Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: 5v5WbxO81fnQxcLQU1BjMyDn3WMkm6pQ953VrgSus+U=
Subject key identifier: FE:35:0E:5A:ED:67:DA:03:54:6B:66:03:91:CD:BE:9E:EA:E2:A7:E7
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 0198D5160D9A6F7079796FC06BC58B4FE2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 04:00:48 +0000
Manifest this update: Sat 23 Aug 2025 04:00:48 +0000
Manifest next update: Sun 24 Aug 2025 04:00:48 +0000
Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=)
2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: pzxLX9x/ah8oAC7VCNGNui5nWKXYC0VA8q7t4qATIbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0d:9a:6f:70:79:79:6f:c0:6b:c5:8b:4f:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Aug 23 04:00:48 2025 GMT
Not After : Aug 24 04:00:48 2025 GMT
Subject: CN=fe350e5aed67da03546b660391cdbe9eeae2a7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:34:e5:ab:9b:85:ec:dc:de:f3:8a:0e:18:
2a:ac:b6:71:f0:2b:0e:cd:ab:3d:5f:24:83:ae:1e:
d4:e2:8f:08:7d:11:44:bc:5f:1b:b9:9b:8b:57:c6:
6e:da:b2:55:e6:6e:28:fa:86:dc:8a:ee:40:03:64:
89:ea:df:81:9d:18:f7:76:74:c8:47:c7:2b:9f:15:
7c:3f:b6:be:c7:cc:0e:c6:fa:f9:99:b5:be:c3:84:
d7:d9:c3:da:27:02:18:61:5a:a8:60:66:5e:0a:6e:
61:7e:e5:69:23:2e:54:bc:20:17:83:0f:eb:0b:75:
e4:df:f9:5e:cb:ac:09:43:e4:6b:4e:04:76:c5:0d:
17:09:70:53:f2:c1:15:c5:2d:55:d6:05:12:5d:7f:
bb:b7:62:b1:f5:f6:3f:ac:55:05:fa:69:95:eb:f7:
46:12:e7:db:40:ca:98:5c:ed:ad:8d:41:21:06:d1:
84:e0:7a:b8:0b:2c:e0:84:b3:91:0f:08:e5:38:8c:
83:b7:00:d5:d6:92:25:71:8e:7b:06:15:a0:cd:da:
fd:c2:03:33:e7:36:2f:5e:72:14:1f:a2:3c:56:55:
8b:ca:e7:00:a7:2c:77:3a:cf:c9:e3:cf:08:04:7c:
32:01:c4:d4:0c:91:21:46:a0:e0:6d:25:e3:7a:23:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:0E:5A:ED:67:DA:03:54:6B:66:03:91:CD:BE:9E:EA:E2:A7:E7
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7e:3c:3e:a6:fd:af:b8:5b:06:5f:71:d2:48:9b:19:bf:86:
c1:4d:e0:3b:35:21:e2:80:d6:40:dd:50:69:b8:b9:e8:31:db:
bd:c0:bf:34:07:60:a6:51:9d:11:59:81:34:5b:61:d6:73:c5:
54:fe:b5:60:6a:c3:b5:55:b0:7d:83:01:bd:e7:73:ce:cf:79:
19:cb:cb:a3:fc:72:4d:6f:04:44:19:a5:7e:30:d9:9d:a6:ce:
fb:3b:7d:17:96:ba:fa:b0:e3:ec:e8:c7:2b:21:4d:d3:f9:4f:
cb:e0:96:0f:e6:fe:15:e2:8a:9e:75:81:2f:e9:2b:d2:b5:f0:
68:60:c0:5a:c5:fe:28:bf:80:4f:48:ad:0e:60:f7:67:b4:a4:
db:a0:4b:52:ac:27:1f:01:92:79:a5:e9:d5:1e:47:fb:89:40:
90:9d:fb:c6:cf:36:c2:a4:9b:c5:ec:f8:03:46:11:41:5b:5b:
31:8d:d7:97:43:90:a3:7c:86:bf:f3:1b:99:1a:54:34:ff:69:
a1:4a:34:96:ab:26:18:31:c9:80:ad:b8:d3:7d:f6:aa:be:21:
c4:86:0c:de:e3:a6:f5:7f:ae:3f:1c:92:b0:9e:56:f2:13:4d:
02:88:60:af:76:f9:ec:d8:f6:4f:ae:f7:1f:cb:91:a5:ad:92:
ee:29:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:06 2025 by rpki-client