Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: /zQw6WXv0rfiP5BfEAXMwshOYggE+vOUkYfxJzv7iqE=
Subject key identifier: B4:8E:1F:9D:DA:32:97:74:F4:C5:E6:C5:2D:37:B1:C4:2D:04:5C:35
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 0198D583FBAC2D73E0F9E9C5D3908C64A52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:53 +0000
Manifest this update: Sat 23 Aug 2025 06:00:53 +0000
Manifest next update: Sun 24 Aug 2025 06:00:53 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: ZSS2GpiGFt43kkngXb94hw0kzuS0vovMGxzG6l/1ApA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fb:ac:2d:73:e0:f9:e9:c5:d3:90:8c:64:a5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Aug 23 06:00:53 2025 GMT
Not After : Aug 24 06:00:53 2025 GMT
Subject: CN=b48e1f9dda329774f4c5e6c52d37b1c42d045c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:1c:b4:2f:2d:2f:ef:d2:dd:34:78:47:8f:
97:f7:6b:65:08:9c:c2:e9:89:56:b4:49:4a:3d:a3:
d5:ce:ef:3c:fe:15:58:b8:17:64:5b:eb:78:f0:88:
4b:7f:84:de:60:70:9d:c6:37:d4:64:4f:5f:4e:42:
85:dd:ef:2a:29:56:a2:9a:ed:07:5f:2e:27:b6:0c:
c2:a5:03:8a:f4:fb:ad:3b:d9:85:79:82:86:f3:7a:
47:ba:b4:2c:d1:08:8a:1f:08:6d:4d:03:74:62:cf:
19:b5:17:49:cc:05:a7:f3:ce:e9:99:c6:4a:29:4f:
01:fc:0d:c6:74:74:98:a0:5f:b6:a8:ac:9e:30:46:
3d:17:9c:de:45:93:9d:57:fd:d7:b6:a0:f0:db:5e:
68:90:e5:89:be:39:9c:22:57:7f:8b:30:8f:97:03:
60:81:89:ec:d4:8c:55:c8:4c:50:d9:63:9f:1a:d5:
dc:13:07:ff:46:ef:d1:00:ca:db:33:2c:72:0d:48:
86:52:13:86:a6:da:bb:bc:68:4e:12:02:c9:f4:44:
85:77:85:7d:9f:ee:c9:23:92:92:bb:9a:83:c3:0a:
7e:25:e2:62:1c:3f:7e:92:87:86:ab:62:f4:51:bd:
08:36:5b:5d:65:78:4c:c8:7b:dc:5c:6f:91:e9:b2:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8E:1F:9D:DA:32:97:74:F4:C5:E6:C5:2D:37:B1:C4:2D:04:5C:35
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:0e:62:91:b4:a7:aa:2f:aa:03:0a:25:4f:11:b0:56:87:
bc:c9:2c:23:f7:ec:09:09:18:43:27:ec:53:86:cf:61:1a:05:
cb:31:77:8d:a4:36:e9:83:3f:6a:7c:42:9f:f1:6f:95:2f:b7:
25:6c:b5:02:5f:6e:10:0a:07:5c:be:a2:d7:5c:70:8e:32:ed:
f2:6f:b9:55:c7:1d:5c:5c:b7:2f:83:fc:24:48:f6:38:30:3b:
a9:db:6a:ad:ae:29:c6:67:32:4e:04:cb:b1:32:6a:60:ee:f5:
dc:fd:c2:f4:5b:af:6f:40:eb:4b:e1:ec:c6:34:4e:0a:66:cd:
4a:ee:1b:3b:73:2c:8b:ab:96:b6:19:ee:5e:f9:7b:46:98:a0:
bd:77:7f:69:e0:40:50:dc:c6:a5:6a:08:0f:ca:83:e9:56:48:
2f:97:18:e7:96:80:23:7c:49:b7:5e:a1:18:9b:4b:c6:cc:bb:
15:4d:ce:97:52:29:86:9b:88:9a:e3:f2:dd:0f:fe:27:b2:36:
db:06:46:3d:0c:b8:91:a5:4b:0a:80:bf:cb:97:6d:01:4b:40:
6d:74:e3:64:e8:3d:e4:01:0e:5e:fa:cb:7a:a1:e3:de:c9:88:
aa:b9:54:54:b1:25:c9:a1:5f:fb:59:71:7d:47:73:54:75:4d:
14:98:d3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:34 2025 by rpki-client