Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
File: U6i3vKixHSeFDpGMpZlmmIAWKSk.mft (raw, json)
Hash identifier: tHm/80sImuTpiZSQIrS93JG7F6ZsEkA/FIkuEMx/BCU=
Subject key identifier: 96:3F:03:80:26:1A:8E:58:64:87:EC:16:F6:93:C3:2B:EE:24:DB:90
Authority key identifier: 53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
Certificate issuer: /CN=53a8b7bca8b11d27850e918ca599669880162929
Certificate serial: 0198D4A7C74617483A88FC6223BB14BFBB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
Manifest number: 0259
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: U6i3vKixHSeFDpGMpZlmmIAWKSk.crl (hash: 34QoTjCMEcY8WZ3sRUJ49yUpRs1Rc9bxVKwwBfwHCPQ=)
2: qST1YzpfG0Aj9HfkTwxj9U8CUhI.roa (hash: wruCCghr0kJqtbuyZdJFoTZhRH+nhRjwzTxdaCBX4hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c7:46:17:48:3a:88:fc:62:23:bb:14:bf:bb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a8b7bca8b11d27850e918ca599669880162929
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=963f0380261a8e586487ec16f693c32bee24db90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:cc:ad:4b:0f:a2:4c:d9:7f:31:21:08:aa:
15:fa:e0:0a:b8:1d:f2:73:ff:a6:0e:6c:af:68:78:
19:f4:9e:37:11:0e:3b:6b:71:2d:4f:88:ec:c9:69:
cc:af:1d:65:2f:62:90:48:4b:fb:29:02:11:7b:10:
d4:bf:06:7d:a3:f5:ab:3e:db:f9:c4:92:9c:87:cf:
5e:72:52:02:67:0c:7f:7e:ad:2d:e7:da:99:af:0f:
83:d8:7f:21:1d:a0:a5:19:d1:0c:a8:53:5e:f4:2c:
a5:82:e4:a6:be:f4:09:38:d5:30:11:4f:2d:f5:67:
a5:cc:d6:8e:aa:77:63:2c:61:e1:94:a6:af:5e:7a:
ac:09:03:07:a0:1d:0c:a9:88:2e:82:af:98:4d:0d:
7c:ad:80:ec:27:56:3a:69:73:c5:7c:ce:fb:48:78:
d7:32:0b:83:b9:f5:08:3f:04:10:4c:30:1e:3f:bd:
2b:75:11:9c:0f:1a:84:d3:89:7d:94:c9:7e:66:32:
35:d4:6f:50:50:db:1a:e9:a2:70:76:34:c2:5d:02:
78:0f:bd:fe:cf:cd:a8:1a:1f:62:39:38:9e:24:0a:
aa:a7:33:2c:ad:42:79:7a:33:ed:eb:aa:a5:b0:28:
6b:d6:4c:b3:9e:56:7f:c7:75:ec:bc:4c:d8:ae:4e:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:03:80:26:1A:8E:58:64:87:EC:16:F6:93:C3:2B:EE:24:DB:90
X509v3 Authority Key Identifier:
keyid:53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:78:af:28:76:df:70:ef:58:bb:51:9c:72:cc:e7:6a:29:44:
48:5c:e9:cc:a8:89:7c:c7:04:97:0d:56:32:66:08:f9:5f:b5:
84:c9:c7:96:a7:5b:1b:fa:79:e8:f0:cb:31:fa:0c:57:0b:f3:
66:b1:23:df:85:ed:c2:e4:06:25:10:ec:a0:9d:9a:b1:d6:68:
82:61:54:cd:b3:ef:68:c3:9f:99:3d:4b:40:ca:dd:b7:47:2a:
c8:3a:1f:d1:20:f3:38:5c:5c:2d:b9:6f:88:28:a9:8b:8e:03:
ce:9c:ed:a5:3f:f2:ae:fc:a9:9d:1e:88:50:00:05:dd:bd:3e:
3c:77:60:bb:be:58:34:54:8d:d2:0d:e3:db:b0:eb:44:21:7c:
87:dc:aa:db:8b:da:46:f5:3e:9c:1f:b8:d8:43:7a:a0:25:c6:
52:4b:e7:f1:b4:de:75:c9:04:9e:26:81:88:1d:f0:14:2d:d5:
7b:ee:f3:04:31:38:a2:ad:5b:fe:8b:57:2d:4e:16:dd:b3:2a:
61:86:b5:6f:e8:fd:4d:64:a1:2a:1a:ba:4f:a6:cb:67:de:04:
bc:a4:ce:32:bb:cd:24:6a:3b:17:2b:46:3d:22:23:93:bc:cc:
c4:ef:3d:b2:89:6b:ef:26:a7:77:31:73:18:99:d2:b3:53:a8:
e2:e4:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:45 2025 by rpki-client