Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: m6nnCgVZ7GDlIex7vJT7iMFrkqUaAKdwFBmeXnXMC3U=
Subject key identifier: 9B:CF:0C:96:20:6F:33:CE:22:EF:1B:B0:09:17:BF:16:6F:B9:1C:77
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 0198D7060F415628B48CD791094A87405BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0D18
Signing time: Sat 23 Aug 2025 13:02:35 +0000
Manifest this update: Sat 23 Aug 2025 13:02:35 +0000
Manifest next update: Sun 24 Aug 2025 13:02:35 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: sRKzX/fr+uxXMqY6hm/Os2coH3MuxGtTEt9ivD6O8ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0f:41:56:28:b4:8c:d7:91:09:4a:87:40:5b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Aug 23 13:02:35 2025 GMT
Not After : Aug 24 13:02:35 2025 GMT
Subject: CN=9bcf0c96206f33ce22ef1bb00917bf166fb91c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:dd:2b:7c:cd:fc:f0:9e:95:e7:7e:69:55:
00:f7:a1:22:4e:ab:b4:b2:4b:bc:b5:ec:2e:0a:92:
a1:b2:8f:1b:44:04:11:55:14:17:27:0c:dc:9f:96:
c8:39:c3:56:09:46:ce:28:6b:a9:20:37:63:6c:97:
0d:c9:d0:21:1a:cc:95:88:f0:1a:91:b6:2b:fd:ab:
f8:8e:5f:5d:2e:dc:47:7d:1f:72:56:f1:5a:a1:0e:
f6:41:e6:30:bf:ab:e8:b0:d6:41:90:37:6d:1f:c7:
e1:c9:43:86:c2:3d:ab:00:5b:94:96:a8:69:02:7e:
bc:95:dd:22:4c:bf:ff:f3:83:60:c8:ad:b7:98:db:
3d:a5:97:af:64:0e:db:69:77:9b:d4:f3:13:fa:22:
33:ce:20:a3:99:3a:4b:f8:8c:92:3e:d6:4e:dd:ac:
63:5f:e5:3f:aa:c5:90:77:57:65:d0:25:7d:bd:65:
15:52:85:b2:ba:0c:3f:35:b5:11:83:67:c4:ce:9e:
a1:47:e5:54:1f:ad:b4:ee:2b:b7:95:e5:e5:1b:22:
38:56:71:53:0c:ff:93:26:e2:8c:a7:ff:31:4a:4e:
16:9a:4e:d2:a6:5f:19:67:21:fb:81:78:35:2b:d6:
4d:d8:6e:72:93:97:bd:5a:27:e9:e4:7f:9c:b1:87:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:0C:96:20:6F:33:CE:22:EF:1B:B0:09:17:BF:16:6F:B9:1C:77
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d4:68:bc:6a:3c:25:24:75:5d:33:d0:af:ea:8f:5d:c0:0a:
ad:97:e0:22:68:5b:2d:90:ad:c2:f2:ae:f9:e2:94:d8:a1:47:
e1:2c:1c:31:5a:0a:24:6b:ba:5c:48:35:2a:1e:2a:48:64:b6:
18:5b:ca:40:5e:a8:b1:dd:ce:59:f5:f9:f4:6e:a4:7c:9c:6d:
c0:94:14:93:cf:20:d4:ac:50:be:6b:ce:a9:2b:4f:aa:41:a8:
2a:b7:ab:13:1d:f9:7c:39:b7:5c:59:f6:12:28:6b:b1:64:e0:
20:5d:6d:4a:0a:dd:57:22:ae:41:5c:b9:7d:d9:82:10:49:fc:
ea:a2:76:05:5a:83:73:e6:dd:f5:97:36:3a:2f:f1:4a:34:36:
e2:49:be:14:db:76:11:0d:5a:ae:96:80:14:d0:84:68:6f:ed:
bc:04:05:77:91:03:c5:64:28:e9:af:23:be:f3:36:42:a2:dc:
71:ac:8c:85:ae:c3:22:37:18:a8:8d:20:93:23:9e:96:67:51:
89:ba:9f:6f:79:fd:c5:8e:c3:0b:11:3a:b6:0b:20:1c:c2:2b:
0a:db:6e:20:d6:3f:ed:ce:f2:2c:cf:7c:2b:05:01:79:c0:fc:
24:28:17:d3:b3:c0:d8:f6:fa:64:58:e3:09:10:79:6d:0a:f3:
ea:fe:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:05:40 2025 by rpki-client