
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: c9gHrU5I+qDoS03AIL7efRToJAAHWSaAVQH49PWtqlU=
Subject key identifier: 5C:5C:ED:11:0C:39:EF:6D:BB:3A:FA:BB:D5:95:0D:59:92:1E:89:22
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 0198D6CCDB505666F48E3D0FF5B0D1D2EDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 12:00:06 +0000
Manifest this update: Sat 23 Aug 2025 12:00:06 +0000
Manifest next update: Sun 24 Aug 2025 12:00:06 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: SxYTq54EWzmNpgdgzYWJL3DjHESzYOMcgtOKB+q0+Dk=)
2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:db:50:56:66:f4:8e:3d:0f:f5:b0:d1:d2:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Aug 23 12:00:06 2025 GMT
Not After : Aug 24 12:00:06 2025 GMT
Subject: CN=5c5ced110c39ef6dbb3afabbd5950d59921e8922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:3d:41:ff:34:9c:a3:61:36:6e:ac:8a:8b:
ff:74:04:07:d0:f0:f5:c2:9d:04:dd:f0:36:40:7e:
7e:28:0c:32:5c:e0:b8:e6:d2:cd:1c:2d:e8:27:6c:
eb:77:7f:db:3d:27:1b:d3:d5:f8:41:1c:0f:f1:e1:
5f:47:02:19:d4:23:f5:5e:fd:c5:a7:0a:93:40:92:
b1:96:d6:ff:14:51:a4:6c:95:fd:8d:0b:71:7e:57:
6a:9e:52:e5:cd:35:e8:0a:8e:4b:76:ba:1b:21:2e:
6d:ed:82:2e:59:e6:db:c9:f7:8c:4e:92:ac:0f:eb:
9b:82:20:fc:e8:c7:98:34:fe:23:f5:cf:37:20:98:
78:e2:1d:3d:60:0f:12:28:71:01:b9:13:c5:9c:d8:
52:30:e0:84:42:8c:0b:e1:ca:83:e1:ad:2a:f7:0a:
ff:d4:67:11:8e:ff:38:40:88:76:5f:72:67:e3:e8:
60:e9:da:33:a0:12:b7:1e:86:d9:1d:52:01:1d:89:
76:aa:0c:0a:bc:66:9d:7f:4e:5c:5e:11:b3:13:0e:
db:57:0b:c1:3f:04:ea:88:59:30:f4:80:f0:c8:43:
3b:29:3d:df:f3:f2:ea:f6:91:1f:60:af:a4:9f:0c:
14:45:12:a2:38:1e:60:60:7e:35:07:3b:7f:3e:e3:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5C:ED:11:0C:39:EF:6D:BB:3A:FA:BB:D5:95:0D:59:92:1E:89:22
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2e:84:c8:8c:6a:63:48:b5:5f:86:23:15:7a:bb:4b:12:5c:
26:8f:fe:3b:51:7c:4e:17:61:18:39:78:5f:ae:ee:61:16:f4:
de:9e:87:5d:e9:62:9c:22:0e:e6:af:63:e0:b0:55:f1:aa:6b:
4b:73:2f:fb:b2:f7:43:f9:f6:5d:b9:93:18:df:5c:22:bf:69:
f0:09:e8:94:dc:ae:34:47:5e:72:a4:2c:87:bd:fa:e3:15:9f:
3a:29:06:4f:ba:d8:02:af:5a:38:50:ca:d6:57:a0:ca:2b:be:
21:c6:05:ad:d3:7a:f1:32:a3:9f:c5:cb:80:24:98:b1:dd:5d:
b9:01:e6:cd:f1:9e:61:58:c5:4f:b8:b3:8d:d1:71:90:60:bb:
af:2c:fb:3e:fd:fb:52:cb:36:60:a0:00:c7:62:c2:6b:94:b3:
4f:f8:b0:98:f4:b8:cb:77:69:de:26:b1:1a:e9:42:6c:59:28:
98:f6:2f:4a:fb:38:b0:34:2f:33:a1:d5:9e:cc:52:da:82:2a:
eb:df:1e:7c:1d:d9:3c:ed:b6:8e:57:95:62:2d:6c:81:28:2a:
15:d1:58:e5:19:40:d3:3e:bc:d3:a0:71:ad:d2:81:9a:77:52:
6d:f4:bf:7d:7b:da:f3:f0:e8:e6:69:f5:e0:95:d9:37:d6:2a:
93:4a:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:52 2025 by rpki-client