Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: 6CQ4DkG1M7jfddzWrGSIJ5BYHLOvz97D/xNO7f8ZQmc=
Subject key identifier: D8:D0:C4:2E:50:6D:B4:35:38:FC:90:27:9A:36:19:CA:53:E2:4F:36
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 0198D473A2E9449D4684900BA869FC0BFE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1147
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: 0eHsipT7QXjzGwKTbi4NjipBhHqx9eaCllDfu9lgxx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a2:e9:44:9d:46:84:90:0b:a8:69:fc:0b:fe:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=d8d0c42e506db43538fc90279a3619ca53e24f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:83:a5:48:3c:c7:b8:1c:0f:d5:34:be:e1:
a5:1b:f6:03:26:07:e1:b7:c8:fc:5c:da:26:c3:a5:
cb:31:9d:ab:a0:87:ee:71:fb:7e:1f:f4:55:87:7b:
57:b4:4f:97:1d:16:50:80:23:9b:c7:12:23:33:64:
da:4b:de:99:ba:4f:9d:b9:e3:8d:63:13:34:6e:26:
89:c3:0b:6d:a8:a6:bc:29:76:03:c8:73:a4:1a:c6:
a6:3d:24:18:1e:a5:d8:ee:db:cc:ac:1f:e7:5d:b5:
75:63:5c:4a:6d:97:65:97:6f:cd:27:e9:86:c2:5e:
a7:21:27:4c:a7:03:a4:d5:43:15:d7:54:26:16:5c:
9a:ff:03:f6:78:33:89:ad:6b:df:61:94:cc:2a:13:
eb:73:01:6a:ec:72:8d:6d:4e:b9:5f:e0:f7:df:2f:
dd:14:16:fc:50:fa:d2:c4:01:26:72:63:5f:f5:4c:
c5:1e:55:03:25:24:9f:4e:0d:bd:6b:d3:97:85:90:
a1:60:37:6f:7c:2c:e7:c6:63:ef:17:f0:15:f3:fa:
02:bc:62:10:86:53:dd:aa:69:a3:8c:dc:a8:ae:dd:
c5:70:de:0f:d9:d3:0b:62:c7:91:44:b3:68:09:58:
19:c7:5f:a6:44:b8:50:29:b0:8f:d7:bc:1a:89:a5:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D0:C4:2E:50:6D:B4:35:38:FC:90:27:9A:36:19:CA:53:E2:4F:36
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d3:2d:88:30:c0:8a:6c:21:53:91:16:a7:52:6f:e5:05:bf:
c4:35:61:e1:e5:69:0a:a5:6a:16:a5:98:a9:7e:77:25:6f:7a:
04:b5:f1:5f:1e:a5:11:58:21:c1:36:bb:a7:dc:74:08:8b:5b:
22:bb:39:50:99:43:9f:6e:84:16:e0:23:bc:5a:7b:50:2f:56:
e2:20:97:60:0a:53:d9:f2:bf:e0:b5:02:06:c2:eb:2b:3a:47:
11:08:96:21:70:e6:bf:c9:d5:a4:51:e2:90:dc:ec:ad:e3:46:
b6:6b:8c:f2:51:61:5a:93:4a:fb:93:b4:3e:25:50:d9:d7:7e:
25:c6:24:33:01:bf:db:37:a9:e2:49:f3:85:bf:dd:5c:86:04:
5e:7c:6e:d1:92:bb:57:3d:d2:67:a7:4e:45:6e:f6:40:34:4c:
2f:bb:c5:44:f9:2a:f6:20:6f:f6:f7:a7:af:b2:73:80:a4:ba:
d9:7b:74:ad:e5:8c:a7:50:1d:ae:68:59:9c:58:d4:6a:02:a9:
8e:ae:38:70:91:b1:7d:46:ae:a0:04:b4:fa:2f:83:c8:69:52:
7d:79:95:b5:19:49:aa:34:d5:3c:ec:01:7c:63:f6:8b:3c:9a:
fe:72:69:32:a9:3f:2e:95:2c:96:f6:72:6d:78:c1:93:01:ab:
c1:2f:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:21 2025 by rpki-client