Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: fdU9ep9GqhoykUvtb0lmpgEWwWCzHe1PoDN4BbPkK/g=
Subject key identifier: 19:EB:AE:17:60:78:B4:9E:E8:4C:6C:96:86:9F:D7:C6:27:AF:D3:73
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 01988B10400AB50593501684DA3D8111333F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1121
Signing time: Fri 08 Aug 2025 19:02:34 +0000
Manifest this update: Fri 08 Aug 2025 19:02:34 +0000
Manifest next update: Sat 09 Aug 2025 19:02:34 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: f71il+8JKZSk3LSqIf9FXbgnAVoo/iCT4u4GMzfPOw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:40:0a:b5:05:93:50:16:84:da:3d:81:11:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Aug 8 19:02:34 2025 GMT
Not After : Aug 9 19:02:34 2025 GMT
Subject: CN=19ebae176078b49ee84c6c96869fd7c627afd373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:c4:91:3b:8f:e7:e1:2a:3d:99:88:c5:43:
6b:bf:c9:15:57:d0:c7:d6:2f:c7:f2:db:2a:16:7b:
08:9e:54:32:e5:56:ff:cc:c7:08:e0:d3:92:88:be:
49:f8:18:55:00:28:4f:69:69:83:61:78:8c:b3:ff:
cc:32:93:2a:53:20:20:6d:6e:49:2b:cc:80:83:84:
18:89:cd:fb:67:83:84:f7:07:1a:a7:aa:7e:92:fd:
34:b8:ad:cf:67:10:95:b0:0b:42:1e:bc:58:61:f9:
7a:2c:88:2b:17:2f:03:2c:16:ed:4a:eb:5b:c8:12:
76:82:b0:75:33:d6:43:75:92:b8:06:ef:bb:69:3a:
92:12:23:3f:4d:3f:de:50:c1:c5:d0:83:99:41:5a:
a9:17:e7:01:77:30:0d:44:c8:99:d7:d2:90:16:09:
bd:74:9b:be:5b:92:96:c6:31:b4:8d:29:ca:33:02:
03:be:f8:84:eb:b4:fc:6b:3a:65:e1:cf:d6:52:92:
41:4b:c6:93:b9:11:a8:50:e8:cb:6d:52:b4:39:d9:
b9:02:12:b5:54:54:9b:5f:f1:37:36:9f:da:7c:4a:
b3:a2:24:ae:7d:cb:4d:2c:c2:dc:8c:e8:3a:d1:7a:
29:94:fd:58:46:fc:dc:7e:e7:73:c0:0d:21:ef:6c:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:AE:17:60:78:B4:9E:E8:4C:6C:96:86:9F:D7:C6:27:AF:D3:73
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:96:d2:1a:44:a9:ed:e0:c7:b3:9a:d5:f0:a8:42:24:5a:
70:33:85:26:69:97:1e:21:00:0c:72:88:87:c7:78:5f:8f:4f:
d6:e6:38:f6:1c:35:2b:c8:99:a6:08:5b:96:27:dc:34:13:9c:
62:6f:07:e4:9b:d1:f4:d9:7a:81:21:dd:97:a9:a0:25:64:fb:
4f:69:b6:4d:ad:c9:e8:35:88:c0:52:ef:dd:66:73:ba:6b:e8:
09:81:80:b0:9f:90:2d:6a:ac:52:10:14:19:ca:d0:26:78:88:
a6:5e:8c:65:de:d5:7b:28:95:c4:f5:f6:96:b5:8e:c6:c6:04:
5d:3b:89:bf:41:60:c4:35:00:ad:e0:62:3e:97:66:4c:b3:cc:
8f:7c:88:db:cd:fb:c2:96:6b:91:65:ec:a1:da:b0:e4:98:7f:
8e:95:e4:f8:2c:df:36:3d:64:cb:21:e1:d5:09:f4:06:d1:a9:
8f:dc:a3:2e:d2:dc:1e:83:08:7d:80:c4:35:b9:a3:27:e2:bf:
ea:bf:e0:f7:ee:70:f2:89:31:8b:59:cd:c4:3f:f7:1a:48:cd:
5e:75:f4:70:42:8b:df:02:af:2d:03:6a:bb:f1:9d:db:43:6b:
e3:f6:00:f2:9d:04:2c:dc:ff:e9:db:e4:eb:a2:06:a2:8a:48:
8b:4e:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:14 2025 by rpki-client