Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: z1kXP/xMhxJYdINpNAjeqtS9XbO4OQw/Qb7V8PUc718=
Subject key identifier: 40:50:5C:7F:AF:CD:E2:8D:F4:1F:78:F6:F0:EF:82:90:D5:96:C9:BC
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 019873E2B1A67B6EE81E3998BBF76A59F8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 04FD
Signing time: Mon 04 Aug 2025 07:01:33 +0000
Manifest this update: Mon 04 Aug 2025 07:01:33 +0000
Manifest next update: Tue 05 Aug 2025 07:01:33 +0000
Files and hashes: 1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=)
2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: B1baJqvfc9krRJXJJv0ss/os1SlHFsVkTD+h83wBmE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b1:a6:7b:6e:e8:1e:39:98:bb:f7:6a:59:f8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Aug 4 07:01:33 2025 GMT
Not After : Aug 5 07:01:33 2025 GMT
Subject: CN=40505c7fafcde28df41f78f6f0ef8290d596c9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fa:25:ee:3b:f8:b1:bf:29:d1:cb:a9:71:49:
65:21:58:9f:98:01:fe:4a:80:df:15:00:33:31:27:
4d:86:94:a6:8e:ba:2a:98:d9:c7:76:b0:ef:36:dd:
7f:e4:5f:ed:e0:11:c5:58:1f:e4:7f:30:67:66:b8:
63:c9:e4:81:05:7a:92:0c:6b:af:54:aa:01:fc:b6:
d1:ee:43:54:03:9c:17:79:ec:bc:b3:f6:da:26:2d:
1f:9f:a6:99:81:aa:36:43:28:90:29:6a:04:f4:12:
c1:dc:99:a4:d1:eb:f4:f0:40:f8:20:3f:7b:27:89:
28:71:09:59:27:14:ac:b3:07:e7:f1:f9:97:46:54:
b5:dc:ad:4a:62:99:cc:70:56:93:ac:17:e4:3d:72:
a8:b9:4d:8d:38:5e:a8:75:84:4c:65:7d:50:42:86:
d7:ee:0f:fe:48:10:4b:a9:d9:87:15:31:17:3a:10:
c8:f4:7e:2c:71:0f:bb:74:ca:5f:e9:db:32:ab:e5:
0e:11:42:4d:81:db:06:93:c1:13:ca:3d:88:9c:8f:
fa:1d:fd:ce:20:c8:5d:55:c1:66:7b:9f:a0:87:50:
11:40:de:e1:20:94:4d:74:49:7c:6a:1a:1b:8f:58:
fc:4c:65:8c:76:4c:d0:ef:99:ec:3e:5b:09:47:cb:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:50:5C:7F:AF:CD:E2:8D:F4:1F:78:F6:F0:EF:82:90:D5:96:C9:BC
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:45:cc:ee:84:12:9a:63:63:b5:61:5c:82:f3:9c:f1:00:
0b:6a:08:d3:c3:97:42:50:5d:67:a4:15:2b:40:c7:62:4e:bc:
70:b7:f8:74:64:9e:27:ae:eb:98:f5:de:36:70:b1:b8:f3:99:
d9:e6:e6:a4:ca:9d:90:3f:19:5f:b4:7b:f1:96:a0:d6:c0:ae:
3f:93:da:6c:ae:9a:54:50:ea:d9:5f:f3:4c:6c:99:19:ba:6f:
9b:20:b4:cc:fc:07:d2:c9:44:7a:27:a9:97:cb:b6:1f:9c:91:
0e:0b:3c:b6:81:31:e8:bb:a9:62:35:bb:08:54:18:83:f7:a2:
76:a0:c9:9f:49:d7:c6:2e:7a:95:8d:65:d2:60:59:db:2d:f0:
b2:bb:85:3c:04:15:3d:5f:50:a6:93:5f:02:28:33:bd:01:05:
f9:ea:96:1f:e1:93:8d:24:e3:fd:25:ad:6f:2b:21:19:9d:39:
a2:6b:17:93:2b:d2:bf:77:bb:76:a8:89:5f:d3:68:45:74:ac:
bf:b3:f9:8f:0e:74:b9:e7:72:23:f7:79:5a:9f:2f:23:43:61:
f7:c3:8a:62:ae:a5:68:8a:2a:4f:f2:ca:7e:8f:db:de:83:83:
1c:20:b0:46:4b:39:28:ba:eb:38:f6:c8:63:85:35:05:0d:98:
bd:7c:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:37 2025 by rpki-client