Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: i0Jg5Wxz10OJy8oF09QctZLtO9BXGPCv9aw8OXQNrUA=
Subject key identifier: 38:80:93:DB:68:95:65:9E:EF:3E:2E:FE:C9:B4:FA:6D:65:1A:FC:EA
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 01987FE69B363CE92EBCE2D1057970B9E8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 101A
Signing time: Wed 06 Aug 2025 15:01:16 +0000
Manifest this update: Wed 06 Aug 2025 15:01:16 +0000
Manifest next update: Thu 07 Aug 2025 15:01:16 +0000
Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: 612M83WUgfj1oRx3IcYBIF6cMLMtQ/NTSa8CMw1iZP0=)
2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:9b:36:3c:e9:2e:bc:e2:d1:05:79:70:b9:e8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Aug 6 15:01:16 2025 GMT
Not After : Aug 7 15:01:16 2025 GMT
Subject: CN=388093db6895659eef3e2efec9b4fa6d651afcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:df:d8:bf:d9:34:b8:cf:af:dc:44:a3:42:
1c:a2:9a:7b:29:32:7a:be:fd:51:18:84:8e:b8:d9:
42:15:e0:1f:71:6f:40:b5:37:9e:62:9d:6c:2c:d9:
10:8d:ff:6f:62:6d:c4:72:b0:d3:83:83:c0:c0:87:
34:11:e3:fa:b6:c0:e8:48:3d:e2:2e:da:6f:90:54:
ca:32:e0:a7:45:eb:30:21:fb:7c:80:b2:51:d6:09:
96:03:0e:19:40:77:4b:ef:82:99:c3:4c:93:bb:07:
68:f1:ff:25:9e:bf:cf:c5:da:3d:fe:be:60:dd:d4:
37:4c:52:e5:a1:42:0e:85:87:c3:3e:2b:c3:32:8d:
90:1e:64:0a:aa:63:28:89:8a:bb:0d:43:2b:4f:bd:
54:af:6f:60:ea:19:21:07:de:10:66:94:51:51:4c:
38:58:f1:9a:a5:d7:2e:28:34:26:a4:83:dd:2b:69:
90:fc:53:3f:d6:83:b9:b7:31:40:5a:87:cc:c1:98:
e8:5a:17:89:4d:54:3d:70:7d:b0:d7:c4:dc:0f:ac:
3d:a7:e2:42:e0:79:c7:57:e3:eb:16:b2:8f:98:85:
1d:18:5b:8e:6b:46:67:6d:7f:b7:5c:c5:ad:20:24:
b8:eb:23:35:b1:93:94:23:ae:a5:0a:e6:ba:1d:12:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:93:DB:68:95:65:9E:EF:3E:2E:FE:C9:B4:FA:6D:65:1A:FC:EA
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8f:4f:76:ec:11:03:d4:e6:22:b8:51:d5:30:be:e5:0b:28:
01:36:79:3e:e9:dd:c0:33:32:d0:38:4e:3b:1c:31:6a:97:62:
a1:d0:b2:22:fa:f4:f7:f1:08:e1:54:56:7e:0e:2d:9c:2a:97:
d6:d1:2c:b8:5f:ec:5d:b6:c7:37:34:18:85:3d:24:a2:92:aa:
8d:ca:91:46:af:b3:d0:3b:7d:16:0c:20:21:21:98:ec:f5:71:
5e:cf:e0:92:53:a5:c5:ef:74:ce:4d:13:40:60:c3:38:6a:7b:
4f:f9:e2:af:22:e4:57:28:a7:31:2a:12:49:72:85:f2:3a:84:
5b:fe:d4:55:55:8f:42:c1:d6:f4:b9:39:cd:eb:9f:15:cb:d2:
e4:a1:ba:b8:09:dc:fa:c8:b1:c8:ec:c7:c8:79:19:13:0f:81:
16:04:af:31:d0:17:d8:16:cf:c0:c4:30:29:be:4f:73:98:31:
5b:db:d8:18:e7:20:72:2f:13:d3:73:48:ef:a3:ab:ef:ab:99:
dd:c0:52:c6:74:02:bd:32:91:51:5b:0e:13:98:e6:e7:3b:fe:
02:6f:33:a0:f3:0a:03:e2:2d:88:a9:62:70:be:41:5f:dc:37:
c6:44:ce:9e:a1:b1:ff:45:68:62:2f:8c:39:ac:d8:05:19:dc:
43:72:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:08:57 2025 by rpki-client