Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
File: U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json)
Hash identifier: 59gpPpSG8cRYvOPboP04RwQ1/U+WL1BGqFLDDNnseD8=
Subject key identifier: 13:FE:B9:73:A3:46:2B:CD:65:30:66:07:52:73:EF:F5:CA:37:E9:E2
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 0198D4E05E58853C80BE5124510D50BB8CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: N395374_mmN2AD-ofI4gXJ3cQpU.roa (hash: Zf59hxbYn2Mwx3RShNxnNZI4f8JDWVmUB1iW/NWH/74=)
2: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: WxKQDH1sNuy24wQyYl9cY3Mi+8BMCD2Lq8Y2imIRhHc=)
3: WX6sNrF92l686KdkTXPFkLfxe3U.roa (hash: Abr+DHAKxIPDGR7zdXI5jJnVVIXCf9i5JeUWk/vC2vA=)
4: WcSAU3UG3fbCDubUuAbDmN9BNXw.roa (hash: lUiGwZsu8aUjDmUrAqfxfzum4CcP/EsvidCuJT28td0=)
5: YsUzeXuKor8g8xJ2qQAIbZwuLdA.roa (hash: b8Dg+ptVU/0cD+fmDjz15R9Y3ThIrc8W4BKhqUm2GSI=)
6: vdc8LHeirosn85jHF2y6k4tZWpE.roa (hash: bWLLd9BGuNkbp8DQiZZnq80FzJLO4Q8aaegMFqU4oPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5e:58:85:3c:80:be:51:24:51:0d:50:bb:8c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=13feb973a3462bcd653066075273eff5ca37e9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:04:b7:15:aa:2a:8b:4f:11:e3:b2:08:35:
f2:fd:83:7a:a4:38:ec:11:a9:ff:20:87:b4:d3:a9:
9c:77:3b:bc:0d:2c:47:29:90:c8:b8:3c:86:7e:a2:
2e:00:36:31:6f:e9:8b:3a:91:6b:6c:cc:cd:b0:3e:
f3:ad:3a:5f:d6:43:cc:f9:48:61:8c:18:4f:84:a1:
2c:72:2a:97:16:97:af:a1:2d:9e:d6:83:cc:77:2d:
56:ef:81:61:42:e7:12:a7:fe:1f:99:e2:42:c2:82:
03:f7:54:5b:75:c4:24:a8:63:89:99:51:31:f7:c8:
df:ab:3a:51:8f:79:c3:9d:8f:a3:13:fb:c0:10:b6:
be:c6:ff:e4:04:2f:c8:79:e8:e5:54:5b:c9:6b:e0:
53:b9:3b:46:d6:29:41:23:c8:69:1c:d9:53:2a:5e:
7f:e9:2a:ce:c9:b7:56:86:30:f9:36:7a:64:ea:29:
c0:00:cc:9d:1e:42:12:b2:65:79:70:15:ae:0f:30:
01:5b:8a:a0:9e:a7:35:fa:23:ab:85:bc:7d:92:1e:
4e:45:b6:01:16:90:1f:da:db:f7:2d:6e:1c:b0:ff:
6a:ad:d7:7e:a5:df:1f:8e:b5:01:57:d0:53:3b:79:
f4:37:b6:60:df:56:ed:95:71:12:bf:d6:59:33:ff:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:B9:73:A3:46:2B:CD:65:30:66:07:52:73:EF:F5:CA:37:E9:E2
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:f7:74:09:d5:63:2e:b5:8b:5b:63:4f:2a:75:e9:6b:92:
19:e1:c3:b8:2b:34:ba:63:66:6f:c7:38:24:29:85:1a:0f:5b:
c5:9c:58:fc:1e:15:a5:86:7a:40:79:99:c6:7f:fa:b0:7a:75:
f1:b1:91:a6:97:75:ee:78:f3:1e:3f:b6:f6:b1:e2:38:dd:21:
4a:7c:f0:76:b7:b4:b0:7d:d6:eb:aa:b3:0d:a0:ec:88:03:7a:
57:f4:19:2d:fe:4e:fb:64:b9:64:9f:70:da:68:23:ed:70:c6:
fc:ac:e8:2a:09:5d:3d:a8:74:2c:16:17:ce:3d:6d:39:66:4b:
a5:dc:64:48:38:f6:c3:21:b9:31:c4:d7:5c:c1:62:f0:fc:58:
cc:30:6b:1f:eb:46:73:c9:c1:99:bf:fe:63:97:21:3c:9e:63:
35:54:92:ee:b6:e3:e5:3e:9d:3a:05:9a:cb:f7:ea:d6:8d:98:
43:e2:6f:9b:a0:9c:d5:c1:10:99:f4:f5:5a:a8:f5:21:07:24:
95:06:e2:3e:41:f8:bb:d7:fa:36:9f:87:03:50:a6:0c:c4:5d:
10:1f:65:04:1a:68:2c:2d:a7:da:ab:7f:3a:83:cf:89:c6:d4:
cf:a9:c1:ce:90:e1:4c:7e:1d:b5:32:53:7b:cb:e5:42:d9:f4:
fe:ab:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:45 2025 by rpki-client