Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: V1OANMep8fXUxVjVGXUm6M/WH2RfQroAh+SBPpgRIdA=
Subject key identifier: DF:0D:08:0D:D8:69:96:33:76:EC:E1:D2:2D:49:78:9F:B7:70:A4:3D
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 0198D69844874D78A352FCACB47FA32DE29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 032E
Signing time: Sat 23 Aug 2025 11:02:39 +0000
Manifest this update: Sat 23 Aug 2025 11:02:39 +0000
Manifest next update: Sun 24 Aug 2025 11:02:39 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: aLI0VK3Lu9+fOoZIYfZXHcCjOZ+75zqj0siI8j42wHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:44:87:4d:78:a3:52:fc:ac:b4:7f:a3:2d:e2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Aug 23 11:02:39 2025 GMT
Not After : Aug 24 11:02:39 2025 GMT
Subject: CN=df0d080dd869963376ece1d22d49789fb770a43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:e2:34:12:bc:68:70:ba:cd:bb:23:6f:75:
bb:b2:eb:93:e0:45:8a:c3:02:1d:d7:72:21:99:0e:
7e:98:00:97:79:40:1a:ac:a3:a9:70:74:3d:2f:ea:
c4:98:a0:da:65:64:0d:0a:d3:12:b4:ae:1c:5b:74:
e2:ec:ef:95:11:32:99:c2:f1:2a:69:e5:17:69:f8:
5d:15:12:a7:fa:bc:c7:f0:d6:cd:ae:b8:2d:ba:02:
c3:40:14:71:55:bd:66:66:a4:db:d0:59:fe:7b:d2:
ee:f5:6d:69:37:46:7a:79:ea:69:d7:ea:f1:a3:65:
26:ce:0a:e8:c2:04:f5:61:e5:84:5c:33:0f:85:c7:
7b:08:1a:fe:54:41:01:a7:c1:f8:70:98:73:bd:7d:
00:30:d6:e0:8e:4f:aa:3a:10:d9:0d:6a:b1:d3:67:
9e:41:b5:22:37:9b:b8:eb:3e:f4:46:45:78:f2:cc:
f2:a1:1c:0d:6a:5c:eb:73:6f:47:4f:cb:72:0d:45:
57:e9:f8:6b:f2:bb:fa:10:a2:bf:97:1c:5d:26:21:
b0:fc:c3:6d:02:82:f6:ed:a8:6b:94:7b:56:cd:e3:
ad:9d:82:d7:d9:02:bc:49:24:97:7d:68:53:35:1d:
e2:6a:f9:99:3b:22:20:1b:12:39:9e:8c:71:ca:cf:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:08:0D:D8:69:96:33:76:EC:E1:D2:2D:49:78:9F:B7:70:A4:3D
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e3:26:10:cc:83:0b:80:29:ed:0e:da:fc:ba:ba:62:5e:e1:
0e:5a:44:86:14:cc:f0:92:0c:61:0e:69:b5:e9:12:20:9b:e0:
9a:02:ab:23:ed:50:22:0b:a4:5d:be:3e:37:9b:ae:00:d2:86:
6e:2e:a7:43:dc:72:8a:71:bd:2a:9b:7a:69:1e:6a:59:6a:de:
b6:5a:00:81:f1:d3:14:af:04:99:85:99:57:3f:00:cd:d9:10:
1a:42:b0:19:71:46:2a:0a:3a:7b:2c:5e:2e:e6:f4:d7:b7:5f:
8b:20:1c:b6:c4:d3:5d:19:96:5f:1d:5e:f7:46:09:ba:6a:f7:
36:fa:29:6e:03:67:60:22:12:9d:86:d3:00:46:c9:e1:50:48:
9b:96:da:43:3a:0e:fa:4d:8d:24:3a:ef:46:9f:48:0a:e1:6a:
1d:3d:84:36:0b:03:69:73:e2:bc:ce:33:a1:51:7e:96:54:6b:
8a:2e:0e:6e:10:75:40:19:24:06:1c:80:51:61:f0:98:4e:fa:
81:22:da:73:ef:ab:b8:86:45:11:ec:2f:8e:df:12:22:f3:24:
7d:93:73:80:99:80:c9:ad:4e:cb:cd:d1:12:2d:d3:e9:99:ec:
fa:59:75:c6:a0:02:85:1e:75:c5:14:d3:fb:e3:c6:56:d9:24:
78:96:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:00 2025 by rpki-client