Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: 9rlNEGXI5vPANzHG2c2IuuHKOsulnP6q/Th+MqwhOB0=
Subject key identifier: E5:73:1B:67:AE:F3:B2:AC:A7:24:A5:DE:10:2B:BA:E2:CF:DF:7A:03
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 0198D583C2C42B9D9A83FDB84D68FD76B1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0DB0
Signing time: Sat 23 Aug 2025 06:00:38 +0000
Manifest this update: Sat 23 Aug 2025 06:00:38 +0000
Manifest next update: Sun 24 Aug 2025 06:00:38 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: Inz0Orn3KSa54VbnBE2L3iKD5+72p4a7zqV7eUL+bow=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c2:c4:2b:9d:9a:83:fd:b8:4d:68:fd:76:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Aug 23 06:00:38 2025 GMT
Not After : Aug 24 06:00:38 2025 GMT
Subject: CN=e5731b67aef3b2aca724a5de102bbae2cfdf7a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:f5:51:5d:67:70:b7:db:8b:14:ea:b6:7e:
5d:f1:3d:4b:b1:d1:3e:57:25:56:f8:32:f1:9a:9f:
ec:28:48:94:b7:59:f7:e7:96:b0:aa:cb:84:99:80:
a8:1a:44:62:c3:e1:19:69:5c:5a:1b:48:f2:1d:3e:
90:39:14:77:3b:93:28:0a:80:de:89:c9:3c:3f:c9:
e1:eb:a8:76:0f:f1:88:bb:e6:51:ef:c3:b4:e2:7b:
8b:1c:1a:2c:cd:a8:a2:8b:a0:2b:e6:0d:b9:22:c0:
9d:0c:5b:ef:ca:60:b4:06:ed:b6:be:79:6e:f2:e7:
37:aa:86:5f:22:70:74:22:06:cf:33:e6:a9:e3:5e:
86:b7:04:68:72:f5:4b:c5:3c:73:da:78:d0:7e:83:
1d:76:8a:ae:9b:4f:76:d3:ab:31:84:6f:26:cb:85:
56:ab:11:72:1e:cf:82:3a:1f:ec:bc:2f:fe:5d:a2:
d2:87:85:1e:e0:35:5e:9c:e4:4d:75:40:dc:b6:cb:
76:14:c9:26:c6:56:96:81:f6:74:07:59:f1:a3:29:
dd:aa:47:fc:49:5b:29:91:3d:46:4c:51:b3:71:6a:
68:40:8e:bf:09:e2:64:08:8c:32:9e:31:fe:9d:ca:
c5:58:1d:22:cf:c7:b3:cf:c0:1f:2a:0a:b4:6a:65:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:73:1B:67:AE:F3:B2:AC:A7:24:A5:DE:10:2B:BA:E2:CF:DF:7A:03
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d2:63:55:3b:84:42:ed:8c:34:81:b2:e4:77:58:7f:2b:a8:
1a:eb:90:4e:3b:eb:f6:e0:0b:90:e3:a6:df:d3:bb:e1:43:3b:
97:7e:75:6d:de:12:30:72:32:9b:d8:3f:59:f2:02:8c:9c:2c:
f7:95:5b:e3:4a:ad:6d:05:dc:f1:58:d9:7f:b1:e7:93:81:41:
da:ab:7d:6e:ba:c4:ef:59:2d:bb:d7:b0:fb:43:96:41:8c:d5:
06:2e:e6:bc:0e:00:16:a0:88:56:2f:84:4a:cd:56:9d:2e:0e:
ce:00:9b:39:c2:49:cf:9a:63:f3:61:3e:58:11:21:0a:2a:bd:
e3:f4:37:91:a7:b4:eb:44:93:21:a0:d5:fd:25:51:1b:98:74:
a6:e8:71:62:7d:72:ec:0f:1b:88:ff:95:a5:4c:2f:48:41:7f:
31:32:ee:17:80:4e:f8:d7:bd:39:22:13:cd:60:ce:f7:ce:67:
60:9a:28:fc:09:bf:df:25:f7:73:a1:f9:71:bb:cb:89:df:66:
07:8b:33:8a:9a:df:65:c4:0a:11:59:84:80:82:04:f9:02:ca:
04:01:53:dd:5d:f2:a9:97:73:74:1b:07:b8:f6:6d:8b:49:69:
72:51:fa:44:ee:e4:5d:8f:00:a7:8d:56:f7:9a:07:b2:76:bb:
1a:9a:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:00 2025 by rpki-client