Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: Rm2OoSUQp23kgc0oVVWk/yNaQee1lisIhGn/l6ZUE0Q=
Subject key identifier: D5:E1:DD:F3:AE:DA:C0:C1:33:FA:A3:38:9B:55:84:6A:61:29:85:DE
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 01988A335EBC3005A2C3FED8B479172EFD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 15:01:18 +0000
Manifest this update: Fri 08 Aug 2025 15:01:18 +0000
Manifest next update: Sat 09 Aug 2025 15:01:18 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: OzkOfIhWA+1dsFswcuuycdYlAhZrc3FgPDkhHMDW4mA=)
2: bldtfvyuIcb6nqjUAl8Ak0zMF30.roa (hash: dx6ZT1WJQ+QEzva9Bd5tv/adJVLszcwVSLKhJy+UO24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:5e:bc:30:05:a2:c3:fe:d8:b4:79:17:2e:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Aug 8 15:01:18 2025 GMT
Not After : Aug 9 15:01:18 2025 GMT
Subject: CN=d5e1ddf3aedac0c133faa3389b55846a612985de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:94:bd:ee:d3:ad:5d:74:ff:85:22:ca:4c:
5a:04:aa:b1:49:81:21:dd:bc:75:88:2f:4b:a7:a7:
c7:17:58:89:f8:a6:bf:2d:18:f0:cd:66:4a:d4:af:
29:4e:98:2b:76:ac:8c:a7:45:91:69:68:b5:c1:00:
aa:2c:fa:14:80:2a:71:ab:9f:f1:4b:82:6f:ba:94:
3d:57:f0:8a:70:0b:17:8d:66:7b:7d:31:e4:21:95:
aa:41:ea:78:62:0d:ce:ae:97:ce:00:96:3d:f3:67:
fe:22:a3:db:b5:8f:c7:43:65:e4:73:8f:4d:fe:56:
50:d9:1a:d5:12:b7:33:af:e5:0e:18:34:af:02:31:
14:fd:91:69:00:c6:1f:6d:1a:a1:5e:b3:07:03:86:
2e:c6:62:11:2a:2d:c2:69:71:cc:ea:78:f9:0a:6f:
e0:a4:d7:7e:a1:ff:5d:dc:8c:8e:99:ae:95:0b:ab:
4a:c8:f2:29:1b:56:d5:3a:a4:75:98:47:bc:b9:54:
0c:85:8c:2d:59:cf:f2:14:eb:c4:7a:05:cb:ac:9f:
9d:c5:ea:d6:20:21:66:fd:5c:52:17:96:a4:1b:8e:
e1:16:74:3b:7a:3b:38:17:0c:d1:2f:9c:21:a0:cc:
89:ef:35:b4:c1:3b:0f:0a:ab:f8:e0:64:a4:b1:17:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:DD:F3:AE:DA:C0:C1:33:FA:A3:38:9B:55:84:6A:61:29:85:DE
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:34:f9:34:33:cc:9b:49:53:92:1f:33:da:d1:50:de:52:fe:
c5:de:5c:d8:84:ed:29:c7:2a:10:df:c1:c7:4d:5b:ee:e1:57:
76:1e:28:a5:c1:e5:3e:20:09:a0:da:19:6d:19:c4:72:38:9d:
7c:98:72:4f:3b:2e:dd:b7:e1:fd:80:c7:15:ef:83:8d:73:15:
3a:c4:55:82:03:3a:6e:4b:dd:a1:c2:e9:00:f2:55:2e:ac:ab:
54:41:f0:df:05:84:06:f6:39:fe:33:26:dc:f5:ae:37:26:b4:
40:9d:2a:1e:6c:41:23:8f:59:07:e5:06:ad:f2:2a:18:2a:91:
85:c4:43:4d:da:ee:f9:d4:85:e0:7c:4e:cd:a5:6d:9b:6d:3b:
7a:66:3a:4f:27:0a:83:6c:96:8c:96:d6:3e:db:9e:eb:2d:1f:
71:fa:3d:a7:e8:83:50:8a:fe:37:d5:1c:8f:b3:b5:bd:fd:c7:
4e:1a:9e:5f:7a:8c:58:4e:34:d7:cf:7d:c5:74:e0:de:38:e2:
44:53:d8:67:9d:51:1f:b3:e6:fe:65:60:b9:9b:17:8f:ea:04:
f2:55:d0:e7:cf:fb:00:67:4b:14:7b:e9:a2:d4:f5:4a:e0:86:
eb:39:7e:1f:20:31:0a:b7:93:a5:3e:95:7a:79:06:fa:67:09:
06:90:0b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKM168MAWiw/7YtHkXLv1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWJlNDUzNzZkNTg5ODc0NTJiZDA2NDZiOWE3NGNmOWVi
NmNiMmQwHhcNMjUwODA4MTUwMTE4WhcNMjUwODA5MTUwMTE4WjAzMTEwLwYDVQQD
EyhkNWUxZGRmM2FlZGFjMGMxMzNmYWEzMzg5YjU1ODQ2YTYxMjk4NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ+Uve7TrV10/4UiykxaBKqxSYEh
3bx1iC9Lp6fHF1iJ+Ka/LRjwzWZK1K8pTpgrdqyMp0WRaWi1wQCqLPoUgCpxq5/x
S4JvupQ9V/CKcAsXjWZ7fTHkIZWqQep4Yg3OrpfOAJY982f+IqPbtY/HQ2Xkc49N
/lZQ2RrVErczr+UOGDSvAjEU/ZFpAMYfbRqhXrMHA4YuxmIRKi3CaXHM6nj5Cm/g
pNd+of9d3IyOma6VC6tKyPIpG1bVOqR1mEe8uVQMhYwtWc/yFOvEegXLrJ+dxerW
ICFm/VxSF5akG47hFnQ7ejs4FwzRL5whoMyJ7zW0wTsPCqv44GSksRerrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXh3fOu2sDBM/qjOJtVhGphKYXeMB8GA1UdIwQY
MBaAFFNb5FN21YmHRSvQZGuadM+etsstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYjM5YTgtNjIzYi00NDM1LTk0ZmUt
Y2VjOTJiNTc4MDA2LzEvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mYjM5YTgtNjIzYi00NDM1LTk0ZmUtY2VjOTJiNTc4MDA2
LzEvVTF2a1UzYlZpWWRGSzlCa2E1cDB6NTYyeXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjT5NDPM
m0lTkh8z2tFQ3lL+xd5c2ITtKccqEN/Bx01b7uFXdh4opcHlPiAJoNoZbRnEcjid
fJhyTzsu3bfh/YDHFe+DjXMVOsRVggM6bkvdocLpAPJVLqyrVEHw3wWEBvY5/jMm
3PWuNya0QJ0qHmxBI49ZB+UGrfIqGCqRhcRDTdru+dSF4HxOzaVtm207emY6TycK
g2yWjJbWPtue6y0fcfo9p+iDUIr+N9Ucj7O1vf3HThqeX3qMWE401899xXTg3jji
RFPYZ51RH7Pm/mVguZsXj+oE8lXQ58/7AGdLFHvpotT1SuCG6zl+HyAxCreTpT6V
enkG+mcJBpALAA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:31 2025 by rpki-client