Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: I6jRKkMfYNjCXYfD+fQCDiajk5TxmLmOoLebraMRG4A=
Subject key identifier: B8:61:D8:27:3C:82:28:5C:0E:01:D4:4D:53:97:7C:D3:5B:B6:41:28
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 0198D515FB69B22FAA88CE8A3ECFF736D0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:44 +0000
Manifest this update: Sat 23 Aug 2025 04:00:44 +0000
Manifest next update: Sun 24 Aug 2025 04:00:44 +0000
Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: QErLLfWrAEM05SVplojU4Mv7yYeOK/qTZP0PU6oh1DE=)
3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:fb:69:b2:2f:aa:88:ce:8a:3e:cf:f7:36:d0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Aug 23 04:00:44 2025 GMT
Not After : Aug 24 04:00:44 2025 GMT
Subject: CN=b861d8273c82285c0e01d44d53977cd35bb64128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:5b:08:5d:67:f3:b3:4e:5f:89:17:be:be:
91:67:8c:c5:dd:31:55:26:2a:ee:7a:23:ff:bb:b4:
88:8d:98:08:57:3c:e9:b7:d5:90:97:61:c0:a4:1c:
25:a2:5c:9e:9d:87:39:0f:3e:24:13:47:84:98:e5:
50:48:72:01:ed:0a:13:a1:67:21:e0:08:dd:cf:e9:
fd:11:e9:0f:85:3f:62:36:c8:b8:29:1d:f6:42:51:
8e:ea:76:cf:58:f5:e3:3d:10:a4:4a:6d:41:df:ba:
d2:09:4c:61:17:d1:75:9b:08:60:ac:81:55:78:28:
2b:fd:62:2b:20:40:10:f9:ee:3c:da:20:c9:c6:84:
04:84:37:ee:0c:bc:03:8c:9a:56:95:ab:93:a8:cf:
cf:62:77:eb:d1:1c:b3:8c:ca:0f:59:7f:c3:51:2c:
14:16:30:69:05:b1:a2:65:04:0a:b7:28:cd:22:f6:
7a:a9:8b:a7:6a:61:e3:51:3e:f8:37:03:c9:47:37:
27:be:61:94:6c:46:96:be:81:96:40:2f:bc:d3:71:
81:88:d7:24:be:d5:2a:8d:c1:87:c9:2e:51:35:0b:
a7:b7:79:42:a4:1b:58:63:57:0e:f3:26:96:26:d9:
09:b8:de:3d:bf:52:ca:89:bc:41:4c:cf:6f:e1:72:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:D8:27:3C:82:28:5C:0E:01:D4:4D:53:97:7C:D3:5B:B6:41:28
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:cd:e8:a4:06:8c:4e:83:04:44:de:ee:67:ba:2c:06:9e:
42:0f:49:29:f8:70:3c:9e:a1:e6:94:c8:1c:6c:51:fe:fc:59:
26:3c:9a:78:1e:d4:07:7d:74:33:ea:0a:ba:d2:26:83:a6:3b:
d4:74:fd:d1:fc:4e:af:7d:9f:d0:22:06:17:7c:4d:e6:9a:7f:
0d:d1:0b:1a:c7:9c:c8:59:35:73:c3:26:c5:45:ec:1e:92:3b:
10:ea:b4:8c:b7:b2:dc:3d:43:36:76:c7:1f:78:ad:52:53:d0:
73:f5:21:81:bd:7a:0a:40:7a:af:c0:5a:5c:9c:34:e5:2c:b0:
88:4f:16:59:84:d3:b2:10:33:16:13:91:31:66:5b:dc:f0:58:
c4:a9:f2:32:43:3f:6a:0a:a8:97:f3:da:a0:50:c9:ed:70:f0:
7b:b8:c3:2d:c3:59:55:8c:d9:33:d4:11:da:12:ff:f1:09:92:
21:f6:2c:b0:ae:1f:81:7a:bf:f6:6a:01:ee:bf:f6:8f:76:bf:
6c:66:f3:52:e5:2e:21:10:b7:c0:46:df:d4:36:b3:d9:41:6b:
34:c1:09:44:47:2e:44:1e:ee:41:0b:25:87:bc:a8:be:f2:54:
87:18:4a:77:37:b5:2b:08:56:d6:b9:c4:46:d7:0a:9c:0b:4f:
45:c7:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:43 2025 by rpki-client