Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier: hu2lUjRheGNYoVStp7wVhzELojPKFRX1MW3Xi8c1ovE=
Subject key identifier: CE:EC:6D:8E:9C:24:37:89:E9:C7:94:03:FC:5A:6E:36:F9:9B:DE:A2
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 0198D583EFBA42C79C6E3B298299B5C20D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number: 0AA9
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=)
2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: 4H6J5qo67S/Z1CydgZNr/wPcwwxksBO51zSOK2HPdtw=)
3: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=)
4: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=)
5: kfd0B7YUXjP5BkiSga_I2bFGDjE.roa (hash: BHoHm0FgI/hNJZj/ps+lj0bhjSOg0FxpXV30jd+oQxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ef:ba:42:c7:9c:6e:3b:29:82:99:b5:c2:0d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=ceec6d8e9c243789e9c79403fc5a6e36f99bdea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:04:29:b6:a7:68:af:a6:35:8e:16:e6:ce:
31:4b:97:89:2a:b0:0c:96:45:d4:65:3c:fb:19:fd:
43:fa:ec:07:07:c3:e1:ab:fd:68:1b:ad:96:7b:82:
ab:0b:2d:4a:3d:96:9d:77:34:dd:26:56:ef:00:de:
78:f7:7f:68:98:a5:56:d5:12:cc:57:ee:9c:c4:54:
a1:7a:3d:bf:5a:3f:33:4f:a1:d5:c3:77:78:2f:53:
6b:7a:27:3c:09:b3:28:f6:f0:2f:a7:c4:ee:7d:cd:
2c:7e:9c:cc:e9:e9:54:94:42:9d:b9:1e:2a:ff:60:
02:a4:cb:f7:7d:b1:ed:7b:13:41:30:c4:06:f9:84:
3f:18:97:b9:f7:a5:8d:19:e7:fd:5d:60:92:91:39:
0e:4c:58:07:d3:9f:ae:c2:36:35:90:58:17:f9:44:
d8:63:ab:80:f9:10:f1:4b:a3:27:de:4e:64:15:0d:
60:52:a6:28:df:1e:6a:df:b6:59:be:f3:32:69:ee:
12:42:a7:ef:f5:34:52:ea:63:cc:e0:e3:2c:e6:c3:
d6:4e:8d:b1:29:cb:89:cd:0a:4f:6a:02:c3:d5:95:
f3:1b:52:a6:e3:7d:59:63:ee:0d:5c:72:17:fd:60:
78:9b:aa:ac:f9:9c:0d:f1:03:34:77:4e:bd:24:6a:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:6D:8E:9C:24:37:89:E9:C7:94:03:FC:5A:6E:36:F9:9B:DE:A2
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:89:8a:72:01:9a:1d:a0:ae:d8:a3:0a:62:8d:c6:c6:5f:db:
8b:ec:71:f0:e1:32:e1:0d:07:6f:fa:fa:34:fe:9c:6c:5a:e6:
0c:07:25:4e:ae:c6:93:67:5c:88:ba:80:8b:b6:e0:b6:7b:2f:
7e:b6:b8:7f:01:34:0e:e6:74:21:95:8e:1a:5e:6a:af:44:77:
b9:50:6f:b8:b5:32:95:88:15:a0:d4:e4:fb:1f:c4:1d:7d:18:
2e:76:52:f3:cc:4f:42:e7:a2:5f:67:fe:ab:66:a5:4f:2c:e1:
c3:4a:66:a3:b8:98:db:81:c3:2d:e7:57:70:62:a7:83:b7:3d:
e7:6e:6f:43:7f:fd:5d:92:ec:7f:87:bf:dc:78:a7:49:cd:1a:
51:60:25:16:17:d2:7b:d2:60:50:0a:12:dd:51:a3:c7:fc:98:
06:70:0b:3b:91:e2:1c:f9:c9:c6:9e:c1:95:96:bb:f0:f6:2e:
8b:22:73:08:d0:c6:81:fd:0b:41:6a:b9:9a:15:20:d7:0f:3c:
f9:da:ab:39:49:d9:d9:18:a0:f4:f1:8b:84:f7:a5:ef:54:de:
c5:3d:67:31:20:08:b2:bd:31:a6:e8:2c:22:f8:35:44:6e:61:
41:9a:ca:5c:76:d5:a2:7c:38:fc:cd:7c:d0:c7:63:4e:b2:5c:
00:c3:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:33 2025 by rpki-client