Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: Lc3bv7qezqU2F6kCEoHczsM9uN6RjBrsO5BIn5uOJsU=
Subject key identifier: AB:61:EC:66:4A:20:BE:91:05:E8:E1:1E:74:DF:17:63:3B:16:B9:88
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 019883C370BA0547CDDA0652F71DABF27B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 0602
Signing time: Thu 07 Aug 2025 09:01:20 +0000
Manifest this update: Thu 07 Aug 2025 09:01:20 +0000
Manifest next update: Fri 08 Aug 2025 09:01:20 +0000
Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: VDSg6gRPyz9DitDaTtZQjDJJMPK5Gx8h0Phgwef09yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:70:ba:05:47:cd:da:06:52:f7:1d:ab:f2:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Aug 7 09:01:20 2025 GMT
Not After : Aug 8 09:01:20 2025 GMT
Subject: CN=ab61ec664a20be9105e8e11e74df17633b16b988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:97:d2:98:10:a4:e9:3e:75:b2:8a:0f:e0:
39:70:84:39:5f:be:5e:f0:9a:83:0a:fa:c6:a7:2c:
71:b4:67:68:83:fd:9b:08:63:b5:0a:3f:6c:a5:0a:
1e:5e:89:ba:37:c0:d7:e3:c3:7e:71:b6:e5:30:44:
b9:f5:70:a0:47:bd:3b:70:2c:70:8c:ad:e0:b8:fb:
80:98:b6:85:95:0a:1f:91:42:e7:16:34:56:57:5b:
ee:03:79:e5:aa:fd:f0:d6:f7:4e:56:74:92:22:18:
6c:9b:96:c6:dd:42:68:6e:8c:a6:7e:7b:e6:70:09:
a8:77:97:d9:0a:93:61:7e:8d:a6:4c:43:a1:06:ce:
e0:66:cb:91:5d:83:54:72:78:48:c0:51:2a:7d:9b:
d4:5d:3d:57:63:06:9c:83:e3:22:26:f6:b9:a7:28:
ae:04:ec:e8:61:16:52:8b:00:da:46:42:06:b7:3d:
df:ec:31:84:de:5a:2e:cb:dd:9e:ba:b5:da:f2:28:
8d:1c:cd:b6:21:73:75:8d:48:4b:9c:1e:84:d2:d8:
c2:be:09:ef:03:d9:ce:8a:56:ed:6f:4d:fa:a2:c0:
b7:aa:3a:52:eb:50:53:c4:44:2f:31:d5:21:4b:39:
af:42:90:e1:e3:79:16:92:39:8c:d0:1b:3a:db:c4:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:EC:66:4A:20:BE:91:05:E8:E1:1E:74:DF:17:63:3B:16:B9:88
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b6:ab:01:d1:d4:7e:72:e5:e5:fc:9e:e8:82:13:3d:c2:44:
ee:7b:46:3c:92:77:0e:1b:cc:61:a6:e8:bf:e5:82:a7:67:89:
22:bf:06:7e:a4:09:6c:f3:8a:fb:7b:96:ac:c1:f8:e4:cd:3e:
cc:f2:44:a1:56:6f:52:a1:c2:d9:cd:07:cf:51:a8:b5:a6:62:
73:fd:55:b8:eb:4e:c7:14:27:ce:06:e0:bf:78:e1:8f:f2:26:
2d:f9:f3:37:6b:6f:e4:78:10:20:17:ff:11:35:6d:c1:1c:35:
f9:dc:44:70:5c:68:6e:30:e9:f2:61:ce:da:e4:f0:03:e1:3e:
b1:07:e1:bf:a2:25:63:79:5e:fb:4e:07:6c:b6:87:7e:d9:3d:
f8:a3:5b:30:fd:1d:7f:33:41:78:c9:09:23:d2:e3:a8:27:c0:
16:dc:60:05:93:c8:17:05:e0:2b:b4:54:b2:46:a8:fc:7b:6d:
3b:83:c9:ef:63:e9:dc:01:a7:51:85:eb:c2:22:bd:3d:0a:f0:
bf:28:1a:bf:b9:f7:68:26:17:99:36:16:8d:fc:a3:04:ec:4e:
18:20:65:23:b0:20:27:ba:6d:a7:8f:29:69:f9:2b:fc:b2:3e:
00:1d:76:35:e9:87:0c:ed:09:cc:dd:fa:22:4f:87:b1:ba:ce:
ac:51:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:45:53 2025 by rpki-client