Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: BrmD3+VKrrClUIOvYPT1CoHBucl0chwn8m0GjOc9upY=
Subject key identifier: 6C:69:EB:59:54:82:92:5B:B3:BC:B4:70:74:5D:19:D7:68:37:38:B3
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 0198D439BC2945F662DF092DF4C7DCEFD1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 00:00:10 +0000
Manifest this update: Sat 23 Aug 2025 00:00:10 +0000
Manifest next update: Sun 24 Aug 2025 00:00:10 +0000
Files and hashes: 1: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: hf6QZwNah2/Qu5SVVryBPZ/b3dBpQS8PaUZ+NG9A8+E=)
2: WJN_dOuFawgbzv7uWk0oYoO7Ev4.roa (hash: +OPYUOLHvCWLnom4xkVHzGfuVIubdlHu1WaR+VklKa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:bc:29:45:f6:62:df:09:2d:f4:c7:dc:ef:d1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Aug 23 00:00:10 2025 GMT
Not After : Aug 24 00:00:10 2025 GMT
Subject: CN=6c69eb595482925bb3bcb470745d19d7683738b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:2c:c5:41:f8:0f:74:03:20:f9:46:06:90:
9b:eb:c2:51:69:a3:05:e1:d7:b0:92:b3:b8:e5:9b:
8d:f7:0f:5e:af:f2:aa:af:f6:1c:e8:55:8a:38:98:
68:1a:95:ab:8f:e2:e9:41:2a:53:5e:28:ed:f6:b4:
37:30:b8:45:50:69:4c:36:f0:79:94:27:24:a0:e7:
b1:9e:b7:eb:23:a5:65:f2:df:fe:27:33:87:f6:bc:
6b:43:8d:54:36:51:f2:a6:a1:6f:bf:a2:9b:8f:c5:
c1:11:b7:05:3d:95:b0:b0:d3:ba:f3:09:d7:47:ff:
bd:d6:82:b3:a7:35:e7:b7:cb:e6:4b:8f:7f:f7:59:
ee:70:86:73:ff:44:44:9d:04:48:2c:1c:61:00:8a:
8b:9a:2f:f6:c6:9b:e8:3f:67:e6:25:c6:2c:03:f8:
b1:55:25:c5:74:96:8d:e3:d4:6f:5c:b7:0d:e4:6c:
d5:3b:c1:f4:e7:14:d0:43:c6:ec:c8:cc:4b:1c:f4:
59:ba:f9:e9:40:f4:b3:54:9e:7b:66:3e:4d:75:77:
54:57:f8:4a:2f:d3:31:a8:af:c0:d1:c4:f1:11:53:
8e:57:d5:7d:24:e5:82:12:be:85:77:41:ed:ac:e6:
85:d0:ca:1e:22:2a:52:10:4d:45:67:ec:d4:d5:1e:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:EB:59:54:82:92:5B:B3:BC:B4:70:74:5D:19:D7:68:37:38:B3
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:94:80:48:b7:20:ea:2e:26:9d:eb:cf:8b:6a:4e:e7:82:0f:
0f:08:50:c1:f9:de:bd:99:c8:95:ed:96:24:07:f0:61:d0:a0:
8c:88:f0:ab:32:a3:88:11:c6:86:3d:e9:b5:af:38:2f:37:98:
d6:73:c0:91:bd:12:27:5d:ad:31:d6:29:91:14:ef:2d:bd:42:
e2:5a:15:92:8b:c3:4e:2c:d6:c4:a2:37:e5:e1:51:ee:4f:cf:
1d:9f:44:95:6e:ba:4f:9d:bd:f7:f9:3f:22:06:6d:e0:39:c0:
1f:84:a6:ed:04:0d:91:0b:23:06:ec:fb:34:10:b7:e8:7e:a9:
fb:28:42:54:04:90:46:9a:75:56:69:11:f0:9d:63:de:90:36:
e6:3f:70:50:aa:44:e0:4f:e7:45:49:ce:b4:a0:c3:01:99:d6:
9a:69:f8:08:b5:17:7c:e9:cb:4a:d9:98:94:8c:5c:68:52:5f:
41:f8:49:b7:73:12:1b:4d:07:d5:87:19:7c:f1:ad:0a:15:85:
73:91:e2:30:49:05:c6:40:5c:ca:37:27:29:f8:d6:4e:e9:c1:
bf:dc:0f:2f:c9:a8:8a:f1:21:f5:6d:1a:ec:82:5e:d7:ca:c1:
91:da:9f:17:3e:43:f4:a3:ae:53:2b:e1:02:3f:b2:d8:58:e1:
f6:c4:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:52 2025 by rpki-client