Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: CvKde4Zx1kuGscBgF9G/VR5U8nEhI8OmKcS+RyLxZpU=
Subject key identifier: 6C:70:32:2C:C2:E0:02:5F:78:E1:E0:14:16:61:90:CE:1C:FD:BB:6E
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 0198D65F33F22B1B8132F4E0432D02F61F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 01A2
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: vpZPd2uZ32E62F2xSbYh8AwVINXhS1fMXDx/e3M+aH8=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:33:f2:2b:1b:81:32:f4:e0:43:2d:02:f6:1f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=6c70322cc2e0025f78e1e014166190ce1cfdbb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:e5:c0:cc:c4:cb:2d:40:18:27:8c:94:36:
2b:05:fd:4c:cf:9c:34:e0:af:64:e3:ba:4d:eb:e7:
db:42:fc:26:04:13:7d:94:59:e0:76:0f:b2:91:5f:
98:55:d6:85:71:3b:33:57:fa:82:0a:79:f1:e9:c6:
35:13:27:6f:b0:f6:52:e9:4e:8d:4c:42:a4:c8:99:
6b:b5:d5:1b:99:1e:05:63:50:21:1c:0c:2f:97:5d:
aa:b9:ea:ac:a7:4c:20:a2:51:f0:eb:eb:fd:50:db:
8c:d8:0c:67:04:da:dd:c7:fd:a2:91:ba:ca:61:d6:
a7:f7:e2:d2:67:22:fc:a8:d5:47:78:81:d5:81:b7:
6d:ea:41:6c:64:59:28:96:a1:db:ae:a4:53:5a:b9:
fb:fc:b1:ba:8e:aa:b4:de:19:82:53:dc:3a:e6:e9:
dc:4c:87:33:b8:60:cb:84:7a:c9:7e:61:2d:dd:3d:
67:71:d1:ad:3a:73:4a:a2:7c:20:2e:f1:c0:4b:00:
58:e9:6a:09:f0:a7:3d:3d:6c:3b:22:8a:64:25:cd:
79:13:8d:bc:eb:f8:24:03:f9:1a:59:a0:dc:bc:75:
2a:34:9d:cd:dc:7d:28:a3:2e:86:99:72:84:59:44:
bc:fc:67:66:9f:be:29:b5:41:6f:48:f0:11:2e:c4:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:32:2C:C2:E0:02:5F:78:E1:E0:14:16:61:90:CE:1C:FD:BB:6E
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3b:0e:db:28:22:eb:29:cd:8a:0f:79:94:4d:bf:4f:c0:2a:
29:5f:8a:ef:fb:0f:93:71:81:a5:cb:a9:79:4b:c1:e7:f1:a3:
ed:a7:5e:3f:04:83:5d:2e:42:3c:03:9e:1c:a1:f7:99:7e:7e:
56:10:aa:b0:52:3c:90:9e:65:a1:80:df:44:24:99:e2:e4:d4:
2a:d3:70:6d:45:0a:bb:03:72:91:25:25:62:ed:79:6b:dc:0f:
86:e5:71:49:13:c1:d3:fa:2d:46:a5:35:8c:5f:9f:eb:33:96:
8e:4c:4a:39:6c:86:b2:22:15:ae:60:6a:28:b0:9e:47:b9:bb:
e4:b2:65:3f:77:3d:1c:5b:6d:82:11:ee:ab:50:dd:f0:f0:fe:
13:37:06:ff:f4:f5:d8:d5:e8:43:40:5c:3d:66:cb:9f:7c:3c:
1b:45:75:36:21:a4:47:b0:ad:35:8a:b9:1b:56:2a:6b:01:b4:
d8:80:2f:e7:78:c4:a6:7d:fc:c7:37:44:be:3d:c2:67:56:d6:
38:a9:48:ca:74:42:a8:a8:12:f2:1a:a1:04:d8:f0:fe:85:de:
ec:f6:90:c9:83:5e:18:44:a4:96:dc:ce:01:71:7f:1a:9c:05:
d4:7d:80:7c:8e:c6:1f:48:eb:de:76:47:3e:00:a1:bf:8d:7d:
c2:d2:c9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:15 2025 by rpki-client