Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
File: U_tSQvmM_53qm6qMiuRmpCtTfFw.mft (raw, json)
Hash identifier: F6a8/Bz5DTJMT+KX3xY+GN4ZTgW/daXBVRWRwWkkMs4=
Subject key identifier: A8:8F:A6:3F:C5:11:B7:B7:A7:C7:F0:7F:03:38:FD:32:BD:55:DB:25
Authority key identifier: 53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
Certificate issuer: /CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Certificate serial: 01988CFDA0096B8795D4DD48F50D3A65E7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
Manifest number: 1609
Signing time: Sat 09 Aug 2025 04:01:28 +0000
Manifest this update: Sat 09 Aug 2025 04:01:28 +0000
Manifest next update: Sun 10 Aug 2025 04:01:28 +0000
Files and hashes: 1: U_tSQvmM_53qm6qMiuRmpCtTfFw.crl (hash: /rNiYlyQF9XTtKvi8zh2cXchEuvdEbI7qU9hEqNmwXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:a0:09:6b:87:95:d4:dd:48:f5:0d:3a:65:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Validity
Not Before: Aug 9 04:01:28 2025 GMT
Not After : Aug 10 04:01:28 2025 GMT
Subject: CN=a88fa63fc511b7b7a7c7f07f0338fd32bd55db25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:b7:20:04:0b:45:89:a7:03:a4:cb:20:46:
97:0e:ea:02:58:a2:eb:1f:5d:c9:ec:44:3e:ad:bd:
59:bb:72:11:b4:48:34:b7:01:e5:71:01:13:55:03:
6a:70:8f:ad:ac:27:16:f9:c5:ed:16:4d:19:ab:bd:
1d:ef:41:85:5b:60:32:9b:8d:85:ec:f4:db:b9:a6:
02:c4:8c:d0:78:96:2f:b4:22:1f:f9:70:62:f9:3d:
fc:40:03:b3:11:e0:3a:42:13:68:fe:b2:bc:55:23:
be:72:fb:32:7d:dd:43:9c:3c:6a:bd:c3:ad:df:64:
51:c1:23:78:cc:54:88:f6:b8:e4:f7:f7:66:a4:17:
fd:48:02:7a:1a:65:67:fe:0a:73:19:71:be:e1:10:
1a:bc:dd:1f:44:7f:25:0c:f5:3a:08:b8:a3:3c:93:
04:d2:ae:9d:08:e5:f3:6c:3b:4f:48:8d:48:a2:93:
1c:1c:fc:ed:40:c0:5d:e6:0d:70:42:70:9c:b0:90:
0f:4b:6e:f5:84:37:18:be:b2:00:b6:b8:54:e8:ac:
e9:5b:de:92:4d:7e:aa:c2:0c:60:f9:b8:3c:61:67:
8e:80:09:a0:bf:05:ef:24:98:0a:82:f0:9e:4e:cd:
3f:d6:f2:7f:61:26:41:4e:18:4d:35:25:17:ff:c1:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8F:A6:3F:C5:11:B7:B7:A7:C7:F0:7F:03:38:FD:32:BD:55:DB:25
X509v3 Authority Key Identifier:
keyid:53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e5:25:17:05:ac:77:28:b1:45:80:b3:6f:fc:69:6e:51:2d:
02:92:34:a4:0b:e7:73:09:bf:f9:bd:46:ca:c1:e1:38:ae:51:
d9:b3:d4:01:0a:ad:c6:3d:3f:f0:97:aa:2a:4d:54:3c:5c:85:
1e:e6:08:2e:6d:ca:83:e8:27:90:58:6b:e1:f3:ca:89:57:aa:
27:e5:e3:a1:cf:0f:3d:0e:26:bc:ca:1e:5c:59:fa:53:59:0a:
13:2c:2c:fe:e6:4e:54:27:fb:c1:ec:66:db:09:3e:bb:2f:3f:
ca:c0:d4:3d:4c:db:ab:52:1e:34:6f:17:b7:c1:30:b7:e6:5d:
47:99:aa:5d:90:4d:95:86:d3:f6:f7:24:64:e5:ff:18:d2:34:
3c:ed:63:0d:a1:8b:12:ad:5d:40:ef:b1:5d:6b:6a:98:44:d5:
0c:f0:5e:46:75:77:e5:05:b0:17:78:2f:62:ad:dc:9f:9f:10:
2d:df:6d:c1:ea:36:1e:ce:5b:28:4d:8d:93:7e:64:65:e5:59:
2a:b5:81:99:3d:4b:cf:c0:cd:7a:36:81:cd:b7:d1:0c:f6:d6:
54:dc:99:13:6b:d9:0d:88:5c:f3:ec:f4:16:aa:14:f0:70:61:
42:94:a5:1e:c3:2a:cc:c0:89:18:e3:fc:a5:d2:c2:16:34:96:
13:ba:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:52:27 2025 by rpki-client