:f6:0f:fc:43:8d:43:01:58:1a:30:
b9:e0:2f:9b:e9:ae:92:72:d6:12:da:59:3c:9a:40:4a:5c:98:
79:b1:e0:92:ff:0c:51:c4:6c:a5:4e:15:cc:97:88:23:ae:91:
7b:70:44:6d:e5:14:4c:90:15:b8:0c:d7:c3:c6:31:a5:e8:50:
e4:e9:7b:05:a9:65:14:bd:30:bb:4b:40:75:f2:f9:67:a3:fa:
53:eb:b5:ab:98:80:f6:37:92:e0:08:d9:54:fa:c4:54:f2:a6:
6a:df:4d:11:81:90:a5:3b:d4:df:e7:fe:f4:75:67:21:01:f3:
c7:00:3f:2d:71:f3:b3:14:ca:bc:f8:a4:88:39:b8:e7:a9:67:
19:09:cd:9c:ea:fd:03:a5:75:3d:61:0c:70:35:29:e2:82:9f:
97:4e:7c:cd:f8:84:1e:41:eb:fe:26:54:9f:bf:5c:b4:86:5d:
8d:e9:c4:aa:da:06:02:ee:f3:61:33:41:7a:09:52:62:51:99:
f7:59:34:69:2c:71:af:32:ab:a6:d5:60:44:93:6b:27:8b:09:
50:3d:22:1f:8d:87:8b:e2:78:5f:1a:43:98:c1:91:72:48:ac:
44:ad:25:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9irfvEbu3ok4DrQac5Zz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzk5NTYwNDUzZGNmNGFmMzFmOWIyYTQwY2QyMzhiODQ1
N2M1ZGUwHhcNMjUwODA2MDQwMTM5WhcNMjUwODA3MDQwMTM5WjAzMTEwLwYDVQQD
Eyg1OTQyZDAxYjlhODQ0MTA1MTIwZTZiNWZhZDNjZjVkNWFkZjNhMzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lMp4U38npRMHTrJgFyPMLxN6qu5
fvQ3WQGmw8C2luK7YeCp7InEcPH7ygozda1c+XOE1AlgvLdSZ+VyHtXHWih9EIQ7
qbKPn5P9X9f7lOwqs3lTUupsP2Jbnvir4pnMKP9DFiHxwhesjpe4qILLxxoHo9D0
S65ix1VVvIYwwUMM2E3fihpKG3DlCJBJ4QQF1DYdfmRmxX482nDcG8QPKgZcZOBc
1TewW8RXU/hwIiqaiqZkAiFa7oCncBHH9lBXpg+9F9k4TJT2EppFupCqWDbcZ3EY
1t5ycAiDoDC1Bi0YJqj6ZybHMGAZyCvjlYo05jvLoSeCTpTDLZbbiPWFYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlC0BuahEEFEg5rX6089dWt86NOMB8GA1UdIwQY
MBaAFFN5lWBFPc9K8x+bKkDNI4uEV8XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgt
MzlhYjc3YjgzM2VhLzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgtMzlhYjc3YjgzM2Vh
LzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTkCBpnk
9TvF5jWx5p94aqOrWvG2cnUVytj2D/xDjUMBWBowueAvm+muknLWEtpZPJpASlyY
ebHgkv8MUcRspU4VzJeII66Re3BEbeUUTJAVuAzXw8YxpehQ5Ol7BallFL0wu0tA
dfL5Z6P6U+u1q5iA9jeS4AjZVPrEVPKmat9NEYGQpTvU3+f+9HVnIQHzxwA/LXHz
sxTKvPikiDm456lnGQnNnOr9A6V1PWEMcDUp4oKfl058zfiEHkHr/iZUn79ctIZd
jenEqtoGAu7zYTNBeglSYlGZ91k0aSxxrzKrptVgRJNrJ4sJUD0iH42Hi+J4XxpD
mMGRckisRK0lIQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:55:24 2025 by rpki-client