
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: +/he0IElGYryK/ELjwyvxtIyd1zn0AZmnDguOAnqZZ8=
Subject key identifier: D2:0E:11:88:38:B8:0E:F1:55:63:B3:F0:EB:44:58:AE:8B:71:C1:1F
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 0198808B465CF3D8C45D3E7AD17235749596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0D84
Signing time: Wed 06 Aug 2025 18:01:07 +0000
Manifest this update: Wed 06 Aug 2025 18:01:07 +0000
Manifest next update: Thu 07 Aug 2025 18:01:07 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: jgyfp++lq6BtKYohbr+1ce/qTe/w6pnW0rlnncgkx5U=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:46:5c:f3:d8:c4:5d:3e:7a:d1:72:35:74:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Aug 6 18:01:07 2025 GMT
Not After : Aug 7 18:01:07 2025 GMT
Subject: CN=d20e118838b80ef15563b3f0eb4458ae8b71c11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:61:9a:25:b8:54:80:e0:00:35:05:1e:ae:
42:16:82:29:c1:be:44:fc:ed:18:8b:cf:3c:42:8d:
1b:bb:3d:c3:cb:2d:7d:af:97:cc:3a:de:94:c3:e9:
be:18:8b:32:ee:8b:bd:ea:d2:d3:d6:9b:12:42:e2:
30:b8:92:ce:7d:ac:e1:2e:8a:f2:27:d0:12:96:54:
b6:c7:0d:0f:10:6d:6e:68:a1:f3:5d:13:98:28:85:
63:ae:51:d8:fc:6c:67:9b:0d:d9:f9:b0:37:17:f9:
9c:e7:32:0b:31:7a:b9:31:39:d8:4a:e4:e5:06:93:
d5:bb:57:e2:be:3e:cd:ea:52:e0:64:82:21:21:26:
b5:1b:ce:d4:52:b0:93:35:ef:89:35:ff:58:33:46:
ef:f7:ff:d1:95:c7:8e:38:53:c6:c3:aa:f8:a8:bf:
b1:54:f7:98:64:05:e0:29:86:3a:ba:bc:25:c1:cb:
d3:b2:a6:ef:7b:2f:22:87:2d:2f:69:35:76:72:0d:
2c:bf:d8:ee:94:4a:f1:0b:ea:75:87:24:86:09:af:
7d:0b:a5:04:9c:9b:85:9c:1b:b6:4a:4e:b1:48:43:
de:69:5f:1c:6b:e3:42:64:5a:4c:11:a8:aa:ca:92:
e3:a7:f4:fb:eb:26:64:57:76:8d:23:2b:70:8a:d1:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:11:88:38:B8:0E:F1:55:63:B3:F0:EB:44:58:AE:8B:71:C1:1F
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:27:4b:39:a7:cf:40:5c:d1:fa:07:cd:a9:06:f4:bd:20:58:
f4:4e:38:00:f8:9d:32:e5:b9:27:d4:0a:02:2d:e4:91:ed:cd:
2e:f9:40:6f:d6:b4:9a:1b:bd:b5:10:e2:ef:a8:8d:27:75:20:
3e:1b:1c:e0:5f:3c:67:ac:ec:65:a9:e8:42:6b:70:eb:d3:7a:
ef:3f:09:1c:62:c0:87:de:46:dd:f1:ef:5b:cd:11:a5:1f:65:
ec:d1:0e:e7:47:9c:c4:21:3b:4b:14:d9:d1:d5:37:a8:95:05:
34:44:b5:13:bb:77:4d:63:2a:2a:94:dd:44:e8:d7:2f:7a:51:
49:3e:6b:5f:35:9f:5c:30:33:42:47:89:08:79:62:f4:ea:83:
33:eb:7d:3c:a6:32:35:35:fa:21:9a:7e:3a:a2:b9:f1:a1:0b:
3b:d9:93:fd:1c:da:cb:0a:4e:a9:d8:67:12:b0:d8:c1:35:e8:
d6:45:bb:98:bf:8c:4f:55:ff:4d:81:42:7a:b4:be:ec:90:9c:
c5:09:15:fb:be:45:3a:df:ec:2d:2a:e8:67:79:e3:3a:a8:39:
db:93:ec:1d:06:fe:90:55:a3:3e:4e:2f:f3:d9:3a:49:bc:8d:
70:28:cb:93:cd:3b:14:be:d4:96:22:bd:e8:95:d2:63:de:10:
e2:2d:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:07 2025 by rpki-client