Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: 4QOPEE9a3yjrjUcNSOdtobPtd4bMTT0g525pDjLEwPg=
Subject key identifier: 32:B7:AD:11:06:8B:8B:8C:1E:A2:6A:88:9F:E9:4B:0B:B3:3F:1A:09
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 0198D850C1D0B806AA5C6585BAC2F4DC1EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 0129
Signing time: Sat 23 Aug 2025 19:03:47 +0000
Manifest this update: Sat 23 Aug 2025 19:03:47 +0000
Manifest next update: Sun 24 Aug 2025 19:03:47 +0000
Files and hashes: 1: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: dq7K/AeB/KkioSYWf8mgiluhhDt6Jeq9ptFiyiXDLIg=)
2: pjCkQXuBbqOHzoKD1mw-qrFiWGY.roa (hash: MiX/u7zxhzpsdUN3cx+sdMgoTiE427DJRykzUPzL3BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:c1:d0:b8:06:aa:5c:65:85:ba:c2:f4:dc:1e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Aug 23 19:03:47 2025 GMT
Not After : Aug 24 19:03:47 2025 GMT
Subject: CN=32b7ad11068b8b8c1ea26a889fe94b0bb33f1a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:b9:ad:d0:0e:f4:6b:1b:34:2c:d4:28:b1:
62:78:3b:d1:d5:32:f9:ff:8b:e2:ad:b6:b4:ed:0e:
4d:f3:87:a9:03:87:4a:7e:c8:da:78:d4:80:40:31:
3d:eb:55:c6:0c:3a:61:12:1a:e8:f2:f7:ee:65:b4:
8e:8a:51:6e:9b:0e:96:da:82:a7:65:31:96:37:2e:
5d:4c:31:38:9e:ed:c1:a0:f4:0d:4d:83:b7:d8:dd:
76:74:ac:09:f1:76:1c:44:f9:3e:87:18:d1:ed:71:
e3:e2:d3:0c:5a:2b:9c:cf:81:94:b5:bc:5e:ec:e2:
8b:f0:5b:5d:43:31:36:75:3c:b6:c7:a9:50:d1:77:
87:23:d8:1c:9e:4d:db:54:cd:99:e0:a0:eb:dc:40:
f9:3f:90:1f:dd:f9:38:23:94:27:a4:ee:60:46:aa:
e4:df:c2:d1:ce:49:b8:41:79:9f:54:53:29:85:f1:
2e:ea:4c:c7:c9:b8:da:36:b2:e6:79:58:8b:6d:d9:
56:b3:2c:59:15:0d:c0:1d:48:a5:f1:33:d4:53:5b:
f0:c9:65:a8:d2:94:19:22:40:d1:0c:95:38:83:a3:
f8:6c:e2:df:af:6b:14:f1:e9:4d:5e:1a:4d:ad:56:
7c:fb:a7:7c:fc:e9:a7:f8:9f:c5:01:ae:ce:c7:c8:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:AD:11:06:8B:8B:8C:1E:A2:6A:88:9F:E9:4B:0B:B3:3F:1A:09
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3b:e4:c7:6f:31:1d:cd:6a:5b:cf:60:1e:b2:e4:ff:eb:91:
8a:ca:63:71:d9:95:a4:17:93:4e:22:ed:35:d5:38:cb:61:c5:
2a:0e:fc:85:aa:30:cc:a0:b9:f8:f8:bb:df:25:17:33:ce:d7:
48:22:1e:2d:ae:41:8a:dd:c1:45:01:9f:47:89:38:44:41:86:
6a:fd:c7:a6:d0:ec:92:bd:56:f6:bc:66:8c:90:8f:83:1d:51:
df:e0:f3:e1:da:fe:90:3f:fa:0b:a6:50:7b:ba:70:5d:08:d2:
57:b5:5b:10:b1:fd:a6:a7:27:e7:f6:cf:ad:a0:f6:06:dd:ae:
be:e1:12:40:1b:d0:36:dd:3f:8e:8b:df:0b:f3:61:a6:a9:c0:
20:1b:5b:75:34:15:f8:e4:e2:0a:be:4d:32:c8:7e:8e:20:b1:
a3:bc:4c:d0:1e:f9:f1:18:d2:a1:ec:bb:b5:81:70:2a:1e:3a:
4f:7b:53:e1:d7:97:2c:31:26:d9:6c:1c:15:26:db:36:68:71:
74:c9:43:e0:0f:5a:0c:4a:fa:53:21:e9:ea:4e:94:c6:f7:69:
2e:e2:d3:4f:6a:6c:48:d7:84:d6:03:f6:06:77:8a:9d:42:9c:
e2:6a:c7:2a:3b:5f:f3:cb:93:49:b5:66:b7:b0:3d:65:01:8e:
37:62:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:27:22 2025 by rpki-client