Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: XkZlKAE4HGHaDBQrVQfH4+shgreen+k9nMUprc0JGkg=
Subject key identifier: 59:CA:14:94:8B:F3:D7:D2:C4:C3:68:A1:17:DE:F4:0C:01:BE:FE:1F
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 0197B6A25054DC17950BDF2D4191A08792BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 10B3
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: X0+Cjl3bHnq/Y578cRjuqZ+Wkgi9wAPkFNCFGFNndk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:50:54:dc:17:95:0b:df:2d:41:91:a0:87:92:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=59ca14948bf3d7d2c4c368a117def40c01befe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:84:1e:8c:53:a2:39:76:b2:a8:3d:96:2a:
d2:0b:e8:7a:49:ce:6a:7a:8d:50:e1:a9:37:e6:b4:
21:f2:6e:ed:fd:d3:9f:78:3e:0f:01:bb:2a:05:f3:
8f:42:66:97:ec:67:08:2b:8b:a0:71:0f:cd:f4:47:
63:35:3d:cb:74:4f:5d:ee:6a:7d:66:a6:4e:da:a7:
07:70:98:b9:05:ba:a0:1c:70:85:94:56:9b:29:17:
e6:16:62:c8:35:9c:aa:c7:4a:41:2f:33:86:72:d3:
7c:8b:de:69:ed:0e:fb:a1:01:e4:5d:22:ad:bf:f5:
04:7b:06:fe:d6:c8:66:bb:6e:a8:56:c3:ff:61:a3:
8a:6d:02:5d:a2:49:8e:1d:bd:5a:74:b1:75:98:76:
87:4f:87:db:71:97:e9:87:95:f7:04:a0:7d:91:5a:
32:87:0a:08:d9:75:24:7d:e3:b5:a4:ea:7c:2f:b7:
de:9e:00:c2:ad:75:82:3d:54:85:f7:0e:4b:c0:1f:
9c:95:6c:ec:5d:63:c0:73:82:0b:22:26:98:e9:a5:
fa:7b:fa:ae:2e:9f:6b:c3:f9:0e:24:d6:bb:ea:d3:
2e:dc:eb:a9:65:31:48:e4:1a:a0:af:ac:de:28:19:
8d:b4:88:18:e1:99:1c:9e:21:03:f3:22:16:f3:3f:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CA:14:94:8B:F3:D7:D2:C4:C3:68:A1:17:DE:F4:0C:01:BE:FE:1F
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d2:ad:c1:6b:56:2b:9c:39:ff:05:48:4d:56:6a:fd:6d:d4:
61:59:90:46:4a:50:a6:e1:43:cf:25:c1:39:4a:0f:b4:67:a9:
24:d6:2a:cf:ec:51:8b:be:00:2d:7f:0c:f7:72:75:82:37:12:
8c:b6:8e:2d:05:77:fc:8d:7d:11:53:bd:35:2d:de:62:b7:3c:
9a:90:53:e8:f2:c1:b8:77:e3:2c:31:52:64:46:62:ab:76:47:
09:95:1f:b6:3d:05:7d:25:47:a5:8d:98:dc:2e:64:ec:9a:7a:
5b:8f:bd:aa:5d:f3:ab:f3:01:cd:f3:e9:46:e0:3d:f1:1a:5d:
02:20:74:d8:93:8e:ff:37:7f:a5:68:a5:d6:e6:bc:5a:1b:7e:
de:38:0e:c3:e3:4a:fe:d8:16:ac:66:ae:77:6c:30:1e:67:66:
23:01:3f:a9:02:d8:86:0d:7b:2d:3f:0b:a7:87:3a:d7:fb:20:
74:f8:60:e6:47:5f:ee:39:54:7a:db:de:9f:78:34:dc:cf:88:
80:d0:9f:bb:a5:99:f7:9e:c6:a5:90:d5:ba:a7:17:36:3e:56:
5f:08:bc:b8:b3:9f:ba:c5:ac:47:e8:c3:6c:54:35:85:a6:dc:
97:47:f4:10:d5:e5:18:c9:5b:77:cd:0d:39:93:39:6b:4e:07:
f0:35:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:50 2025 by rpki-client