
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: amdB+XI50OJB0laSV8lQOqdfoCzat4sNlCf+Qnn8DWc=
Subject key identifier: D8:24:21:B8:F0:86:72:73:E9:2C:CE:F8:DE:60:A2:2E:3F:EF:B1:E6
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 01976F2C266447B87FB2CD969B1302AB0FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 0476
Signing time: Sat 14 Jun 2025 16:00:53 +0000
Manifest this update: Sat 14 Jun 2025 16:00:53 +0000
Manifest next update: Sun 15 Jun 2025 16:00:53 +0000
Files and hashes: 1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=)
2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: 3BWcYExA1shzoKSm8hAvNMNUGGlPyfwgPT+L9u8CqN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:26:64:47:b8:7f:b2:cd:96:9b:13:02:ab:0f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Jun 14 16:00:53 2025 GMT
Not After : Jun 15 16:00:53 2025 GMT
Subject: CN=d82421b8f0867273e92ccef8de60a22e3fefb1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:cd:44:c9:7d:1a:99:35:b7:41:fc:21:44:
c8:96:77:0d:4f:f3:d9:f5:31:20:2b:d7:08:99:23:
4e:fc:34:28:be:c5:07:b1:19:f0:19:23:05:5b:28:
ee:22:c7:f5:26:52:fc:74:d0:7a:a3:5c:97:e9:47:
ca:16:e1:1b:af:ab:7f:41:f8:5f:90:f4:46:ca:67:
e4:03:64:56:b6:8b:e8:fe:83:8b:ed:b2:1c:3c:f6:
26:b9:41:9d:c4:01:17:06:14:08:ac:c0:01:4b:68:
d4:11:9c:3f:84:7a:9a:f4:5c:88:a4:21:ea:4e:e7:
7d:f9:f3:09:43:c4:2c:6b:17:0c:52:8b:ce:d2:61:
60:5e:f4:a1:28:ad:15:1f:42:2e:b2:11:35:8e:00:
52:4a:f9:b4:91:43:7f:12:c1:bb:88:86:97:a0:32:
4c:4e:c8:34:26:ef:c7:2f:ac:22:c4:e4:27:8d:2c:
8c:4e:11:d1:67:61:75:73:8c:c2:a4:93:a6:e1:58:
d8:ba:e0:a4:9f:0a:10:27:11:a6:68:c3:88:73:7e:
4c:e8:21:9d:ab:9b:d2:9a:74:b9:e1:d3:32:17:86:
9a:54:bb:29:23:10:2e:40:a0:e3:7a:f4:29:9c:f9:
43:38:f8:3e:c2:f6:b8:61:b6:04:4a:b9:e8:76:19:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:24:21:B8:F0:86:72:73:E9:2C:CE:F8:DE:60:A2:2E:3F:EF:B1:E6
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dc:c8:6a:f5:f2:15:fb:44:bc:57:69:f7:4a:91:3a:ab:0a:
85:b2:0b:d4:f8:56:92:e2:5f:61:00:25:bb:71:2d:35:90:1f:
5d:13:bd:c8:3c:02:a6:66:cc:33:48:91:ee:c4:05:64:34:0c:
c1:6c:e2:26:11:b0:75:f9:cd:e5:47:5b:95:68:3c:86:f4:fe:
42:ca:e7:aa:52:83:52:8e:17:e7:0e:e5:9b:02:11:2d:02:af:
3c:97:6b:00:84:42:e9:6d:95:f0:55:48:62:96:9c:93:26:7f:
65:f7:28:6b:e4:f5:2e:e0:ae:0b:e3:65:c9:cd:68:14:b8:2d:
21:80:36:04:70:40:ec:05:72:c5:41:3e:c2:cb:5c:06:fb:63:
01:75:46:58:3c:54:ef:84:29:75:03:24:71:45:d4:eb:8d:63:
64:2d:08:52:6b:b6:93:6d:db:42:7d:d0:dd:0f:59:81:e9:52:
8a:2e:57:a8:77:db:5c:52:5f:b4:df:92:58:0f:c8:d6:cd:44:
46:cc:4c:a4:64:64:f8:0d:c2:50:5c:7d:0a:df:be:25:d0:89:
a3:f4:bb:00:df:3a:b9:cf:81:6c:71:7a:81:50:f5:5b:7c:4c:
23:aa:45:9a:f4:31:0b:9f:62:ee:9f:a1:ea:cb:4b:73:cb:8d:
1b:24:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:13:02 2025 by rpki-client