Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier: IbfNI/B2GRzkFBRsdPGY+v4MxdTL1Il7yx796sy8Uz0=
Subject key identifier: FF:D7:07:5D:B2:FE:24:D0:F0:75:FE:86:07:6A:70:E1:CF:17:7B:5B
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial: 0198D705D4E065D21779EB85B79D013B624E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number: 138E
Signing time: Sat 23 Aug 2025 13:02:20 +0000
Manifest this update: Sat 23 Aug 2025 13:02:20 +0000
Manifest next update: Sun 24 Aug 2025 13:02:20 +0000
Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: V22nr0wuFGC3rcsuyhaegopv/cH+Rw7qPSacSn9DjjE=)
2: p1W2xtpypFZeS4V60u-1DjDqTds.roa (hash: 34oWoq20u1/mqtBm1kWh1Zu5DKZerBQ57c/ZC8RMnIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d4:e0:65:d2:17:79:eb:85:b7:9d:01:3b:62:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Validity
Not Before: Aug 23 13:02:20 2025 GMT
Not After : Aug 24 13:02:20 2025 GMT
Subject: CN=ffd7075db2fe24d0f075fe86076a70e1cf177b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:b4:e9:b3:c5:b9:e0:03:c9:e7:b1:e2:30:
c6:fc:20:cb:a6:e0:f4:ba:bc:9d:a3:81:9c:e5:d7:
ab:9f:fc:e6:b8:c0:dc:b4:06:c1:be:b8:37:42:7d:
c2:6d:f6:87:cb:3b:2e:0b:c2:b7:49:52:1e:30:3d:
43:77:4d:c4:2e:00:24:61:e7:ca:6f:32:5a:6e:06:
29:a3:5a:60:76:65:9e:b9:b5:f7:ae:e5:98:70:84:
a0:bc:69:5b:57:dc:0c:f1:28:77:28:8a:4b:c3:02:
6e:ab:9f:c4:a3:6d:57:3a:d9:11:0b:3b:5e:93:ec:
67:74:24:03:56:8d:e5:0f:8f:6a:56:f5:a2:44:39:
68:62:0c:7d:4f:03:d5:1b:ba:23:d6:6b:9d:9c:09:
4f:f3:44:f5:8d:14:3f:4c:f7:35:f8:6c:3c:8b:e0:
41:14:c0:14:9f:ea:27:61:03:bf:2a:5f:f0:9d:ad:
1e:67:f7:3d:bc:d6:34:24:9a:67:40:41:80:ed:46:
e6:7b:e0:f2:81:87:e5:ff:b3:85:6a:04:22:cb:b5:
22:51:4a:d8:6f:fd:f6:3a:73:a1:35:2d:9b:76:8e:
8f:3a:9b:c5:50:f4:3c:76:e9:86:40:1f:a9:4d:45:
d5:a0:5e:27:52:1c:fb:7d:08:49:ed:1f:4e:64:22:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D7:07:5D:B2:FE:24:D0:F0:75:FE:86:07:6A:70:E1:CF:17:7B:5B
X509v3 Authority Key Identifier:
keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a5:ae:55:fb:bb:18:24:e1:99:03:f7:9e:dd:a1:89:4d:09:
92:9e:de:cb:44:30:67:08:c0:db:ec:9c:d2:98:6b:aa:77:d2:
95:ef:3b:45:e4:77:75:83:ae:82:d4:5d:f6:08:50:d9:0b:c1:
d8:69:ae:a9:e1:60:8c:1c:09:33:74:27:28:19:24:31:fb:e3:
95:88:e6:8b:ef:6b:1e:a1:e3:c4:85:c9:08:97:ba:b7:f7:b5:
e2:22:16:93:ac:2f:c2:4d:95:da:2d:a0:44:ef:71:c5:e4:34:
12:ff:78:ec:75:99:a2:2e:b9:ac:91:b3:da:d7:be:cf:f9:e0:
03:60:3e:c2:4c:11:f8:d5:ae:9f:e5:07:93:d2:99:c3:d9:6d:
e6:57:0b:b7:0d:56:ec:07:cf:96:be:28:b4:51:b2:86:96:c8:
21:2f:c5:72:2e:75:0b:fa:5c:70:a7:48:03:0b:19:30:82:58:
63:50:28:a0:dc:0a:0a:1c:04:06:08:34:d2:84:db:ae:09:46:
b8:42:57:9d:bc:62:bb:b1:f5:7b:59:6f:d1:7c:1c:65:b0:a8:
27:20:1a:04:ec:ae:c5:74:22:7f:76:07:16:b9:aa:9a:48:65:
11:38:e0:1a:68:4d:b2:86:05:9b:f4:e4:40:df:fb:d0:6e:38:
85:fa:64:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:06 2025 by rpki-client