Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: tqj+sm4U6/KAHJVyKCCW/XqHso2Kb6PSQWI7MZ72Gws=
Subject key identifier: A9:1F:26:C5:93:1A:CD:28:07:DB:E0:85:89:BC:FE:F3:FB:44:02:01
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 0198D6CCFFD0D2834512F6593E9351088321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:00:15 +0000
Manifest this update: Sat 23 Aug 2025 12:00:15 +0000
Manifest next update: Sun 24 Aug 2025 12:00:15 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: pcocAoarJW2tLcSDBKm/eGe2xMFfJaFvi7jCOrM2nOc=)
2: fhzBsi8rU0jUB3-KHFWy_MPxr3s.roa (hash: +sQEtymDtkukDBlTZusUXGi5sWkBAEA4spvgFTkKSlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:ff:d0:d2:83:45:12:f6:59:3e:93:51:08:83:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: Aug 23 12:00:15 2025 GMT
Not After : Aug 24 12:00:15 2025 GMT
Subject: CN=a91f26c5931acd2807dbe08589bcfef3fb440201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:e9:2f:4d:d9:09:db:83:64:52:e8:71:31:
cc:75:dc:93:a7:ff:88:b4:6f:2b:5e:61:0a:a9:d1:
8b:15:4b:cb:db:ae:8a:2d:4e:12:16:ee:47:fb:c5:
f9:89:54:ae:ac:f4:d5:0b:9f:1c:b9:4a:b3:5b:05:
b6:a5:44:08:88:f8:0c:a3:93:cf:47:72:5f:5f:a2:
f2:38:5a:5a:2b:fe:88:ea:e6:78:8c:59:5e:5b:8b:
bc:98:a3:b0:f2:4b:c9:8f:28:6f:f5:75:18:4d:70:
b1:90:41:46:0c:78:a6:f5:80:0a:a8:ea:5d:cb:93:
b2:ee:ff:62:90:49:35:ed:f8:06:53:86:c5:cb:58:
99:f8:0a:b5:30:f0:e8:54:8a:bf:13:90:bb:8c:4e:
ce:fa:3f:db:d4:c8:e1:92:b8:52:1b:56:86:ac:71:
72:84:a1:33:cc:70:40:07:7a:44:a8:fc:08:e0:fd:
0e:4c:fa:e3:45:e1:e2:04:4d:b4:5f:13:10:37:ec:
ba:2d:a7:e4:20:b0:65:32:44:b3:40:47:e9:99:55:
7f:b3:c4:fc:ab:00:d2:41:b5:7a:88:e2:81:30:b7:
e9:30:4a:71:82:07:d2:9d:25:45:fb:ef:b6:e0:0b:
51:bf:81:a0:5c:f1:a1:9c:70:5d:b6:8a:a4:aa:7d:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:26:C5:93:1A:CD:28:07:DB:E0:85:89:BC:FE:F3:FB:44:02:01
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2e:07:49:b3:f8:b9:8e:9d:31:5f:b5:27:e8:f7:7f:43:c2:
14:f1:93:f8:9c:8f:cf:e4:ba:ea:91:5b:96:74:78:02:f8:9b:
c8:a3:1e:50:d1:20:4e:22:66:6e:18:91:ff:90:ff:aa:38:af:
a9:9a:c1:c8:41:3c:ad:f0:3f:e2:b6:d4:e8:82:25:74:a5:38:
bd:60:27:92:11:7a:26:54:c4:c0:42:df:12:b4:27:9c:3a:4a:
73:af:82:94:74:ac:51:c7:17:07:b7:34:e1:1d:39:66:11:47:
df:a7:d9:b6:84:f3:a5:7d:db:8c:e2:4f:31:56:f1:31:99:53:
1c:29:3b:f9:da:78:13:bb:4d:65:cf:2d:47:93:c9:e5:77:c0:
cb:cd:e7:5a:d4:42:21:c6:d1:44:cc:dd:f7:bc:73:26:7f:a3:
5a:7d:99:df:3a:0c:2e:c7:1e:b3:12:55:45:c7:8f:7d:6b:d6:
91:ec:49:55:d8:a0:bd:46:ab:0d:4d:e7:a4:cf:16:e8:48:cd:
5a:7e:4a:0e:c0:7d:b0:1c:f8:12:2d:3f:a1:bb:95:80:fe:08:
79:39:47:12:1e:31:70:38:8f:d1:df:7b:ba:74:be:e3:f5:ac:
13:b8:65:73:06:cc:02:74:c1:93:59:ee:ea:ed:98:27:93:4d:
57:4d:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:35 2025 by rpki-client