Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File: U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier: xuD69feVTZtKWvjK9+6J4GeVhmRrvea2iF0Psjtl2hI=
Subject key identifier: C7:61:A1:06:C4:65:A3:B2:0E:5A:6D:12:58:DD:07:54:B5:2D:6A:7B
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer: /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial: 01987DF7EF45FC30FCEFFFBAEAAB75BD1F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number: 0940
Signing time: Wed 06 Aug 2025 06:00:57 +0000
Manifest this update: Wed 06 Aug 2025 06:00:57 +0000
Manifest next update: Thu 07 Aug 2025 06:00:57 +0000
Files and hashes: 1: Iy0rHic_3PT8I4SllQOcj0rP21I.roa (hash: 1k4b/DPKi2PAqgzyxoLR8dS4rCq9uyypxDCl+6BFsrg=)
2: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: pPRpLLZsvvrU/lfVh/3WIcZYeNloKASdt5AzpmU1hKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:ef:45:fc:30:fc:ef:ff:ba:ea:ab:75:bd:1f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Validity
Not Before: Aug 6 06:00:57 2025 GMT
Not After : Aug 7 06:00:57 2025 GMT
Subject: CN=c761a106c465a3b20e5a6d1258dd0754b52d6a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:aa:82:da:6b:99:83:2e:ba:17:d6:73:42:
cb:14:79:74:00:c5:f9:14:25:41:87:07:cf:a4:10:
96:7b:8e:17:cc:bc:ff:5e:9b:c6:31:23:df:fd:bc:
b5:2e:ab:b7:b1:47:53:a1:c7:56:5a:e1:de:dd:c7:
51:7c:b7:d9:6a:36:62:9d:07:79:42:b9:90:9e:a9:
e6:ab:74:85:dc:c6:21:af:35:1e:95:86:16:19:20:
20:4c:9b:87:55:17:b8:f9:86:3b:f8:6e:a5:11:7f:
ca:52:8f:7c:9d:e2:d1:03:db:85:db:5a:2c:ce:d9:
e0:1e:29:b6:c9:95:df:7a:1f:1f:ac:94:14:6c:53:
0b:5a:99:9a:9c:01:1f:92:fa:4d:e6:8a:c1:de:b5:
f7:bc:d7:2a:b4:5f:90:93:2b:d6:0d:21:f4:cf:38:
e0:be:f4:b5:63:9d:ef:82:71:01:dd:20:c3:cf:a9:
e9:08:dc:63:b6:9e:5f:3f:13:d4:5f:90:e2:81:85:
e0:c9:29:c8:97:63:ed:e6:fb:3c:3b:6f:a7:9e:ee:
61:ad:2a:61:e3:3b:32:d5:51:6f:af:47:fd:55:79:
f3:93:c5:93:bf:32:b7:8f:14:69:e3:42:81:01:e7:
56:9a:02:56:7f:11:b6:5b:78:07:d8:c9:01:ef:51:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:61:A1:06:C4:65:A3:B2:0E:5A:6D:12:58:DD:07:54:B5:2D:6A:7B
X509v3 Authority Key Identifier:
keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:99:ca:3c:eb:a6:5b:1e:b0:14:d2:1d:ea:06:22:30:f2:6c:
13:62:a6:e2:dd:5e:ff:dc:67:e0:9f:6a:8f:40:47:7d:13:96:
47:53:7a:04:13:1e:a1:6a:d3:ae:81:0e:26:11:77:3f:45:8a:
64:10:cc:c4:97:65:aa:96:66:80:6d:53:cc:71:2f:7b:80:5b:
f3:b0:5e:ea:6e:14:ff:dc:04:db:77:09:7f:3f:8b:68:e8:c5:
c2:8d:c8:e0:56:e1:45:9f:b5:ff:99:8f:74:40:e4:ac:de:f8:
e9:7c:9c:e9:77:de:d4:04:5f:2f:cb:3e:47:b6:14:ee:85:c8:
eb:5f:9b:92:96:1d:af:4a:f0:64:d2:b6:12:d0:fc:1b:9f:02:
56:13:58:34:07:c6:ae:e8:1e:76:ba:c4:32:e3:d5:1e:d4:19:
0f:f4:67:79:4c:fb:ea:5b:c2:02:31:19:b1:52:8e:6c:b5:82:
77:ef:17:6b:07:6a:8f:ab:b9:28:d9:7d:0d:9e:0d:8d:7f:35:
47:05:ec:ef:af:2d:0a:4f:95:ee:ea:10:dc:4e:12:0d:95:57:
67:98:b7:96:7f:c4:39:25:0c:a3:42:8e:4e:11:fc:97:df:5a:
25:f9:8c:83:df:3b:f8:7f:3b:20:5f:60:5d:ef:1f:aa:9c:5d:
a7:cf:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:24 2025 by rpki-client