Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: IwdmN1bQi2jrnuBBb/jTsYWRe98qtJBw/amf2kSAroI=
Subject key identifier: 72:F7:2E:FF:7B:D7:18:62:DE:0D:E4:4D:F9:2F:9D:74:29:49:73:02
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 0198D404CF545A12FCED25FF4842F0BA5843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0E77
Signing time: Fri 22 Aug 2025 23:02:21 +0000
Manifest this update: Fri 22 Aug 2025 23:02:21 +0000
Manifest next update: Sat 23 Aug 2025 23:02:21 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: jeFCimEi9OS3BEFfCfRSMqWctDLr3aXFd5IKBKmpu8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:cf:54:5a:12:fc:ed:25:ff:48:42:f0:ba:58:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Aug 22 23:02:21 2025 GMT
Not After : Aug 23 23:02:21 2025 GMT
Subject: CN=72f72eff7bd71862de0de44df92f9d7429497302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:2a:5a:9c:9e:51:94:46:ba:59:b9:55:8f:
b0:0d:8d:69:a7:12:e4:fd:e9:49:c7:a3:05:31:ca:
2e:0f:0f:d4:77:cf:83:05:f0:42:a5:8e:0e:fa:f4:
fb:09:22:8a:68:24:99:6e:4d:df:fb:18:ff:9a:29:
db:90:53:f8:52:9c:94:09:27:71:ca:71:0d:00:50:
60:88:88:fc:64:99:42:c8:56:18:c6:be:e4:4d:8a:
4f:8f:96:7f:5c:dc:61:ff:12:bc:1d:21:c1:05:83:
82:1c:2b:af:79:1b:d5:07:4a:ae:65:f3:17:ec:5b:
93:0a:eb:d4:13:96:73:66:32:22:25:19:89:10:ff:
de:13:03:53:19:78:64:b5:c3:62:a1:9d:58:cf:d0:
00:b3:20:ea:84:63:a3:ed:68:d6:eb:ed:c8:4a:3c:
d7:76:a5:02:d3:a1:1c:26:85:cd:95:b9:55:be:55:
6b:7d:b4:c8:6c:3a:d4:08:71:6c:b8:b7:17:42:b6:
60:91:ea:6c:05:05:ff:11:4e:1b:cf:00:48:90:da:
79:09:30:68:27:1c:ce:ae:b9:cf:39:7f:13:16:2f:
49:04:40:ac:b4:b0:7f:64:c5:3d:7f:27:df:4f:e6:
69:dd:47:42:48:74:ab:e0:93:d7:44:30:4e:f9:50:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:2E:FF:7B:D7:18:62:DE:0D:E4:4D:F9:2F:9D:74:29:49:73:02
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1d:0c:f3:66:80:82:66:37:1b:93:b6:46:76:12:c8:5f:4a:
54:d4:cd:19:81:1a:55:15:a9:19:e5:c5:23:6f:c9:57:9f:4a:
65:ac:43:df:d8:2c:1a:5e:be:92:9c:1d:67:3b:6c:85:f8:62:
8b:14:3a:63:85:ab:16:33:b7:67:bc:19:03:d9:f3:42:b1:d1:
fa:71:4c:e1:27:38:bb:20:df:71:0a:93:95:5e:89:34:46:1b:
35:10:0a:76:03:c9:98:41:98:0b:56:77:17:a8:57:03:35:3a:
4c:e2:15:2f:2b:b0:64:5c:0e:ba:5c:80:26:7a:3b:3d:6e:e3:
1b:56:ea:ba:ea:df:39:ed:2d:ff:a6:38:a2:74:3c:f1:34:30:
ff:47:cb:ee:95:dd:3d:42:20:67:1c:5a:dd:fe:af:b6:ab:e9:
fd:b9:86:41:36:18:ac:47:65:07:93:60:14:3d:29:08:08:1d:
a5:cb:d9:59:8b:7e:f4:64:d4:43:41:c7:92:bc:e4:48:63:37:
92:33:ea:63:c1:c2:a4:65:f3:3e:2a:cd:27:42:22:94:0d:67:
d0:90:8e:9f:6a:18:bd:28:73:aa:0b:71:f3:e6:57:d5:44:fe:
84:77:4b:d7:d2:f3:25:02:15:3c:34:db:87:6a:03:41:43:42:
2a:6c:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:03 2025 by rpki-client