Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: cxZOI4wdJ5FALe8IOJGx804xxwLbg91KXu5nSry5IfE=
Subject key identifier: CA:5E:8B:55:1A:D8:EE:68:58:88:97:FF:CA:CD:62:72:5A:08:B8:E5
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 0198D4E0026D01520306FDFC1DECD19C23A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 0DE5
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: FfMewNkPw8krDRQiUJjgRowB8ZMr0/g3VEYJzNgzPJI=)
2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:02:6d:01:52:03:06:fd:fc:1d:ec:d1:9c:23:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=ca5e8b551ad8ee68588897ffcacd62725a08b8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:8f:21:68:65:31:c7:4e:a1:1c:c2:c2:e8:
d0:44:0e:dd:a9:c9:c6:b1:84:fc:79:be:8e:05:71:
78:76:1a:ad:ce:66:ae:2a:38:e4:36:c9:a5:fd:ac:
77:cd:8a:10:ab:12:bc:f5:01:bb:8c:d2:be:7e:5d:
9b:99:7b:7a:03:f8:dd:2a:37:29:0a:4d:c8:e3:8f:
92:5a:bb:f6:63:4d:61:ea:38:a7:27:08:48:f5:08:
a4:54:62:55:ea:df:2f:27:ed:cb:e5:5b:1c:f8:62:
c7:c6:50:20:84:0f:39:8a:d5:ee:2c:57:fa:20:e2:
3b:ad:d2:d8:52:54:49:37:45:e8:3c:79:77:47:3d:
aa:69:56:3f:d7:63:45:83:ca:48:d4:4c:4c:94:49:
68:d1:32:03:02:13:96:53:f0:c2:f3:d1:af:7f:5c:
38:8f:64:9d:de:48:0d:52:33:b7:46:81:56:7f:d0:
9b:02:11:a1:57:ad:b5:b6:0d:6b:38:f1:b2:38:b6:
d9:44:e0:1e:b1:c0:e9:4a:0e:55:c1:eb:6f:3f:3e:
b8:06:9d:b8:50:39:94:e3:05:70:c7:9e:d6:63:1a:
58:ae:41:15:fe:1e:c1:ff:3d:e4:fd:0c:cf:58:c8:
f5:d0:80:92:31:e6:10:2e:84:b7:30:b4:af:69:ee:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:8B:55:1A:D8:EE:68:58:88:97:FF:CA:CD:62:72:5A:08:B8:E5
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:eb:40:95:0b:55:ce:9c:6f:bc:0c:87:eb:31:d6:83:63:ee:
cd:23:95:36:00:8a:9d:ca:b9:45:ab:87:58:e2:5b:8a:ed:61:
58:a1:72:a7:5d:01:4d:bc:e8:1e:e0:3a:2a:45:6f:af:c9:cd:
dd:92:fe:35:88:51:c8:60:98:fb:80:fe:90:80:05:c0:74:8f:
aa:8c:81:14:92:86:dc:a0:ec:01:68:26:e6:24:9d:75:f0:b1:
4a:5a:e2:92:e4:3b:1c:34:9c:40:21:30:f3:3c:6c:6b:8f:1c:
05:38:af:a4:63:80:80:a5:09:c4:a8:11:94:b5:ef:ab:af:f1:
6a:00:87:36:23:de:f9:a5:1c:ea:25:45:f8:32:c5:01:a9:7a:
3f:94:78:4e:0a:ca:f3:d5:05:d8:99:70:8f:30:2e:ab:76:00:
37:e1:91:26:4a:57:c0:69:15:82:7a:37:e4:7b:75:39:0d:81:
ae:61:cb:a3:6c:0b:f7:9a:ca:bd:85:c0:c4:ad:51:23:59:e6:
c7:f4:98:2e:64:e0:2b:41:cc:3d:ec:56:dc:80:45:a6:fb:b7:
b6:87:dd:72:cc:1c:7a:3a:c8:f8:d4:22:17:d8:d0:6e:17:73:
aa:f3:39:8c:d5:8f:7a:a3:79:2b:b4:d4:02:f9:33:62:b0:87:
7f:60:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:09 2025 by rpki-client