Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
File: U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json)
Hash identifier: AROpmxdylkPvqSACh8q83wqp8k3tX+jDjGIRyLD3l74=
Subject key identifier: 2E:B0:4F:EC:17:FB:E0:66:E9:29:C9:17:96:14:BF:9B:28:B2:41:30
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Certificate issuer: /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial: 0198D5F1302A2123C140F061FA260638B05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
Manifest number: 0D20
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: GZldOEJkrutoTjn3MQnXcf09taM.roa (hash: vlltg4veeHpXkbEneS2WFuhIZv9HwJeSmQM3GzCbD1k=)
2: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: mMzpjPpX6rIPtTVbccLPPtMMfRi3zjnq4/PUOhzWPj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:30:2a:21:23:c1:40:f0:61:fa:26:06:38:b0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=2eb04fec17fbe066e929c9179614bf9b28b24130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:57:96:2d:1d:e2:4f:fc:ba:1c:73:7c:e3:eb:
7f:98:48:80:b1:bb:e8:aa:b1:d4:a4:b8:ff:93:a1:
ae:cc:9b:91:1e:c3:30:92:5a:ff:33:88:bd:15:bc:
d0:00:c2:6f:35:92:03:f7:d8:4f:4d:6f:0c:34:85:
bc:f6:5a:d9:7e:1e:75:d8:c2:60:43:b7:b6:29:67:
7e:07:69:bf:37:81:06:98:dd:90:54:91:57:68:02:
fa:8e:13:9d:75:60:72:8a:68:64:94:27:d4:0f:6d:
b9:e7:a3:4b:2c:e8:15:a1:9c:a2:98:d9:df:5f:71:
8b:46:aa:52:57:96:5c:b0:fa:2d:bf:d2:42:aa:00:
9f:e6:b5:4d:30:f3:8c:2c:92:82:94:ef:78:cb:6e:
59:51:10:12:59:44:21:f5:0e:0d:7f:9a:bc:73:df:
e9:7a:34:c0:65:e5:61:e4:2b:b0:91:40:67:1b:37:
02:40:a2:2a:77:aa:df:8d:57:0d:e8:f8:ff:bb:f0:
b9:33:58:42:56:a4:c4:38:fd:73:cc:b4:14:95:f2:
12:09:0f:15:3e:96:0c:e7:ca:26:f2:1c:a2:89:a7:
1a:55:6a:4d:fa:6a:68:14:9a:d7:ba:61:1b:6b:44:
d8:34:6c:3c:5c:de:74:cb:55:e0:a1:1a:1b:0c:b0:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B0:4F:EC:17:FB:E0:66:E9:29:C9:17:96:14:BF:9B:28:B2:41:30
X509v3 Authority Key Identifier:
keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4e:96:2c:56:f1:98:a1:b7:4d:dd:c2:ad:b2:3d:cd:73:fd:
10:30:e7:dc:fd:69:b4:83:cd:9f:68:30:7a:32:a5:eb:56:7c:
ca:66:cf:48:35:e3:98:86:9e:ff:24:1e:23:3e:df:ea:64:d2:
4d:29:d3:0e:c4:b8:af:fa:bb:f4:66:b6:5d:1a:be:85:53:07:
32:9f:f6:21:da:a6:74:49:95:f2:41:09:70:47:0a:67:3e:a9:
8f:b6:86:9b:0d:9f:1c:56:c1:f2:bb:a0:18:e4:05:ee:1b:fd:
05:88:5a:c9:0b:bf:1d:19:37:ed:93:4f:ac:9b:2c:e2:6c:d1:
55:f5:87:99:d5:89:84:c6:d1:4b:93:78:1f:b3:30:d0:c5:39:
46:88:79:2d:3e:ce:72:fe:7b:ae:04:ec:ab:a1:63:fe:f8:3e:
6b:78:ea:7c:db:26:5e:7d:9e:76:22:ce:1c:ac:36:36:3c:af:
1c:53:54:06:2b:14:18:5a:48:69:fc:91:9c:9d:6d:39:7f:26:
07:3c:99:de:11:c9:58:7d:28:f7:46:21:18:f9:7d:03:d4:ae:
35:a2:8f:80:b9:2c:51:55:9f:96:b0:9e:e7:62:8a:65:79:d4:
87:97:11:c2:3c:22:1d:11:b0:92:3e:86:4f:62:f1:86:12:75:
70:6b:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:12 2025 by rpki-client