Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
File: U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json)
Hash identifier: ak3NHLgVWgVBKrhVSIAT3CyhI/8e1LKa3oMneLV0M6Q=
Subject key identifier: 5D:4C:E6:20:8D:4B:EF:22:5E:A7:83:10:66:58:9B:F0:DC:72:2F:3A
Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Certificate issuer: /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Certificate serial: 0198D5F19277A56ECCD6E48479F5D3248D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
Manifest number: 050B
Signing time: Sat 23 Aug 2025 08:00:35 +0000
Manifest this update: Sat 23 Aug 2025 08:00:35 +0000
Manifest next update: Sun 24 Aug 2025 08:00:35 +0000
Files and hashes: 1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: mWb+MNjRH+brotTj2g2dIQhKe3a5E4bml9ZmNgUYF6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:92:77:a5:6e:cc:d6:e4:84:79:f5:d3:24:8d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Validity
Not Before: Aug 23 08:00:35 2025 GMT
Not After : Aug 24 08:00:35 2025 GMT
Subject: CN=5d4ce6208d4bef225ea7831066589bf0dc722f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:5b:ac:8b:57:9f:33:fa:2a:9c:66:75:1f:
ad:ce:ba:a8:14:15:71:b7:ed:37:6c:b4:0d:0a:e1:
b6:1f:82:7f:06:92:bd:43:78:84:b2:5d:39:52:67:
ac:74:e1:d0:39:76:45:a6:47:cd:e5:1f:e1:24:34:
de:b1:b6:78:80:d5:23:52:fc:cf:10:db:8c:e7:50:
27:02:83:29:b8:92:76:40:d2:f8:73:6f:52:f1:17:
04:bd:fe:58:2e:65:46:6e:1a:c3:44:25:d2:13:a7:
9c:bb:2f:9e:04:71:0c:ad:14:b5:73:94:47:c9:20:
c8:d3:2e:e2:d4:c2:a7:9f:7b:59:a4:d4:47:40:37:
45:60:fd:cb:55:7a:b4:6c:4c:7e:c2:74:26:04:4b:
eb:23:e4:a8:5b:af:a4:62:b8:6e:9a:7f:8c:9e:72:
a5:8c:bf:33:2e:18:c0:0b:01:8a:33:de:74:de:c5:
10:49:1b:9b:00:da:6a:35:b8:db:4a:7d:d5:70:50:
24:9d:1f:c3:8e:3e:76:6b:35:6e:e5:62:40:2c:a7:
95:97:19:f2:39:4f:3c:c5:62:a5:41:cc:f0:1e:22:
e4:82:eb:54:87:24:4a:f9:c7:ac:1f:44:fe:b5:22:
41:de:70:84:44:85:8f:18:bf:d5:a3:da:04:1f:59:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4C:E6:20:8D:4B:EF:22:5E:A7:83:10:66:58:9B:F0:DC:72:2F:3A
X509v3 Authority Key Identifier:
keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a1:15:f7:07:19:e7:97:04:a4:4e:c7:2b:d3:2f:97:ea:69:
66:3d:83:47:7a:15:24:db:05:9d:86:10:2e:12:51:65:bc:e6:
d8:2f:28:59:d6:af:cf:fb:5a:13:c5:aa:31:28:78:d3:4b:ec:
1a:f6:9a:9f:62:60:ca:5b:5d:52:c8:f1:6f:50:00:3c:da:0c:
19:e3:3b:c5:55:97:33:11:b1:b6:1e:88:77:41:59:bd:d5:d2:
57:8e:6d:63:3b:4a:3b:9b:fa:0a:28:53:0e:fd:ac:e6:0f:34:
de:4d:b2:5e:7c:86:d2:fd:46:47:1a:c2:00:24:cb:b4:a4:32:
52:71:0b:d5:36:b9:d7:2d:36:cd:23:62:4c:ae:fc:bb:2c:3e:
36:eb:1f:9a:25:99:2c:b4:40:40:0c:4e:90:c1:d3:62:df:7d:
af:59:b9:20:8c:0e:f0:e9:21:1e:9e:6f:58:a9:87:c3:9b:82:
e0:3e:be:b9:a3:5a:55:fb:3d:eb:b3:16:a0:da:28:37:fe:b5:
e4:5f:e9:53:79:b6:df:66:bf:b5:26:b9:a1:c6:fe:e9:6a:9a:
07:b1:d9:6a:ca:d6:cb:22:08:15:3b:02:33:fb:cf:54:ec:30:
0f:bc:41:97:21:29:e1:6b:ff:9c:2d:f9:fa:94:5e:9a:27:48:
ae:03:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:13 2025 by rpki-client