Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: o6vzCVt1R/wLy+20T5bgrMfUqUGmr0mFrs52aDHqWUY=
Subject key identifier: 2E:C0:C1:13:59:32:BF:02:0C:8D:55:2E:98:D0:71:B8:54:CC:01:24
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 0197B6A145192F3E73580B9745FF3A9656F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 010D
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: eAZsc0/n2qDg3ikEM1W+WlRy4/9e8pPOXrl8qzek4Ow=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:45:19:2f:3e:73:58:0b:97:45:ff:3a:96:56:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=2ec0c1135932bf020c8d552e98d071b854cc0124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:bc:91:47:84:da:c2:da:ff:95:0b:15:23:
17:6e:ba:32:71:f6:d4:7f:a0:89:40:f2:8c:e4:97:
90:09:61:8c:63:2f:e6:72:5d:fa:a8:e4:11:ae:86:
7f:06:b7:3c:34:0b:86:d5:c8:70:91:13:69:06:1b:
68:63:58:59:36:db:24:f8:8c:8f:dd:2f:49:0e:00:
8b:3d:ce:a4:d0:3b:98:9c:6f:c4:b1:72:04:0d:8f:
73:79:65:d8:db:55:3a:3f:99:90:59:4f:c5:ef:34:
ff:36:e6:82:b7:f5:c1:23:63:65:e3:3f:89:fc:95:
7b:44:a2:0d:c8:14:4e:12:d3:9a:ab:f4:1e:8a:5f:
19:43:90:58:a2:88:f0:53:f6:db:e1:37:46:bc:09:
39:1d:a4:41:53:8f:cf:c9:b3:a8:3b:69:ca:6a:ea:
7d:1a:89:29:79:f7:75:b9:39:b2:8d:d7:59:8c:52:
78:92:8f:17:6b:3c:ba:ba:5f:8e:72:62:0a:09:8f:
37:1b:7f:34:7c:13:8b:98:ba:4e:36:05:da:32:3c:
bf:cd:b6:10:55:d5:65:d6:cd:44:ae:48:50:c1:37:
7a:69:5a:7d:f3:e2:cf:a9:51:a7:e7:30:0b:bc:14:
d9:58:88:2d:81:1a:39:52:53:96:dd:3e:64:be:c9:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C0:C1:13:59:32:BF:02:0C:8D:55:2E:98:D0:71:B8:54:CC:01:24
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:db:a9:b6:6c:08:25:8c:ed:8a:a0:3f:d8:62:ef:2a:16:15:
f7:5c:08:93:8c:5a:4a:18:05:e2:df:f7:41:07:05:9e:bc:24:
f0:9f:db:91:32:12:c4:c9:77:c9:4c:71:ad:b6:ab:8a:70:3c:
5a:64:62:da:ab:69:91:ad:5c:cb:a8:cf:4e:6c:5d:4e:f3:db:
64:ac:0c:0a:02:09:95:7c:6c:7c:a4:fe:66:23:fb:ca:e1:c0:
fa:8b:2f:e4:91:8f:71:2f:7c:6d:ff:b9:4f:b2:2b:c7:35:fe:
00:e6:e2:74:24:a6:1a:1b:b7:bf:76:7a:8b:da:88:74:00:a7:
47:c6:68:1b:f6:ab:52:c1:a3:f0:c1:47:fa:4f:8d:02:1d:22:
cb:43:1f:c0:2e:ee:0d:55:c0:3f:4f:44:9c:74:86:af:c5:e0:
34:cc:32:ce:43:e0:35:78:20:5e:17:99:7f:45:ee:3f:1a:7e:
7d:6d:e2:91:94:bc:af:ad:b9:1e:de:98:31:e8:07:40:bd:8b:
f0:cb:ee:97:72:de:63:37:d5:cd:e9:17:eb:38:37:d2:e1:3f:
69:e3:88:3f:8a:27:93:18:a6:37:e5:57:74:76:dc:01:41:4d:
ab:0f:12:c2:fe:b4:09:36:44:fc:2a:d6:6d:4e:1d:d8:16:b6:
ce:f1:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:40 2025 by rpki-client