Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: UcXJoZyVahTN9QrkMfNGbNJcgpOzFtaFQ/k2fGWnc8U=
Subject key identifier: 2B:93:88:D1:8B:89:8D:CA:CD:45:6F:67:8F:F4:D8:68:0A:01:95:61
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 0198D54E9C2473E1BE3BF2007132EF0381B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: mCNpXyXMQP3o+5+wvemYHpwX2Zvwu8rfNR68pV4LFNw=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9c:24:73:e1:be:3b:f2:00:71:32:ef:03:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=2b9388d18b898dcacd456f678ff4d8680a019561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:d6:f3:b7:f2:5e:33:87:36:aa:64:f8:84:
d0:34:50:2e:5b:05:4d:93:e6:c7:f2:4e:eb:91:51:
af:59:6b:55:86:e6:2f:e9:02:12:20:a8:bc:bd:e9:
bf:f1:a8:51:ff:e7:e1:19:88:91:6c:36:66:16:9f:
a9:a0:87:4b:6d:09:9f:fe:d5:ed:f7:2e:e1:95:9c:
2d:4c:43:86:58:be:aa:18:8a:25:4f:5f:b7:8a:4d:
e7:bc:9d:04:80:ce:46:56:81:0a:46:8e:1e:de:1f:
8e:e0:55:bb:1e:8a:ff:ef:7d:86:9d:39:ad:55:c6:
cf:d1:90:5c:b3:8f:53:b0:86:11:0f:ee:59:8f:0a:
3f:4c:43:d8:a7:78:27:c9:55:ea:41:b5:8c:3c:23:
dd:39:c8:66:f0:7c:2b:41:f4:62:ad:44:aa:0f:75:
0d:c1:cd:64:ea:a3:b2:c0:b5:59:ab:ef:d5:4a:c4:
90:4f:71:67:8b:ca:45:3d:d5:c1:b2:26:35:cc:73:
e7:ff:f0:07:af:64:3a:99:b3:8c:d5:70:79:c7:5c:
0d:11:d0:ab:be:7f:a8:dd:dd:8a:26:b3:1d:82:4b:
90:80:9c:36:23:3f:67:68:db:44:0e:4c:11:6f:e5:
74:d9:66:2c:34:70:43:82:cd:a4:34:d3:7b:32:aa:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:88:D1:8B:89:8D:CA:CD:45:6F:67:8F:F4:D8:68:0A:01:95:61
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:57:d8:90:55:6d:e2:f7:f8:d4:d3:b1:99:b8:fe:de:96:ec:
e5:c7:fb:d9:91:21:58:ed:44:8c:c3:c5:6c:70:03:df:ed:0d:
91:18:6f:af:0a:aa:1f:f1:02:5c:e3:35:8c:19:21:0e:58:01:
e0:de:01:0c:54:62:74:e4:9f:bc:5b:8a:a4:cf:e1:b9:cb:a4:
95:5c:56:74:e0:82:4e:48:d1:ba:51:1a:44:7a:d6:cb:0e:4d:
63:52:36:0a:99:9a:71:7a:5e:c4:3b:de:a9:4f:03:6d:0b:c5:
74:bc:37:90:bd:81:b0:6f:48:52:c4:5b:ff:ce:42:c6:0c:2a:
67:00:de:ec:f7:c6:d5:94:e7:63:88:4e:23:f6:2f:c6:dc:17:
31:fb:d0:ad:5d:aa:70:eb:ff:40:56:87:19:11:5e:e8:60:0f:
f7:82:a4:d4:83:5b:73:02:f5:02:3b:d7:66:ff:a4:52:b4:a6:
8a:d6:29:65:91:05:35:16:a2:e4:0f:42:ed:ea:23:6c:06:f0:
b8:33:4e:08:ad:ac:54:83:8e:31:b5:e5:86:10:d5:2a:57:73:
c6:82:24:00:91:ee:7c:e5:7d:fb:8f:b0:5c:cd:7d:a6:e5:e2:
79:26:5b:da:df:fa:5f:f0:a5:bc:75:26:3b:6d:04:f2:75:1d:
96:5e:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:00 2025 by rpki-client