Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: kXxRA6iBCIDm63VOOP/q/1HT5mZs+aYUz2UcTkgBj5U=
Subject key identifier: 7D:3E:3E:1F:C6:2A:85:47:F9:E1:44:E5:3A:3D:EA:2F:38:DE:B2:D8
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 0198D5835C9362C350865261C671DC3E838A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: AkzhV3NDPn6hY4pspeGDusMCR8R/89qyZNz+/A82PHs=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5c:93:62:c3:50:86:52:61:c6:71:dc:3e:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=7d3e3e1fc62a8547f9e144e53a3dea2f38deb2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:8a:c4:30:a1:2a:ab:94:3b:dd:c0:73:91:
85:c7:28:48:e9:9e:9a:98:b2:ce:9f:e3:b3:4a:d6:
53:1c:aa:d0:0e:1a:d1:ac:31:cc:6a:71:08:ff:d8:
a5:49:25:2e:7c:f8:dd:93:fc:28:da:78:ec:cf:c7:
75:0f:0e:b5:40:91:a1:6a:ed:21:03:6f:d8:fb:e9:
a7:c2:06:9f:5d:70:be:64:85:78:73:19:20:be:dd:
33:3a:63:aa:18:52:86:1b:51:71:c5:26:e8:45:61:
37:6b:6e:d2:7d:14:53:cb:38:e6:35:04:fb:68:84:
6e:6b:1e:3c:7e:95:c6:bf:e4:9e:77:4f:28:ea:24:
32:64:dc:a0:7f:21:43:88:50:63:06:63:fe:5b:2f:
53:52:9d:d2:b0:aa:cc:5b:0b:fd:79:83:20:59:8b:
0c:73:1f:b9:10:c5:00:95:2d:6c:f0:e7:1a:4e:e4:
a7:15:b6:a8:4e:aa:e9:64:81:19:8d:f6:bf:49:c6:
33:89:ee:03:61:c7:78:ee:ec:24:7c:5b:26:e2:06:
ef:b5:81:34:f9:85:3e:05:85:a7:72:3f:46:19:cf:
6a:d4:16:73:58:43:ea:02:3b:fb:1e:8f:8d:41:e1:
e7:3f:81:46:0a:6c:9e:7e:2d:9f:ef:78:ea:07:07:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3E:3E:1F:C6:2A:85:47:F9:E1:44:E5:3A:3D:EA:2F:38:DE:B2:D8
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:40:58:ec:ea:6d:d1:51:d5:09:da:d1:6a:7e:ac:11:60:e8:
45:c3:d3:7b:dd:a1:5d:6f:37:0b:2c:79:d2:24:17:ca:e8:31:
26:55:69:f2:0e:6f:e6:94:e3:c4:be:b9:bf:3b:74:56:9c:f6:
a4:77:44:3a:0b:28:49:8d:53:6a:4a:26:d0:62:26:81:ee:c4:
5f:e0:6c:b5:f9:7a:df:64:d6:fb:67:69:93:04:8d:9a:80:39:
f6:01:4b:94:ca:2a:2f:2d:97:f1:0b:38:c6:63:99:2e:db:83:
1b:c4:13:6c:5b:cc:6f:19:78:75:02:d4:e5:16:f9:72:d7:49:
02:61:c8:25:88:7c:bd:12:ba:52:2e:d4:cb:f0:be:1c:1f:9b:
9b:44:88:a0:41:50:60:bd:21:d7:a5:3c:50:b9:11:6c:fa:b9:
c1:3a:ad:e1:1e:95:3d:86:d9:de:74:04:96:7e:08:2c:74:77:
ad:00:f2:e6:a1:4d:fc:bd:f8:52:5c:c9:58:a1:4e:52:f6:8a:
c3:a6:54:99:c3:9c:ee:e5:16:41:0d:a1:5b:3f:fb:fb:08:6c:
d1:f6:5b:f3:f4:bf:9d:71:8c:bd:14:0b:0d:68:ab:2a:b2:9b:
c9:60:73:0e:8e:42:59:0b:16:68:56:c5:82:8d:79:80:84:9f:
17:2e:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:38 2025 by rpki-client