Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: Cc+8igrdS9Wyb/ipfnIpeNdctSaKw0Ikr89MOjj585k=
Subject key identifier: D5:53:26:31:49:29:02:64:69:BF:61:98:B7:B4:74:99:7C:CE:B6:4D
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 0198D4740AD4759E6EC2BDEF11046D3CF7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:51 +0000
Manifest this update: Sat 23 Aug 2025 01:03:51 +0000
Manifest next update: Sun 24 Aug 2025 01:03:51 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: 4bRmEUbb63C2asxf0queyB2GLUlNezP8vDw1SYg/j/c=)
2: dXA2sXCeF-zEI-_J4kU7kczSGDo.roa (hash: yLUH5uzp/Ib7vlJR5HEnjKQN0s3hZM+CwSBPhsePj6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:0a:d4:75:9e:6e:c2:bd:ef:11:04:6d:3c:f7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Aug 23 01:03:51 2025 GMT
Not After : Aug 24 01:03:51 2025 GMT
Subject: CN=d55326314929026469bf6198b7b474997cceb64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:2b:d9:20:e5:9d:5b:72:eb:62:d8:4d:d6:
0c:4d:63:9b:97:62:4e:54:d9:47:2c:8a:a8:56:28:
ac:c8:d5:38:07:9e:10:f3:a4:d3:d0:f4:b8:0a:dc:
fa:29:59:cc:8b:60:51:66:d6:4c:57:d2:71:b6:5e:
24:ec:5d:e9:d4:b8:aa:c5:e8:6f:43:ea:f0:b5:97:
c0:dc:bb:96:ea:c9:03:b5:20:3e:59:ed:43:7d:c4:
0b:8c:57:ae:99:92:4c:fc:8f:9f:1e:95:d1:64:dc:
ef:14:36:9b:51:d1:bf:25:22:27:5a:0e:0c:c7:26:
17:dc:ea:a3:aa:df:84:24:14:8b:87:8d:87:a5:ba:
54:39:b0:d9:15:c1:a1:cc:84:60:8b:17:3f:a1:dc:
eb:85:1c:0a:c5:00:17:e1:2e:ca:59:95:e8:6d:e6:
62:fa:2e:94:7f:00:07:68:97:75:85:a1:0a:ba:f3:
bb:96:ad:d8:82:a1:b3:9d:92:2d:3b:7b:0a:90:93:
58:0b:9c:a9:4e:5e:0f:d8:0f:84:8e:b9:6f:0f:e9:
3f:a9:47:a7:09:03:07:a3:a1:d5:71:98:85:aa:19:
22:bf:4e:4a:5b:53:18:c9:70:cc:28:1d:b3:66:d1:
36:de:84:1b:4c:6c:d8:02:7d:93:9b:4c:bb:27:11:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:53:26:31:49:29:02:64:69:BF:61:98:B7:B4:74:99:7C:CE:B6:4D
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d7:c7:f8:1c:84:72:02:01:05:86:3c:6b:30:2f:a9:c0:e6:
69:b3:39:0b:db:02:d1:ca:46:77:dc:e6:18:7b:37:35:46:97:
31:3a:7e:73:b9:9a:b8:75:7d:cf:46:d0:24:a9:73:dc:c8:b1:
eb:0e:9e:22:e3:5b:f4:2f:e4:be:a4:e5:e7:08:ca:d9:5a:f2:
d4:a1:d2:7d:6d:f7:2d:1e:4c:80:a3:8d:c7:01:58:1e:4b:4d:
53:93:f3:92:93:70:f3:3a:2d:32:2c:e9:8a:21:93:5c:06:ad:
72:e4:6a:cf:46:35:ea:ed:50:db:a8:2e:87:91:8a:7c:94:3a:
8a:03:99:07:80:16:e7:9d:bb:76:fc:f0:13:0c:e6:34:e7:95:
0d:c1:c5:fa:36:21:52:03:52:8b:38:55:d0:de:9e:42:31:c9:
83:01:be:0f:da:1c:8a:a3:41:da:7c:91:94:16:c2:4a:4e:76:
f8:a0:61:4b:6f:c2:24:db:46:98:c0:cc:f6:59:3c:15:38:d7:
2a:e2:cd:87:d6:87:35:6d:f4:8f:de:6e:4a:5f:b2:91:96:b2:
fc:9d:b2:c1:34:5b:ab:fe:fa:f8:fc:f6:92:7e:fa:04:b4:2a:
33:3d:a7:0c:f9:57:54:eb:41:a7:24:37:4d:9d:c6:3c:b5:5c:
12:16:83:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdArUdZ5uwr3vEQRtPPftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjEwNTA2NWMwZDkxMzliNWZmZWRjMzJjOTAwY2Y2NGI0
MzEyZWIwHhcNMjUwODIzMDEwMzUxWhcNMjUwODI0MDEwMzUxWjAzMTEwLwYDVQQD
EyhkNTUzMjYzMTQ5MjkwMjY0NjliZjYxOThiN2I0NzQ5OTdjY2ViNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol4r2SDlnVty62LYTdYMTWObl2JO
VNlHLIqoViisyNU4B54Q86TT0PS4Ctz6KVnMi2BRZtZMV9Jxtl4k7F3p1Liqxehv
Q+rwtZfA3LuW6skDtSA+We1DfcQLjFeumZJM/I+fHpXRZNzvFDabUdG/JSInWg4M
xyYX3Oqjqt+EJBSLh42HpbpUObDZFcGhzIRgixc/odzrhRwKxQAX4S7KWZXobeZi
+i6UfwAHaJd1haEKuvO7lq3YgqGznZItO3sKkJNYC5ypTl4P2A+EjrlvD+k/qUen
CQMHo6HVcZiFqhkiv05KW1MYyXDMKB2zZtE23oQbTGzYAn2Tm0y7JxGQEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVTJjFJKQJkab9hmLe0dJl8zrZNMB8GA1UdIwQY
MBaAFFOxBQZcDZE5tf/twyyQDPZLQxLrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MWMwOTEtMGE0ZS00MDA1LWJlMjIt
YTdlODY0NTNhYmNkLzEvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MWMwOTEtMGE0ZS00MDA1LWJlMjItYTdlODY0NTNhYmNk
LzEvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9fH+ByE
cgIBBYY8azAvqcDmabM5C9sC0cpGd9zmGHs3NUaXMTp+c7mauHV9z0bQJKlz3Mix
6w6eIuNb9C/kvqTl5wjK2Vry1KHSfW33LR5MgKONxwFYHktNU5PzkpNw8zotMizp
iiGTXAatcuRqz0Y16u1Q26guh5GKfJQ6igOZB4AW5527dvzwEwzmNOeVDcHF+jYh
UgNSizhV0N6eQjHJgwG+D9ociqNB2nyRlBbCSk52+KBhS2/CJNtGmMDM9lk8FTjX
KuLNh9aHNW30j95uSl+ykZay/J2ywTRbq/76+Pz2kn76BLQqMz2nDPlXVOtBpyQ3
TZ3GPLVcEhaD9w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:51 2025 by rpki-client