Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: VOxCs1sFqOBVSoWYXuvKMGwAB1BXUKJGIkfJ1MfSWX0=
Subject key identifier: 61:2F:CE:70:C5:66:69:BC:5C:47:78:48:DB:DA:C9:B1:B2:DF:1D:D4
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 0198D4048C7ADE5EA61D219E55106B889185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:02:04 +0000
Manifest this update: Fri 22 Aug 2025 23:02:04 +0000
Manifest next update: Sat 23 Aug 2025 23:02:04 +0000
Files and hashes: 1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=)
2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=)
3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: AoGGK/+ILdBiOT7cXNewniq28dSLkKBmJegMwIBpgQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:8c:7a:de:5e:a6:1d:21:9e:55:10:6b:88:91:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Aug 22 23:02:04 2025 GMT
Not After : Aug 23 23:02:04 2025 GMT
Subject: CN=612fce70c56669bc5c477848dbdac9b1b2df1dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:fd:0d:cd:97:a6:bf:32:25:b3:75:b1:dc:
1d:c4:4c:c6:18:d6:ed:06:8f:85:8b:b6:e0:20:b3:
56:5d:21:58:ee:06:b9:1a:bc:8a:07:57:f5:ea:fa:
b4:49:ca:f8:31:73:ca:b0:45:f5:00:42:c3:21:2a:
ae:5e:a8:4a:94:85:f9:a7:0c:e0:86:db:dd:cd:e0:
0e:1e:01:2f:b8:89:13:35:cc:b6:af:dc:ef:13:ca:
a2:57:cb:13:6d:d1:08:0b:67:70:f2:b8:1e:6a:42:
c6:59:22:87:30:fa:bb:0b:c4:12:e4:c0:c0:bf:7c:
aa:1c:72:09:87:a3:ac:dc:61:ab:b7:39:1d:ca:4c:
c7:5a:1f:6d:ea:45:4e:0e:77:2c:eb:a9:c7:f5:b2:
bc:12:9c:24:63:14:26:23:29:88:f6:2e:b4:96:51:
5a:bb:6a:3e:a2:e9:12:56:0b:55:8a:28:f9:99:c1:
0a:d8:94:05:02:90:0d:75:1b:a8:3c:f8:b8:31:96:
06:db:d9:cc:57:12:b7:e7:39:60:e6:ac:3c:31:82:
73:5c:82:13:c7:93:27:c2:b4:e9:8c:59:a9:36:eb:
b2:65:e6:88:63:e8:53:c9:62:5c:ec:3a:e1:83:20:
da:0f:2f:c2:ee:5c:53:6b:0c:fd:65:d4:94:7f:5e:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2F:CE:70:C5:66:69:BC:5C:47:78:48:DB:DA:C9:B1:B2:DF:1D:D4
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ae:11:1f:78:3a:7e:f2:ff:8d:b9:81:57:b4:e5:b0:e5:99:
13:24:54:df:16:db:e9:21:73:5e:31:63:36:5f:50:bb:25:63:
6b:11:94:41:93:22:1a:d5:50:0c:6b:fc:93:4a:cc:da:19:10:
95:89:aa:ba:c8:51:a8:46:2a:6d:78:74:f4:47:c6:14:5e:31:
ed:ef:dd:7b:34:0c:18:9f:67:4f:3b:dc:cb:c6:38:2c:43:4f:
7e:91:c7:9e:65:19:85:6b:8d:be:5e:6c:1a:2c:b1:b0:ac:88:
04:f4:08:97:30:94:21:26:2e:48:8a:35:b1:c3:c5:91:19:55:
f5:6c:d9:01:7a:a1:03:c1:de:7f:ee:03:54:5f:38:d6:b9:ee:
04:74:0e:74:03:be:18:a6:d0:b1:39:7d:d8:a5:5d:b2:ee:16:
7a:b8:66:90:e2:15:14:54:1b:1e:3f:bf:7b:f5:c5:3c:3a:b6:
f4:bf:0a:6e:f5:60:a3:f8:55:23:d0:e5:b0:8e:4b:ea:5f:38:
7c:ed:4c:eb:ab:01:53:95:b6:ce:d2:a5:ab:cb:98:78:0a:ae:
92:f0:0b:5e:7d:53:37:e5:7c:ea:83:2b:46:40:71:16:21:15:
77:fb:8c:f1:fe:51:dc:e1:da:3a:c8:a3:9d:dc:e9:59:41:79:
f0:87:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:53 2025 by rpki-client