Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier: vEFvPeZSUOCEk8X/HL1J+m4RnE+cLBX9/NJqytRyBPk=
Subject key identifier: 85:87:6F:A3:71:07:D3:37:FB:2D:CF:B9:1F:A1:80:2C:9C:7C:AB:81
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 01987AF72F657A1C5CAC582178641E309469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number: 162A
Signing time: Tue 05 Aug 2025 16:01:16 +0000
Manifest this update: Tue 05 Aug 2025 16:01:16 +0000
Manifest next update: Wed 06 Aug 2025 16:01:16 +0000
Files and hashes: 1: 1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa (hash: xMXmg6U7dk2I47UFlru0YwTYb2PTB2hNFflS+Hs5NZA=)
2: 47T-_h4yrwTkNISxK8J3mV88Fh0.roa (hash: BQum24aWy9VPt+BVB7kWULFG+ntEIPlMGrK1sM76ojQ=)
3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: TGGl6cpEsRTR6F7PcqdKIPxl4h7m7vf+IEEtsMDFuqI=)
4: _Swn7rfHkqyddWiH6mJBPzEvtPw.roa (hash: DdKMWCZ6/KHD8pm9QRG9mImRVRpGoqtnHO9unsKXibs=)
5: tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa (hash: gVnI/4eE/aC58PSWg9zuIzqcxtqe9LJ1Nbo9TV7QxCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:2f:65:7a:1c:5c:ac:58:21:78:64:1e:30:94:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Aug 5 16:01:16 2025 GMT
Not After : Aug 6 16:01:16 2025 GMT
Subject: CN=85876fa37107d337fb2dcfb91fa1802c9c7cab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:73:d1:f1:ba:07:94:11:c7:61:f5:fa:8b:
9d:95:02:34:c4:b8:cc:92:af:89:87:83:c6:17:ac:
1e:ec:86:a8:68:1e:32:19:da:2b:85:0c:be:9e:7a:
97:26:1b:eb:64:63:ca:d5:31:f0:1e:a2:1a:ac:da:
13:7e:ee:92:30:dc:7a:34:1e:24:9d:8a:79:46:fd:
92:95:68:05:d7:ab:da:4a:3b:ba:5b:3d:84:cf:6a:
cf:a0:cd:1a:4a:da:2a:78:d3:46:61:15:54:61:70:
a6:0e:6d:24:63:ce:6d:30:78:1d:94:d4:b7:f7:87:
20:e9:3b:cc:34:b4:30:a0:c0:a8:19:a1:b1:16:98:
76:8d:05:0f:e4:16:80:36:2e:d9:32:4e:7d:a9:75:
c5:fa:7a:94:7c:05:bf:e4:74:ee:4a:26:62:a7:88:
49:6c:cd:3b:44:10:17:ef:71:78:ba:8c:1f:42:cf:
16:6b:85:fd:c0:09:32:8c:37:e9:d1:4d:78:77:7f:
88:20:71:07:6d:45:0e:79:fd:07:2d:d0:be:d9:16:
d3:bc:f2:66:3c:94:a2:8a:b6:13:5a:2b:14:8a:4b:
83:cd:45:2e:3f:b3:5b:0d:5b:ab:bc:d7:9d:1c:65:
20:88:45:e9:56:c7:0c:1b:cb:5c:d2:bf:3f:2b:cd:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:6F:A3:71:07:D3:37:FB:2D:CF:B9:1F:A1:80:2C:9C:7C:AB:81
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c5:40:b0:de:43:a9:6f:48:c1:42:e8:36:b0:bf:5d:78:c4:
3f:54:8b:7b:76:6d:29:3f:34:37:fc:76:bb:05:81:fc:0b:97:
ad:fe:dd:83:b0:cc:3f:39:2b:4b:e3:21:45:a5:f6:8a:3a:d5:
da:e9:c9:0b:27:ba:77:e0:1c:62:1c:c5:0d:71:3b:2b:0d:75:
6c:0c:46:7d:c4:f8:52:54:bb:bf:a8:52:21:47:c6:bc:cf:98:
ff:cf:83:dd:c0:79:41:f7:54:b9:5e:6f:83:9e:d0:e3:f0:c1:
88:ef:bc:ea:59:2f:bd:ac:72:cf:29:98:42:59:05:1a:24:4d:
fb:2e:89:35:d9:d4:a2:1c:7a:fd:0d:42:d1:90:99:72:2e:bb:
42:d9:fc:9a:1b:15:45:5e:02:88:a4:d3:ef:35:1f:a6:29:aa:
fc:cf:8c:f9:5c:a0:bc:9d:01:a9:9a:97:d9:49:cd:95:a9:40:
d5:ed:cf:92:e7:17:5c:9e:03:65:f9:c6:ad:4a:72:03:37:5e:
52:2c:e0:a6:ac:97:d3:1c:5c:13:57:8b:b2:4b:ab:75:20:9f:
7c:d9:bf:2b:69:7c:64:f2:c5:d8:f2:fc:14:29:cc:67:58:01:
a4:ab:aa:aa:18:e9:14:50:a8:a6:61:a9:76:ba:59:1b:ca:29:
b9:d6:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:17 2025 by rpki-client