Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: rTKJYRnrt4JPjV9b9V0TAuMgla+Z2W5XLT36XYTtzkA=
Subject key identifier: 7A:75:82:56:0D:CE:FE:4B:2F:B1:81:68:B8:8C:76:BB:A1:1F:9F:82
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 0197B6A072D1756952C2AFB38D2AF865243C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 049B
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=)
2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: CZYIiF9SXV9dyVye7P6evGYWkqGYbW6h77M6YGBFa1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:72:d1:75:69:52:c2:af:b3:8d:2a:f8:65:24:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=7a7582560dcefe4b2fb18168b88c76bba11f9f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:cd:97:f6:e1:3a:df:b4:96:8e:88:67:11:
36:9d:b2:54:14:2b:8b:c2:63:20:0a:03:b6:16:f3:
74:3c:7d:13:4e:38:d0:37:47:83:c4:90:69:4d:33:
fe:f1:58:62:ef:55:61:61:2b:59:45:0b:d0:81:0c:
7e:e7:a8:d9:55:75:df:f6:f9:49:a6:6c:e8:59:8f:
66:54:87:bf:d6:e0:9f:fd:5b:7b:02:b2:0c:f1:26:
25:33:9c:81:f1:13:e2:5c:03:19:99:cb:ac:a0:8d:
81:09:dc:00:92:82:6a:28:96:43:c9:19:de:0b:28:
5f:3a:7d:5a:c3:dd:77:2e:bf:04:dd:88:bf:a7:15:
1c:4d:86:e5:01:ab:22:7a:9a:58:d2:5b:dd:25:f9:
dc:41:5b:58:31:98:16:04:2e:93:35:aa:48:10:04:
90:b5:14:10:44:ee:fc:4f:0a:9f:f2:ee:b2:8f:ad:
7b:b3:39:23:57:d3:94:32:f1:13:ef:58:62:b7:46:
07:bd:ff:77:7b:65:b3:18:c1:1f:28:0c:17:46:27:
25:5e:d6:c6:6f:0f:80:67:15:5d:31:13:6f:c8:24:
82:2e:5e:ac:5a:3e:70:55:37:79:23:66:85:0f:4b:
a4:3b:a1:80:38:f5:ea:29:5e:4a:aa:7e:f0:cb:ba:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:75:82:56:0D:CE:FE:4B:2F:B1:81:68:B8:8C:76:BB:A1:1F:9F:82
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:91:0a:a7:24:1f:e8:f1:de:cc:d9:ef:61:8c:67:23:25:85:
29:d3:3f:fe:2a:ee:14:e8:9a:24:8a:08:67:2a:bd:5e:72:76:
4f:3c:d4:de:70:18:57:af:ff:58:d9:8a:3e:06:7a:4f:c4:de:
b4:81:07:30:1b:b8:ad:07:3a:0e:93:9c:49:6f:83:b9:74:d5:
67:a2:29:0c:80:29:da:23:b3:31:8b:22:97:04:77:6c:9c:49:
74:83:e9:c4:8d:89:48:fb:42:0f:33:80:5b:84:27:68:76:eb:
0b:55:31:b7:9a:cc:29:1a:45:fc:7b:6f:7d:56:9d:c1:54:f3:
ea:17:8b:bd:78:4b:ea:f4:49:b8:73:3e:a3:e1:c8:da:e5:2e:
7b:df:67:a5:53:4a:ba:8f:14:e9:ad:45:4d:62:63:32:15:f3:
81:73:0c:83:82:04:3b:cf:08:ec:83:2f:39:e1:3e:d0:1d:04:
2c:0b:6a:2f:ab:fe:c7:00:14:d7:da:f9:5e:9e:47:b7:f3:25:
64:4d:49:1a:52:ad:be:04:77:f4:d7:df:85:15:e8:2a:b3:e7:
27:ba:ab:1e:fb:c8:ff:b8:6e:3e:ee:b2:32:f2:54:05:2a:f2:
16:b0:9a:14:9a:d1:4f:b4:e1:f0:f5:ec:d2:c3:eb:9b:2f:5b:
c4:74:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:15 2025 by rpki-client