Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: frfIxJxsoLTsuLkaOej6oxgksu27Wuo8ruYdvUsqkzg=
Subject key identifier: BB:3E:86:C6:19:80:EC:53:C5:20:DE:AB:90:12:A8:38:2B:EF:15:67
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 019893366E712E60F95EEFBD66F71FC29B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 1334
Signing time: Sun 10 Aug 2025 09:01:14 +0000
Manifest this update: Sun 10 Aug 2025 09:01:14 +0000
Manifest next update: Mon 11 Aug 2025 09:01:14 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: u2wEwFCnOCYpnkx/tcNuW1tyc1qFXneZ9TpXztVopso=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:6e:71:2e:60:f9:5e:ef:bd:66:f7:1f:c2:9b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Aug 10 09:01:14 2025 GMT
Not After : Aug 11 09:01:14 2025 GMT
Subject: CN=bb3e86c61980ec53c520deab9012a8382bef1567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:a1:2c:03:86:63:fe:ee:83:3e:15:6e:05:
70:9e:fb:4b:44:27:f1:4a:2f:63:c9:ba:b6:79:b4:
6f:54:cf:15:08:94:8c:74:e0:42:5d:c7:a6:de:ae:
be:ea:0a:e9:af:ab:25:ea:d1:7c:92:76:90:ab:fe:
80:4c:24:a4:8d:df:dd:9a:80:93:f7:e0:da:e2:65:
71:a4:b6:ac:15:58:f6:3a:ac:3f:03:64:61:0f:66:
2a:2c:62:7f:48:0f:5e:0c:fc:54:31:51:58:f8:59:
cb:87:43:aa:34:c7:e9:77:01:6d:f0:67:8f:4e:a5:
a6:e2:91:70:5b:99:89:20:ae:0d:93:99:0b:80:ec:
b8:7f:e9:ff:f0:fc:7b:14:bc:6d:2a:28:c7:a7:e8:
18:dc:d2:9f:16:71:b4:db:6b:c0:01:03:9c:6b:4b:
67:a3:c5:90:dd:27:71:5e:c4:d7:0e:5d:0d:82:93:
22:d6:5d:e2:c1:68:a6:7b:ed:14:f5:f2:49:9a:31:
1d:d6:c0:f5:fe:fa:6c:24:ea:17:1e:23:45:83:fb:
cc:ee:bb:af:8f:ff:2e:c1:30:15:fb:05:e4:ea:bc:
2d:d9:70:8e:c0:2d:02:7a:d6:c0:e6:21:9b:3e:d4:
ca:4c:b2:59:b3:90:73:7f:ec:c9:0b:24:d4:dd:0a:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:86:C6:19:80:EC:53:C5:20:DE:AB:90:12:A8:38:2B:EF:15:67
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:82:a5:8c:d2:6b:06:f9:91:f8:f3:41:3a:45:bc:00:15:c6:
35:68:11:8d:8a:d1:c2:30:30:2d:ad:b7:6e:9b:3d:8b:c5:f1:
04:c2:c6:31:82:23:6f:48:c7:be:65:23:38:cd:c1:27:19:f3:
c9:5c:10:d3:76:a8:07:7f:91:06:c8:ee:86:71:bd:1a:61:e8:
69:9f:3d:15:87:96:e3:c7:e1:c8:a0:3f:1e:68:39:3c:3f:2a:
e9:2a:86:52:a6:14:de:86:3f:86:fb:dd:93:3c:e2:af:e9:56:
13:b9:3c:1f:17:3a:c9:36:a6:45:7e:f0:0c:25:4b:88:f7:25:
69:82:8d:e0:68:53:b5:45:6c:ee:05:a8:7e:dc:75:96:3b:77:
d7:4e:f4:b1:02:13:bd:87:02:8d:5c:45:9a:bb:39:65:07:07:
2f:59:12:16:cf:0e:1b:ea:2d:f6:67:14:d1:49:98:14:44:28:
8e:4d:e9:09:d9:d2:96:b9:d3:9c:53:66:93:06:b1:b3:78:9e:
ec:45:e9:55:fe:83:c2:34:f5:2a:b7:d1:7f:49:f8:75:91:98:
81:c9:76:68:13:38:45:2b:a9:f2:bf:28:e5:82:a0:60:7d:23:
6b:54:16:49:1a:da:52:f1:f5:42:1d:24:3f:09:cf:44:ae:9f:
8a:aa:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:07 2025 by rpki-client