Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: i9VvfFJ4ALwjL4LdvQEhzpkYuhHFaIIPM30jjsxmMDU=
Subject key identifier: DC:F2:39:E3:DA:C3:F8:A2:47:CD:C0:EE:98:DB:5A:7C:85:8B:63:69
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 0198D6986D6646D24A73EE40575F56F1959E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: Vyh7kDykFAkE8KfwWRqK+r8dQ6/Ur6PpCtGt2cgrffY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6d:66:46:d2:4a:73:ee:40:57:5f:56:f1:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=dcf239e3dac3f8a247cdc0ee98db5a7c858b6369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:75:2d:6b:bf:72:6b:60:94:fe:72:de:0c:87:
dc:f0:28:5f:c7:03:1b:8c:dd:a0:4e:c9:37:8b:f6:
11:cf:a0:d7:3c:6c:62:44:66:ce:cc:f4:09:e8:88:
b5:7a:d4:c8:2b:31:e8:20:28:5d:74:e2:52:fd:af:
19:22:46:88:c2:c9:25:bb:c9:7c:ce:63:2f:fd:36:
71:b0:b9:2f:33:12:02:e9:6b:62:3b:fd:40:49:f0:
f7:3c:e9:a1:63:6e:39:92:77:56:bf:8e:47:82:62:
b2:e9:85:02:1a:26:1c:e6:8a:3f:12:87:ec:2b:5f:
fd:63:b1:8c:a5:64:13:70:eb:a8:2a:24:8b:44:87:
2e:5e:6a:70:95:38:8c:66:c5:d6:19:13:dc:bd:fe:
ab:a6:55:15:59:d6:06:de:89:db:38:ef:53:0c:0c:
4b:23:a8:fc:95:6b:46:1e:ff:97:59:ef:9b:63:1e:
6d:23:b2:d2:72:45:bf:ba:af:e5:6a:bf:cd:63:98:
ee:ec:44:39:55:80:be:24:8b:35:03:bd:07:8d:e6:
52:cb:fe:d9:d6:fd:f4:9e:27:de:71:16:c9:ac:19:
86:79:36:d7:33:ca:8f:ae:e6:17:12:d1:3c:61:a7:
7c:9d:09:a1:4e:8a:44:6e:ea:d5:3f:a2:2c:ba:cd:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F2:39:E3:DA:C3:F8:A2:47:CD:C0:EE:98:DB:5A:7C:85:8B:63:69
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:32:a6:9b:cb:a6:27:36:23:03:72:b1:53:8c:77:59:57:2a:
e6:26:f6:58:5d:08:fa:80:5d:c4:89:3e:b9:42:7d:4b:ce:6d:
38:36:8d:86:f8:23:9f:a2:9f:90:52:b1:02:4a:2f:6f:b7:bb:
e1:5d:c9:53:2f:c0:58:cf:71:f5:36:63:3a:b1:53:a5:d2:0e:
80:f3:27:9a:d9:cd:7e:05:3c:3e:be:0b:74:e5:90:f1:02:0d:
7c:d0:94:60:f0:39:cc:6a:ec:1d:85:1a:c5:f4:93:d7:29:b6:
d1:84:91:61:ed:46:01:e8:9b:9f:07:04:03:bd:d0:8f:82:98:
91:86:e8:80:ec:94:07:bf:e9:2d:be:b1:81:8d:bc:9a:5c:92:
d6:50:1e:e8:1e:4f:3b:db:4a:cd:07:a0:ae:99:0c:34:67:31:
b1:95:41:97:60:83:15:6e:af:e1:dc:86:21:74:cd:43:99:3f:
0c:fc:b1:d7:a8:72:97:6d:4f:32:7b:3c:58:f1:0b:d7:c2:9f:
a6:af:5a:2c:1c:52:bc:24:87:d9:6e:cc:82:2e:fe:22:99:c3:
5b:b2:29:bc:4a:b4:52:de:eb:d5:c5:a8:dd:4c:4f:9f:db:14:
db:38:f7:07:c0:f4:18:11:4f:6c:d8:6f:8f:97:c9:e5:9a:a8:
cc:2d:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:05 2025 by rpki-client