Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: DRA3zhgADA4gu/fL8SwGQgvXTNVnH1tKRbq3p2wo3/I=
Subject key identifier: A0:0B:8D:C9:FF:E4:85:84:D5:7F:F4:51:84:EA:92:A5:10:68:BD:31
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 0198D4E05C0D2976ED82AB294714118ECC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 1356
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: Tc2UQIKueJ8yunwtIGJWbbVCa/l/bGkfCeh20QTq124=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5c:0d:29:76:ed:82:ab:29:47:14:11:8e:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=a00b8dc9ffe48584d57ff45184ea92a51068bd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:f5:51:a7:d9:44:26:22:96:bd:9b:ef:d6:
7f:3a:b1:e0:9f:ea:48:01:31:13:63:4f:7c:e0:0f:
aa:d2:ae:87:92:c6:9d:cb:f3:d0:6e:f0:42:94:a8:
a6:66:ee:99:24:88:db:9e:e2:df:3e:0e:2e:fb:b6:
a9:56:60:05:26:85:cd:08:55:72:ae:10:7f:7d:0f:
88:1a:8f:77:e2:3b:a4:dd:36:5a:59:4d:4d:70:3e:
50:9c:22:a4:a0:ab:62:ec:c3:32:7b:83:98:5c:2f:
3f:fc:8c:7c:1c:04:1e:96:69:f3:a2:8c:c9:21:51:
12:8b:ac:36:33:2f:ff:68:5c:92:93:6b:3a:a0:c2:
03:e0:c5:82:fc:01:a2:cf:77:cf:a3:41:92:9d:24:
33:6c:3a:ba:ec:3c:98:0c:ff:1e:05:59:44:23:09:
f4:09:37:86:20:39:20:03:bd:b7:ca:c2:c9:65:ab:
f6:cb:49:41:56:56:ff:0a:1b:3c:57:24:3d:ff:9e:
0e:16:9a:24:b8:cb:09:2a:32:36:fb:81:d3:cc:0e:
62:49:8f:7c:75:0a:47:f5:fc:6f:0c:04:87:03:54:
6c:71:c0:a6:fc:1a:8c:68:5c:7a:c3:cc:02:9f:55:
3a:8e:2a:bd:43:b1:c0:ca:74:d1:9b:a8:8a:ac:19:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:8D:C9:FF:E4:85:84:D5:7F:F4:51:84:EA:92:A5:10:68:BD:31
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:81:62:06:63:70:20:63:32:14:9a:23:b5:52:c3:82:e7:4f:
97:61:18:88:db:78:ff:50:03:b7:50:3b:53:19:a7:76:d1:37:
ea:bf:08:ae:4e:38:d6:b2:04:db:c8:e1:e2:9a:87:f5:41:54:
3b:20:1d:53:78:6b:b1:06:f2:2b:a9:00:80:95:05:74:7e:7b:
da:cc:40:01:b0:16:4c:7a:87:77:df:90:03:96:e1:c6:8a:ce:
32:18:01:38:c9:b1:44:2a:3b:f1:f1:9e:65:19:47:42:56:d2:
b1:46:ac:8b:23:7c:06:c5:4f:de:64:4c:07:3e:1b:f6:9f:36:
b9:d6:7c:63:2b:79:18:24:1b:c7:b8:55:96:1b:ab:c0:78:0c:
9f:02:57:03:61:f5:e8:58:e1:01:78:9a:90:50:c3:8b:2f:dc:
ea:00:c5:91:bd:7d:df:1b:aa:57:44:28:79:93:66:f6:c8:dc:
c1:c3:be:a6:be:e2:96:38:08:76:59:11:d6:6f:88:34:b4:b1:
3d:55:c9:eb:29:62:97:26:fd:31:47:7d:41:55:cf:09:5a:de:
f1:e2:1d:8f:b6:67:d8:0a:f0:00:83:5e:a9:94:8f:d9:f6:d1:
9c:5c:cf:63:73:4a:ff:95:94:1f:c9:05:6f:b9:b3:36:9d:f2:
b6:33:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:20 2025 by rpki-client