Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: ssq0bVffBAyBvTrSXYqAkfaDD7q3rnuaQpiqURBTAZ4=
Subject key identifier: 21:8F:03:A4:49:3B:7A:A0:53:44:59:B2:DC:06:62:9B:3C:1E:5B:CD
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 01988EEC9B9047E3D8E82A8C6E782ADA3D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 13:02:07 +0000
Manifest this update: Sat 09 Aug 2025 13:02:07 +0000
Manifest next update: Sun 10 Aug 2025 13:02:07 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: hJkcqtlLpJsMi4mSoLXHIZve+lT5TGgBywBk4Mgv+KQ=)
2: dXA2sXCeF-zEI-_J4kU7kczSGDo.roa (hash: yLUH5uzp/Ib7vlJR5HEnjKQN0s3hZM+CwSBPhsePj6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:9b:90:47:e3:d8:e8:2a:8c:6e:78:2a:da:3d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Aug 9 13:02:07 2025 GMT
Not After : Aug 10 13:02:07 2025 GMT
Subject: CN=218f03a4493b7aa0534459b2dc06629b3c1e5bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:3c:a8:7e:eb:f3:37:4a:fd:8c:33:f4:0b:
53:c4:8c:df:75:59:65:51:1a:49:42:02:b2:d8:e6:
93:0c:1b:2c:b4:b1:8a:3d:7a:24:61:10:06:99:3a:
b4:aa:d5:c3:de:6d:21:43:c0:c8:ca:fe:cb:b4:fc:
1a:4c:71:56:58:14:66:e2:1e:f9:cd:15:b9:0c:1c:
47:f4:33:ba:f0:9f:2d:4d:07:ae:bc:ec:ef:22:3c:
d8:89:a4:79:87:e3:0b:3c:7a:19:55:f1:59:cd:3b:
4a:b4:ca:ca:e8:24:4c:a9:20:1d:3e:4b:77:2e:80:
fe:ce:86:bd:99:71:b9:5b:ef:e1:e7:bd:04:93:95:
d0:08:ac:6f:fc:a3:d5:12:94:df:10:cf:f2:ab:96:
21:f0:f6:43:ec:7d:77:01:80:26:d8:60:9b:c4:b3:
bb:51:15:59:b4:d1:59:70:e8:d8:36:05:0c:e2:e4:
05:45:94:ce:44:b7:7e:b8:f6:bc:5d:df:92:b5:22:
03:15:98:38:61:42:a1:c8:52:e4:eb:13:85:a8:b1:
1e:f9:89:04:02:f8:37:ca:c1:1c:62:58:d1:12:90:
7b:92:a4:70:5b:c0:b4:04:02:f6:20:80:4e:58:bb:
22:20:8a:13:6e:99:a5:1e:1f:0d:11:c5:83:ef:9b:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8F:03:A4:49:3B:7A:A0:53:44:59:B2:DC:06:62:9B:3C:1E:5B:CD
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:49:67:97:a8:16:2f:11:99:8c:75:98:a1:c2:11:a8:91:86:
4e:39:2f:c7:a0:53:32:3a:74:7d:54:4c:4e:51:70:b2:5e:85:
b3:24:b4:65:e2:68:76:2a:5e:51:93:54:a1:3d:e6:68:d4:b8:
d7:34:fe:05:97:b9:87:25:e3:b2:02:4d:89:ea:c6:5a:51:01:
c2:01:a4:19:84:20:b4:0a:5f:b7:18:1a:ca:97:74:8f:c6:84:
a2:2d:a5:9d:7f:85:fa:bf:d5:0d:e4:e2:a7:e4:89:94:35:b9:
b6:00:61:34:cf:81:52:da:6f:f6:c8:57:15:7a:1d:3f:02:19:
2f:a5:71:4f:37:ee:2f:54:89:1e:0e:6c:5d:b2:4b:8b:f1:0d:
dd:0e:5e:1c:4a:6c:c4:c0:8c:2b:17:08:ff:4b:26:f9:64:25:
8e:66:62:87:96:49:3c:4e:02:cc:cc:b7:51:9d:bc:44:c8:b9:
4b:8b:e4:09:7d:15:5c:bd:76:3e:ff:d0:1b:c5:98:02:c2:db:
82:17:3b:f2:09:3a:db:d9:87:7c:bc:2c:41:e5:b9:4c:0c:5b:
55:6f:52:fb:67:46:3d:83:33:c7:6e:6a:bb:67:75:d2:2a:3a:
56:05:7b:f7:a4:4c:f2:1a:b0:e6:ea:57:aa:cd:dd:e0:53:4b:
b0:d0:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:38 2025 by rpki-client