Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: g5oaVP2ZDTfrpF5EqjVtyBeGhoLz4QL2AbohQDZsp68=
Subject key identifier: 6C:20:8D:C3:7A:D7:3C:22:24:69:2A:F1:F9:90:D5:E4:54:F5:CA:FC
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 0198D4E0AE643DBE36C9836E264923C98733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 1046
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: W3OLw6jlUsQolcK/+FRxtLBbueZznd/Jbf9423UrsTs=)
2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ae:64:3d:be:36:c9:83:6e:26:49:23:c9:87:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=6c208dc37ad73c2224692af1f990d5e454f5cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:0f:61:20:bc:2b:37:13:4a:72:a4:18:1b:
4e:05:03:df:2f:70:3c:ab:30:82:a7:85:ba:a7:ec:
b0:5d:91:26:cc:7f:99:ed:75:e3:08:7b:d3:a0:63:
f3:8e:69:be:06:46:ba:66:bd:27:7e:79:8a:9f:ea:
58:d2:d3:e2:be:60:3f:74:b5:38:9e:e1:ea:8b:4d:
fc:d8:e7:89:12:c3:17:6f:cc:86:8f:39:e9:72:bf:
7a:5a:59:cf:c7:3a:23:05:f3:ef:ff:ee:ca:5f:7e:
0d:28:d0:b8:dc:c6:96:d2:d0:df:38:7d:ba:ec:4a:
2b:e0:fa:b8:95:ef:ad:46:bb:a8:2f:33:91:a2:66:
69:ba:41:0c:c3:47:29:08:70:8c:9f:9d:0c:98:52:
29:ff:ee:02:27:11:50:94:c4:8f:67:13:69:f3:e4:
a6:83:3c:96:5d:8b:b8:b5:2f:46:01:4b:db:e5:52:
9b:4a:aa:20:25:30:af:4a:7b:ce:21:ba:dc:13:14:
e5:e6:96:f0:ea:55:cf:73:f0:3e:02:5a:20:a8:1a:
95:61:21:50:3d:11:3f:e3:70:a3:04:53:96:1d:0d:
b2:37:7d:e4:ca:bd:d2:db:02:dc:ea:36:7f:64:b8:
9d:83:21:50:a6:37:54:4a:b2:9c:b4:ce:e7:6c:1d:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:8D:C3:7A:D7:3C:22:24:69:2A:F1:F9:90:D5:E4:54:F5:CA:FC
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e0:b7:d6:e6:1a:96:73:b2:04:c3:22:8c:d7:6b:a7:9c:e3:
22:ba:ac:23:91:a7:a9:a4:e3:eb:65:cd:4b:8d:96:4f:f4:c5:
44:59:c7:df:72:8b:77:47:a5:23:d3:db:fb:f6:56:4b:78:84:
54:83:e0:23:ba:45:0b:33:d1:2f:4a:82:66:71:eb:1f:ab:df:
2b:4e:3b:c7:2e:a1:3b:7e:13:22:c5:2a:8b:9f:2e:72:19:7c:
26:77:39:ec:b5:27:ea:52:32:80:f0:c6:cd:f5:c9:fa:2b:47:
e5:8b:b0:9b:d9:2f:98:c1:1b:fc:65:84:c5:cf:0a:e1:4e:b4:
19:5b:a2:c3:df:82:26:61:c1:c4:bd:ed:aa:60:27:0d:ab:5d:
f8:e6:89:b2:3e:4a:ac:18:5d:55:6a:1d:fa:de:c3:40:18:c0:
2e:75:ef:0b:8f:5b:7c:ac:4c:83:a9:40:24:db:29:10:9a:3d:
6d:3f:86:d6:c2:b9:a4:e7:c2:39:3a:71:64:e5:ea:03:f3:3d:
67:7c:6a:13:5b:c9:aa:22:81:e5:4a:ba:49:fd:63:aa:95:27:
01:5a:cd:78:e1:13:82:f7:26:21:b2:59:69:67:40:75:a9:ab:
5e:cd:2e:2d:10:5b:99:7d:8c:4b:01:e4:b3:18:03:11:d6:65:
cd:a0:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:41 2025 by rpki-client