Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: MO6DdI0SZKTf739I2lJesG9LGP5ib8WLExNNphSxJYE=
Subject key identifier: 80:99:9E:CC:27:30:1B:B9:41:97:7A:DA:CA:43:E3:76:C6:E1:2A:BC
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 0198D5BC3F416826D7372966DE1808594161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: A8u/9wDEfFTubUWLzunN4vHMxxrAopGuip/ki3kAFxw=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3f:41:68:26:d7:37:29:66:de:18:08:59:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=80999ecc27301bb941977adaca43e376c6e12abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:8a:59:d3:22:8f:9c:a9:d0:55:bf:f2:46:
27:b8:ee:ed:68:ab:6b:61:7f:ed:c4:3e:aa:20:29:
82:6c:5c:9c:2b:d2:ca:d3:77:b9:19:2e:66:f4:74:
17:c6:f0:b9:50:cc:59:0b:16:ca:b5:85:66:d0:67:
7b:81:5a:0b:ac:10:db:9f:02:16:ab:71:09:28:73:
41:3a:ac:75:a9:a6:c3:03:c7:a3:7b:3d:ce:da:88:
d7:b9:52:6a:0e:4a:d2:ab:90:cf:e6:e5:42:2d:c8:
5f:24:2a:08:55:76:30:f0:21:d8:e5:ca:4f:ed:60:
71:a1:58:2d:e7:3a:79:ad:9b:a1:86:d2:5c:ae:6c:
31:fb:58:73:fd:22:c5:1c:2b:5d:35:a1:ac:38:52:
1a:be:09:a3:fa:07:87:1c:5c:fd:61:b6:a5:9f:ad:
4f:b3:87:1a:7b:78:cc:98:d1:b7:12:b4:6a:0a:41:
50:f2:78:aa:5c:df:c8:41:44:3c:5b:20:f7:99:9b:
c1:61:80:d4:46:7c:e6:b7:d3:f2:05:cc:1c:6b:b9:
21:c7:2f:3e:64:af:0d:82:2d:99:4d:a6:ba:a4:7e:
49:2b:d8:bf:7c:14:f6:b4:19:68:62:30:1e:a6:af:
f9:34:f0:7c:09:6f:73:b7:41:ee:39:c7:6c:bb:b4:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:9E:CC:27:30:1B:B9:41:97:7A:DA:CA:43:E3:76:C6:E1:2A:BC
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:43:de:52:95:2b:c7:84:fd:d6:26:b8:2f:6f:1c:04:1c:
23:c3:74:e7:f6:0f:19:54:bf:52:5a:dc:71:e9:79:61:cb:12:
9a:9a:09:83:7e:db:d5:e4:3f:12:3c:b2:66:8e:67:a0:ed:0d:
20:c4:a0:94:b7:0b:04:44:39:01:7d:2b:b4:1f:95:ff:b5:43:
c5:24:f1:b9:4f:5f:d5:dc:1b:e5:aa:10:de:64:48:51:1b:eb:
fa:c0:9f:d3:19:3f:d7:dd:72:b0:44:40:14:54:99:11:9b:13:
7b:23:2f:8f:7a:38:d9:9a:00:c1:2a:28:3f:6d:36:e7:0d:bf:
71:7d:2a:38:1a:7b:dc:84:02:f3:7a:ce:b4:1d:72:be:b1:9c:
fb:c7:3c:21:b6:3e:d8:5f:ae:db:c1:60:55:c3:a5:84:b2:4c:
a0:d0:d0:df:df:44:2d:e1:75:99:dd:3b:50:96:99:3d:14:59:
25:e3:9f:28:5e:1d:3d:91:21:67:f5:a8:4f:ab:5a:48:2a:97:
97:7a:8e:89:c7:00:26:65:2a:56:3c:30:7a:3b:cd:b5:7e:a2:
39:f4:fa:f9:e8:1a:91:e3:96:1f:f8:9a:22:b7:1b:ac:e5:f0:
be:81:e8:e6:04:2a:5f:95:54:b0:7d:70:dc:4d:ae:57:18:1c:
fb:63:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:06 2025 by rpki-client