Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier: kfPk2e811KEQNco0APuphmBYjoy1w8VBfUpOhKnFGrc=
Subject key identifier: F1:53:5C:9C:2D:A0:D5:03:16:A1:13:23:E9:8A:C9:E3:ED:1C:70:39
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial: 0198D5839C6DD11F1F9F3D5A04C989F70E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number: 1606
Signing time: Sat 23 Aug 2025 06:00:28 +0000
Manifest this update: Sat 23 Aug 2025 06:00:28 +0000
Manifest next update: Sun 24 Aug 2025 06:00:28 +0000
Files and hashes: 1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: R3H5D13ShaVtEndBsglfKv+WSemreFXSaJblU0JLLu0=)
2: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
3: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9c:6d:d1:1f:1f:9f:3d:5a:04:c9:89:f7:0e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Validity
Not Before: Aug 23 06:00:28 2025 GMT
Not After : Aug 24 06:00:28 2025 GMT
Subject: CN=f1535c9c2da0d50316a11323e98ac9e3ed1c7039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:89:da:c2:53:fa:d9:60:45:b2:5e:c1:86:
c1:a4:7b:e8:f7:9d:89:7b:90:7e:86:83:ae:5c:ed:
49:d9:61:ea:fa:1f:a9:dd:58:fd:c0:e2:30:b7:25:
19:cd:b6:39:e0:97:6f:30:09:86:eb:ab:92:f1:34:
81:5b:7c:27:5e:11:23:0c:6e:ef:18:e3:93:ed:f3:
f2:be:31:ac:2a:d8:da:50:29:72:08:84:f0:91:c1:
0e:fb:2c:5c:2b:2f:db:c6:4a:16:8f:7a:b7:b2:dc:
ca:23:a7:e0:ff:a2:64:bd:27:74:60:8e:aa:3b:72:
d1:5b:42:15:30:3b:d0:ac:3c:26:eb:90:70:cb:15:
22:39:7a:51:cf:c2:2f:44:f4:15:5b:aa:f2:a6:b9:
82:e2:72:24:da:7b:78:2a:03:f8:a3:b4:9e:b3:1f:
d3:36:74:32:58:d0:c6:10:af:fa:25:cf:21:8b:de:
6b:3b:e9:67:7e:79:a7:12:27:a1:b1:95:e5:9d:a6:
17:d7:55:13:ee:57:bc:77:58:c5:ea:d1:2a:12:51:
a4:d5:5e:2c:97:8c:f7:15:71:71:53:e3:aa:d3:44:
d7:7a:f0:b6:6c:45:bd:3c:fe:80:6f:93:50:e9:29:
86:39:37:b5:ce:95:d4:20:32:7b:76:69:58:81:4e:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:5C:9C:2D:A0:D5:03:16:A1:13:23:E9:8A:C9:E3:ED:1C:70:39
X509v3 Authority Key Identifier:
keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1e:49:21:fd:8b:e7:8e:0e:9c:40:95:4c:bd:a8:5e:b0:1f:
d6:da:82:43:2b:7e:a7:1b:12:8e:bf:17:75:2e:15:3e:ff:1d:
15:58:40:f9:c2:4e:66:83:d4:b8:c1:4b:3e:d7:12:0b:8f:66:
c2:67:4d:83:ee:62:0d:63:61:20:da:23:a6:d8:d0:43:ee:cd:
62:d2:37:5e:d2:77:11:a1:1c:93:16:a5:7f:6c:6f:ba:d0:19:
76:a1:6b:b6:93:93:7e:49:df:34:3e:46:b9:86:33:b8:4d:aa:
c9:47:40:61:18:43:61:7d:55:4d:ed:75:55:e4:d3:9d:bd:ad:
1e:6b:1f:40:14:0e:ad:0f:7f:1f:46:1b:8f:b6:d1:ee:c5:ad:
83:d9:1c:a4:73:bd:ee:ba:63:10:3c:d8:d2:5d:5e:6c:d8:8d:
3f:4e:1b:0f:d9:c7:0a:c8:61:a9:f0:1a:2a:15:9d:63:26:54:
06:b5:f0:2a:2b:9d:e9:fb:b4:bd:6a:78:88:0b:2c:e1:a5:c1:
49:01:bf:7e:d0:9e:e5:3e:e4:e0:37:19:76:1e:ec:1e:e8:af:
24:d2:90:41:b3:b8:b3:2f:fc:f1:6d:66:84:c5:bd:58:83:5f:
49:c6:11:c4:dd:02:5f:83:76:56:48:56:b3:29:7f:9e:37:7f:
c9:7f:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:23 2025 by rpki-client