Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: KOVwV0AQ1Fe3LB2fC6vZKRzMztSQGJ2q45LGJZhAqBQ=
Subject key identifier: 9B:B5:CE:47:E5:A7:83:95:D9:2D:7B:23:F9:47:28:91:11:EC:70:DE
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 0198D4A7B6F2F1B5D648CEFD3C8529FC4D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: he5gieLoINzRY9mRPrzTNHEP1nM7YFil1j/6nN8358k=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b6:f2:f1:b5:d6:48:ce:fd:3c:85:29:fc:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=9bb5ce47e5a78395d92d7b23f947289111ec70de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:c7:05:5e:0f:4e:7a:cd:fb:73:31:52:48:
27:2c:b8:d5:34:5a:54:f1:d6:82:4d:c8:66:1e:4d:
83:9f:41:bf:99:77:de:d8:94:27:0c:a0:40:a7:b7:
62:cf:7a:80:a0:bd:da:91:9e:f7:2e:40:63:24:17:
82:b8:de:9a:2c:bb:84:50:a5:d2:a2:1b:17:03:68:
a6:e2:ab:da:cd:46:12:e1:01:71:7a:43:86:ba:3b:
cc:7a:d2:98:a8:75:e2:98:af:7e:6e:e1:36:a1:b2:
80:bb:2e:7d:f1:a1:da:be:22:91:50:4a:d9:01:d1:
27:9b:da:c9:dd:7e:ab:4d:59:fa:ee:38:d6:b7:6d:
fc:8b:eb:d4:b4:c7:37:38:48:e4:ce:cc:ba:a1:62:
63:2d:67:77:ca:a4:6e:ef:a8:1c:4c:48:30:1d:58:
42:67:ab:a7:b4:2e:9f:56:2f:b7:82:55:b7:4b:3b:
ac:4d:5c:e5:91:2e:94:b6:0f:90:7e:88:9c:ec:48:
c5:60:31:8d:84:2b:2b:7a:fc:e4:c5:c3:ed:5c:3e:
1f:a5:59:0b:c6:72:1e:9c:dc:8a:97:ea:65:9b:c5:
6f:6a:4b:58:2a:a9:52:4f:76:da:b3:11:f4:c4:8e:
e7:56:a8:21:d9:d7:13:ba:eb:2a:cf:e9:c9:c0:d8:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:CE:47:E5:A7:83:95:D9:2D:7B:23:F9:47:28:91:11:EC:70:DE
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9c:15:9f:9b:74:53:f2:e2:4f:26:f9:cd:25:38:3d:a3:ff:
be:7f:9b:5a:3d:aa:4b:c2:ed:57:2a:66:30:ed:b0:ac:1e:0e:
3c:1f:49:49:36:94:7a:d6:3b:fe:61:50:6c:27:98:75:27:0a:
81:4e:32:50:3f:ec:52:3e:41:b4:fe:9b:d5:83:59:0f:94:1b:
d0:43:8b:6d:59:b2:d3:ed:af:03:33:ec:f2:11:84:db:a3:5d:
56:73:cb:2a:8f:b1:c5:48:8e:54:0a:65:7a:5c:3e:d2:d7:cf:
fe:af:05:ff:8b:ea:0c:ea:52:65:4c:29:ff:5a:a2:4c:7e:f7:
08:d4:c4:cf:c7:20:85:95:39:82:ea:d5:5f:af:85:54:0b:0b:
c7:09:d3:5e:03:21:ad:2a:bd:96:b6:40:5c:a9:9f:95:cf:a8:
00:17:7f:a9:83:6b:26:77:75:45:0f:4c:25:41:6e:42:1b:64:
0d:e8:6b:1c:2f:0f:0e:fb:82:84:b6:51:e4:7d:ab:96:19:64:
3f:df:45:d4:4b:55:e9:72:76:42:17:01:29:3d:e4:6d:de:22:
9d:f2:ec:67:c0:87:96:5c:e3:85:6a:4b:cf:2d:bc:ac:25:62:
69:80:b3:ec:e0:b6:1e:bc:c4:56:14:8a:98:6b:29:45:de:50:
17:f9:96:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:13 2025 by rpki-client