Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: /9akRjlANfJpmOiu6piSNcZUuJSYCIrwntk2DWKZZrE=
Subject key identifier: AB:82:3D:C8:0B:41:85:BC:E9:8E:D6:4F:85:97:73:9F:40:6B:6C:4C
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 0198D4742100B32C6F1B29FF4A8745D16AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:57 +0000
Manifest this update: Sat 23 Aug 2025 01:03:57 +0000
Manifest next update: Sun 24 Aug 2025 01:03:57 +0000
Files and hashes: 1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: d64ctnKVXOsJ+j5n0uP/TUnpPGenTuB0AOVKHd+xMpI=)
2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:21:00:b3:2c:6f:1b:29:ff:4a:87:45:d1:6a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Aug 23 01:03:57 2025 GMT
Not After : Aug 24 01:03:57 2025 GMT
Subject: CN=ab823dc80b4185bce98ed64f8597739f406b6c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:88:65:53:72:8e:94:b6:36:f7:d0:5d:0d:
e9:a4:41:a3:2b:df:d7:92:a8:3f:3d:d8:53:c8:8b:
8a:3d:c2:2b:16:6c:04:93:56:57:f6:70:39:4f:40:
53:e1:f5:ab:9a:5e:c9:be:67:a9:34:b8:0a:49:48:
79:79:9b:db:b8:d8:d4:fe:8c:8f:6f:a6:4d:0d:a9:
b4:38:fb:32:4d:11:6b:e7:f8:f9:9c:4a:55:42:2d:
ce:f3:d3:7f:27:b3:a1:dc:48:e0:2b:33:98:08:b8:
a3:30:c4:94:08:08:32:af:d7:c7:e6:e2:2e:ac:de:
0c:87:ac:16:8c:03:62:cf:e2:0e:71:10:92:30:45:
c4:e7:37:7c:de:60:4c:de:83:d4:90:fb:6a:4d:f1:
92:cd:7c:f3:dc:8d:ca:40:b3:03:c9:b4:3e:49:fe:
11:d5:03:13:03:80:fb:5d:df:74:d0:9c:c0:dc:54:
66:97:ef:f4:b4:97:58:6c:9a:bd:54:8c:e3:82:24:
16:15:db:22:82:e6:6a:63:e6:5d:e8:21:9e:f9:7f:
71:d6:b4:44:70:54:61:a0:fe:87:72:4c:b7:8b:1c:
75:fa:b9:8c:25:22:7a:fb:86:c2:c3:b8:34:06:63:
06:c6:b1:ae:19:db:ba:e6:41:cd:8e:40:8e:49:3d:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:3D:C8:0B:41:85:BC:E9:8E:D6:4F:85:97:73:9F:40:6B:6C:4C
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5d:fa:78:5d:45:c8:17:4a:07:99:32:95:74:d4:aa:eb:7d:
db:6e:dd:ff:b3:d5:b8:0d:d3:13:1d:83:81:8b:e3:33:5d:21:
8c:8a:e2:8b:2b:bb:34:54:d8:56:06:db:2a:15:44:cf:9f:e5:
d5:98:27:45:42:57:00:c2:70:19:50:3e:dd:15:14:8d:d6:cd:
94:d9:fe:87:33:23:09:f7:af:15:8f:11:62:88:f8:ae:64:e9:
c3:72:6f:8a:d3:8c:1f:d3:e7:f9:71:6a:09:c5:55:23:74:37:
52:34:ec:37:93:f7:b2:f9:98:df:e9:cc:9b:0c:ff:38:8e:85:
28:8a:93:91:30:e5:41:45:54:5e:3c:39:42:c1:af:90:df:23:
4c:e3:be:ba:87:69:d5:95:42:7c:9e:d1:a5:b5:9a:a0:a0:25:
67:ef:ca:1a:34:52:28:75:7e:9d:0d:7c:e9:5a:83:48:ec:73:
cc:99:54:92:8a:4b:64:a1:28:a5:aa:3e:6a:55:7b:bd:8d:02:
26:e0:ac:5a:e4:e7:08:b3:42:06:c1:c7:2a:f7:51:a2:55:e5:
c4:ac:4a:9a:12:51:a6:6b:63:67:df:47:ed:b6:ad:09:4d:82:
e2:c5:17:30:39:28:6e:16:39:bc:3f:8c:03:fa:dc:cb:d7:43:
f2:56:64:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdCEAsyxvGyn/SodF0WrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWVmNDBmYWY0ODM0MzNiM2UzMzY5OGU0ZDFlZTk1ZjNj
OTRiZWMwHhcNMjUwODIzMDEwMzU3WhcNMjUwODI0MDEwMzU3WjAzMTEwLwYDVQQD
EyhhYjgyM2RjODBiNDE4NWJjZTk4ZWQ2NGY4NTk3NzM5ZjQwNmI2YzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1qIZVNyjpS2NvfQXQ3ppEGjK9/X
kqg/PdhTyIuKPcIrFmwEk1ZX9nA5T0BT4fWrml7JvmepNLgKSUh5eZvbuNjU/oyP
b6ZNDam0OPsyTRFr5/j5nEpVQi3O89N/J7Oh3EjgKzOYCLijMMSUCAgyr9fH5uIu
rN4Mh6wWjANiz+IOcRCSMEXE5zd83mBM3oPUkPtqTfGSzXzz3I3KQLMDybQ+Sf4R
1QMTA4D7Xd900JzA3FRml+/0tJdYbJq9VIzjgiQWFdsiguZqY+Zd6CGe+X9x1rRE
cFRhoP6Hcky3ixx1+rmMJSJ6+4bCw7g0BmMGxrGuGdu65kHNjkCOST1zkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuCPcgLQYW86Y7WT4WXc59Aa2xMMB8GA1UdIwQY
MBaAFFNe9A+vSDQzs+M2mOTR7pXzyUvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83N2E5ZjEtZjFmYi00ODVmLTkyM2Yt
N2MzNzg5NDA1YmQ2LzEvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy83N2E5ZjEtZjFmYi00ODVmLTkyM2YtN2MzNzg5NDA1YmQ2
LzEvVTE3MEQ2OUlORE96NHphWTVOSHVsZlBKUy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF36eF1F
yBdKB5kylXTUqut9227d/7PVuA3TEx2DgYvjM10hjIriiyu7NFTYVgbbKhVEz5/l
1ZgnRUJXAMJwGVA+3RUUjdbNlNn+hzMjCfevFY8RYoj4rmTpw3JvitOMH9Pn+XFq
CcVVI3Q3UjTsN5P3svmY3+nMmwz/OI6FKIqTkTDlQUVUXjw5QsGvkN8jTOO+uodp
1ZVCfJ7RpbWaoKAlZ+/KGjRSKHV+nQ186VqDSOxzzJlUkopLZKEopao+alV7vY0C
JuCsWuTnCLNCBsHHKvdRolXlxKxKmhJRpmtjZ99H7batCU2C4sUXMDkobhY5vD+M
A/rcy9dD8lZkmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:05 2025 by rpki-client