Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: kUgg7OH8XPve99/13bZXAWvXMr8gD9JnlEQxrn2jINQ=
Subject key identifier: B8:42:D8:B0:48:97:AC:80:D6:7F:E8:81:84:6C:5E:63:2B:5F:25:89
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 0198D5F11CB32765EF8A563BB26D99692914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 0603
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: xIsPt8baWgSrQwCjbslgYhwLOk83N2M4WZoF7BcijCg=)
2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1c:b3:27:65:ef:8a:56:3b:b2:6d:99:69:29:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=b842d8b04897ac80d67fe881846c5e632b5f2589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:bc:d8:bf:7e:61:c0:6e:b5:b5:40:a5:6f:
c2:dc:31:f4:6a:66:07:e2:0d:ae:d6:19:17:35:7d:
40:58:68:c4:9b:af:65:4d:bb:2b:63:96:cc:5e:2d:
4b:28:3f:9c:e7:46:64:64:15:16:f0:cc:cc:d0:f9:
11:31:75:94:a2:08:90:28:e9:e0:20:60:ab:fe:35:
0f:a6:6b:4d:60:b4:dc:20:71:93:71:3b:6f:02:c3:
66:21:5b:f4:4a:a2:25:98:dd:8d:e5:1e:c2:6e:69:
f4:9b:20:7a:6d:93:32:d4:68:c2:a8:dc:fb:78:af:
1e:01:d7:bd:fd:00:31:ac:be:4c:5e:74:64:d0:be:
26:1d:a7:ff:34:ee:5c:a1:f7:9d:89:b5:2f:03:45:
c8:24:86:84:3b:f3:49:61:77:2a:6a:99:10:bc:af:
c9:52:4a:df:ba:d7:45:61:3d:32:8f:5d:64:94:6c:
d3:24:83:b3:f7:9c:47:64:2b:8c:2f:60:8e:33:99:
a2:e5:ad:ed:1d:d6:b5:dd:86:bd:e9:0c:b9:19:ed:
bf:05:32:bf:f6:a5:6c:60:bd:61:79:9c:66:e5:fa:
99:9d:bc:4a:12:25:64:c0:d9:d1:cb:e2:d1:62:aa:
39:c1:36:59:18:4f:21:9d:49:af:8f:db:35:94:15:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:42:D8:B0:48:97:AC:80:D6:7F:E8:81:84:6C:5E:63:2B:5F:25:89
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3a:68:e0:31:95:85:c2:f6:d6:ee:86:8f:20:7c:f9:c5:8d:
19:67:06:52:3b:15:9f:0a:ec:24:2e:3c:4e:b3:70:ab:50:b8:
f5:ad:88:ef:ee:d1:a4:51:a9:a3:b0:05:71:a0:66:8a:25:45:
00:b9:24:82:13:53:35:ff:5d:10:8c:b0:be:b5:9c:96:dc:5b:
a1:cd:c9:b4:e8:0f:03:2e:86:dd:da:bd:73:d9:82:0e:f4:10:
64:45:d7:f4:00:4f:c1:4d:bf:54:b2:49:b4:e8:8c:4b:a9:4b:
9c:a3:a6:e9:62:46:6b:c7:0f:5a:fd:5b:ed:69:dd:8a:12:a4:
c0:e5:72:62:38:14:21:e2:a3:04:5f:dc:60:d8:bb:f8:23:b0:
b1:79:97:62:c5:aa:88:db:55:02:6b:2d:1d:95:4e:9a:de:dd:
08:58:22:5c:fd:98:0f:a3:d2:63:19:ee:d7:5d:22:29:e5:0b:
ec:3b:25:43:38:11:dd:8d:31:04:c0:93:2c:c7:5d:d3:13:f3:
cf:50:e6:2b:44:b1:ae:f9:5c:02:dc:2f:69:55:00:06:0e:7f:
ba:7f:0e:1c:48:65:da:76:8f:df:8f:6d:c7:60:fe:1e:66:a7:
c7:04:2d:c7:29:8b:e7:9b:00:36:98:8f:bd:f5:e4:02:48:b3:
13:3f:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:32 2025 by rpki-client