Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
File: UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json)
Hash identifier: ynymztfjHPCa6jxpN84QEyl4daWNv1j1/qmo9ymIRZc=
Subject key identifier: 34:C3:58:C3:DD:B2:5F:AA:02:34:20:DF:61:B8:68:C8:10:A5:3B:5E
Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Certificate serial: 01987E65950E62D43B824BEE1709E98A9074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
Manifest number: 47
Signing time: Wed 06 Aug 2025 08:00:43 +0000
Manifest this update: Wed 06 Aug 2025 08:00:43 +0000
Manifest next update: Thu 07 Aug 2025 08:00:43 +0000
Files and hashes: 1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: NyPNODprUW0UiGOYTp1LXqdiipfx52oXV+WU7OOthOg=)
2: dUxtdXIDzjyUlYOtBFzm-wQHLuM.roa (hash: lU+saX5Y8NpUNdHr5ny3vDxig5SKi8AIgZItEb0hTg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:95:0e:62:d4:3b:82:4b:ee:17:09:e9:8a:90:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Validity
Not Before: Aug 6 08:00:43 2025 GMT
Not After : Aug 7 08:00:43 2025 GMT
Subject: CN=34c358c3ddb25faa023420df61b868c810a53b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:ee:f9:24:2a:e3:e9:84:f2:97:78:29:f0:
ec:67:4b:94:1c:a9:64:51:9d:08:d3:f0:66:41:c3:
d4:43:8f:24:81:9b:d8:e5:23:f9:3e:c4:8d:67:48:
56:82:c9:72:87:6c:39:3a:e5:af:79:06:3b:3c:35:
b6:3f:b9:3b:72:68:41:77:4d:0b:c4:6b:c0:80:8c:
dd:e5:7d:02:d1:89:37:3a:a1:a8:41:65:ad:d5:9f:
62:92:f8:c1:e6:d0:c7:e2:a1:18:40:d4:e1:b8:d7:
da:e8:e7:e0:d2:09:e3:7e:cc:cb:ed:13:78:e3:7b:
b1:84:aa:79:3e:7e:4f:f9:88:03:73:53:0c:4a:0f:
c9:ee:90:57:3b:35:d4:12:18:07:bf:47:a2:10:e6:
4d:ed:59:36:32:26:80:64:04:50:a7:a2:7e:5c:d2:
85:84:44:f0:6d:c1:2d:4e:69:62:18:75:67:f4:92:
88:f7:bd:40:b8:e9:d0:a1:df:e8:71:db:24:67:78:
17:f5:82:81:bb:0b:11:d8:21:13:48:af:8a:71:b3:
7d:ec:8a:30:1d:00:5c:ab:6b:bd:be:17:d3:0c:37:
80:f1:da:f9:9b:72:c5:e0:2c:9c:b4:7b:6a:23:e4:
a4:63:ee:37:97:f7:7b:38:f9:e6:6d:74:29:49:0e:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:58:C3:DD:B2:5F:AA:02:34:20:DF:61:B8:68:C8:10:A5:3B:5E
X509v3 Authority Key Identifier:
keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:98:99:93:49:83:f2:fd:38:80:23:6e:da:d4:11:a5:24:8a:
31:ae:db:5d:25:13:40:9c:14:d5:61:35:58:d9:0f:cf:30:b1:
c0:35:05:75:34:1b:88:c6:8d:fd:9b:f5:d9:a9:e2:54:80:fa:
40:4a:c9:28:de:33:0c:c2:81:ac:f8:c7:d7:13:9c:b5:48:62:
73:41:82:a1:f1:bb:45:1d:19:27:5d:57:4f:87:45:53:95:21:
e6:99:80:d4:f7:19:b2:e7:b7:6b:6d:6c:8f:b9:f0:a2:6a:e0:
73:b1:6b:85:92:30:82:b0:ae:fa:55:5f:32:88:53:b5:73:34:
2f:62:5d:e5:bd:1d:9a:b3:2f:af:f4:60:c6:f7:5c:a4:b0:50:
f8:26:12:2e:ab:14:b0:63:3a:6b:2a:2a:17:14:cf:f1:bd:cf:
62:77:40:af:4c:1c:88:74:53:d2:6c:fe:b2:df:56:0e:7c:57:
87:c9:25:ba:b5:37:db:b5:92:31:5a:5d:65:13:35:f2:86:68:
83:05:a1:fe:20:96:c6:ea:f8:7d:10:ae:5e:2c:47:de:39:35:
f1:d9:40:ad:ec:10:18:ea:40:fe:51:db:35:4b:e1:7e:fb:3c:
11:8d:db:59:d1:87:15:58:8e:be:78:40:62:cb:67:1c:97:21:
ee:54:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:09 2025 by rpki-client