Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: 1jZrHBcFEoOiP1/suBgmcTShdbhx7/UPbwz5yKEkIx8=
Subject key identifier: E2:5E:D2:11:45:A9:51:D2:03:6B:DD:EF:F5:37:04:46:78:37:BA:51
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 01988DA2292FF11F2374C6F8802B5B3DFE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0A87
Signing time: Sat 09 Aug 2025 07:01:11 +0000
Manifest this update: Sat 09 Aug 2025 07:01:11 +0000
Manifest next update: Sun 10 Aug 2025 07:01:11 +0000
Files and hashes: 1: GBm75ZmZioJB2ocCMhAt7gwcAjo.roa (hash: gsh5fLNtNPH78sBeeVxRzXrv6jA9hVTz/xvnQZtNCkc=)
2: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: zHVBKrTqzJ/FGJAmnETi80lkJKJx6CJyJX9BQm77UMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:29:2f:f1:1f:23:74:c6:f8:80:2b:5b:3d:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Aug 9 07:01:11 2025 GMT
Not After : Aug 10 07:01:11 2025 GMT
Subject: CN=e25ed21145a951d2036bddeff53704467837ba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:6e:5e:a9:0b:62:f0:08:67:26:d4:89:d6:
8b:08:36:8a:ab:58:99:8f:ec:f3:85:02:d0:30:2b:
ab:ce:c4:c8:d3:f2:68:ff:34:c0:f8:7e:3f:e7:18:
50:1f:9a:dc:f6:b5:56:f6:a7:c2:ba:b3:85:b3:2e:
df:fb:fb:95:42:b1:1f:70:ee:de:8a:d4:ce:97:70:
dd:87:47:5d:0e:8d:78:f2:10:be:f3:69:7e:1f:ee:
a2:b9:6c:dc:b4:de:0d:aa:08:a6:fa:aa:f0:66:f5:
5c:96:6c:17:a9:43:5e:85:f5:3f:f1:b2:3b:90:af:
b5:77:b5:a2:ab:e0:3b:57:23:70:31:ff:e5:fb:c5:
05:38:42:f2:e1:ed:a4:71:1e:66:0d:6d:71:72:af:
26:66:fe:e5:f6:40:ee:63:15:76:2a:b8:29:19:dc:
8d:55:25:f9:12:a0:f1:f3:5d:87:ad:15:71:ea:2c:
a5:ad:a8:81:8e:8c:3f:dc:31:dd:24:0e:ed:54:c0:
e2:02:75:13:59:a5:5c:91:e0:af:b0:99:34:9b:60:
a4:d4:b6:45:b6:cf:a1:fb:39:e7:0f:e6:4b:d3:13:
17:f4:fc:cb:88:88:e7:e4:de:d9:72:6e:54:1e:8f:
15:3a:99:e7:e1:a9:5d:cf:5d:18:22:de:4d:03:c1:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5E:D2:11:45:A9:51:D2:03:6B:DD:EF:F5:37:04:46:78:37:BA:51
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:17:4f:d9:44:6c:90:3e:31:43:49:61:b6:bb:eb:64:b3:69:
13:c1:87:e6:5e:c0:53:7c:86:82:b3:60:8d:c4:69:07:05:d8:
25:98:b8:06:8f:ac:69:8a:f3:96:da:0d:29:fd:8f:0b:4c:25:
18:67:ed:fa:ff:fe:b3:de:ee:fe:2a:1c:c5:8e:83:54:47:e5:
1e:ed:b3:fa:58:80:94:17:c5:82:a9:d6:a7:f2:70:25:cc:ec:
09:7f:03:92:0f:e9:3e:85:d6:ba:d9:69:25:46:1e:1d:e3:56:
de:9f:42:c7:f1:db:ae:fa:6b:fb:e3:c7:33:f8:93:c8:fe:07:
24:6a:7e:bd:cd:1f:43:df:f5:ef:44:1d:ac:a8:c1:32:f9:63:
1c:37:b9:a7:c8:28:28:0a:cd:6e:e8:0f:89:7d:de:c4:e9:b2:
84:a0:c1:95:f2:59:31:a0:c4:31:56:8b:87:bc:70:ca:7c:b0:
9b:17:c7:49:9f:ff:a3:ba:e2:c5:af:69:18:ea:7c:83:97:5c:
99:dd:b8:7a:50:24:b3:77:f3:ed:8c:01:aa:6f:f8:d5:5b:f0:
51:bd:1a:d3:0b:5f:db:6a:c7:40:77:72:86:e3:20:b0:92:92:
b0:70:76:29:8d:6f:d7:82:da:e8:ce:cc:a6:6b:a5:d9:30:f9:
b4:63:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:47 2025 by rpki-client