Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: DE+RbckaysOd2205ZO33UEyBcIkuY0e5f6Oa4KqHhMQ=
Subject key identifier: 85:96:7E:65:9C:C3:29:D0:14:67:3E:EF:72:E0:06:0B:A0:FE:EF:4E
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 0198D4736F470BAC449F79C991E1E0496888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 052F
Signing time: Sat 23 Aug 2025 01:03:11 +0000
Manifest this update: Sat 23 Aug 2025 01:03:11 +0000
Manifest next update: Sun 24 Aug 2025 01:03:11 +0000
Files and hashes: 1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=)
2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: Xnlfv+Mu/rPc2Q29TQrhCpDuCTHz/Yq61uoVaG3Y4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6f:47:0b:ac:44:9f:79:c9:91:e1:e0:49:68:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Aug 23 01:03:11 2025 GMT
Not After : Aug 24 01:03:11 2025 GMT
Subject: CN=85967e659cc329d014673eef72e0060ba0feef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:b1:3b:6a:29:2f:82:e5:95:00:a7:b1:96:
8c:c5:60:a5:72:16:51:3e:b3:f3:9f:9a:b5:ab:7d:
87:27:f4:93:ec:d9:9a:40:a9:4b:5c:1f:a0:df:b2:
42:d8:b1:13:89:55:7e:95:49:4e:22:64:e1:bb:45:
6e:1e:b2:7c:fb:13:b9:d9:24:a5:f5:10:99:97:95:
b8:b4:bd:4f:94:ba:ae:19:6e:58:5c:04:29:11:b1:
2f:01:6f:e1:4c:b3:3b:0a:98:96:35:74:1a:33:c1:
e7:20:22:a9:3c:4f:32:2a:03:3e:cd:77:51:55:cc:
ef:f3:a1:71:25:1a:6d:be:32:a0:07:74:bf:fc:5a:
f7:69:61:8f:bd:9f:95:65:be:c0:f9:c1:4c:55:66:
c6:d4:31:cc:cc:d9:c9:ba:1a:f5:67:54:cc:94:de:
6e:8f:a0:67:d2:8f:a8:2e:fb:6d:7a:53:c1:d1:b4:
51:b3:b7:10:17:8c:c5:4a:22:49:de:46:aa:20:d5:
82:e5:4b:87:b5:96:ff:94:6c:be:cc:e8:fd:4c:71:
92:79:81:f6:18:40:fd:19:cb:de:d3:17:40:01:88:
c5:61:84:59:b4:0b:d9:73:43:54:f0:d3:26:c5:48:
41:3b:48:c3:34:b1:7b:08:bf:78:c2:d6:f0:b1:a6:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:7E:65:9C:C3:29:D0:14:67:3E:EF:72:E0:06:0B:A0:FE:EF:4E
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1f:e8:71:98:fc:ab:ec:6d:31:5c:83:4d:d0:81:5e:c5:8e:
ac:d6:ed:40:9e:57:31:f3:ab:7c:c5:d2:63:36:dd:e7:13:24:
0c:84:cc:5c:d9:0e:8c:cf:27:48:a6:86:bc:48:f1:7b:b8:d3:
0b:1f:05:c4:97:b1:eb:e1:07:44:6c:f4:e3:d7:13:28:12:66:
ac:c7:ea:18:88:d5:ba:a7:22:be:40:d5:4d:8f:41:70:c9:5a:
7d:09:7c:9a:b0:34:62:91:35:1d:c5:8d:71:45:d4:63:87:ad:
6e:82:c1:18:c3:bc:27:ab:06:73:a5:e0:56:17:2f:ca:03:ff:
7d:58:3a:39:86:f4:d4:d4:c1:16:33:bd:4a:bc:d2:70:f6:24:
04:ca:6c:81:c9:d8:b9:11:f4:a0:f6:87:2b:d0:50:2c:f7:d6:
61:9d:ea:61:a3:d4:0b:c4:4c:17:f8:f2:87:81:1a:4f:57:ff:
6f:99:6b:58:13:32:49:7c:1b:a0:16:d0:a5:67:4f:0e:50:d3:
57:0d:9b:af:1e:71:8a:d8:80:13:a7:63:a4:db:8e:4d:37:1a:
b1:82:41:08:45:0d:07:5a:3c:a9:73:52:e0:33:7d:0a:63:57:
49:7d:a3:53:0a:cc:c3:cf:0f:1b:00:7e:71:c4:91:45:7f:08:
8b:60:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:53 2025 by rpki-client