Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: D1u6gI6i9weo1YQiB32BFpe6ebf3fhR5EtToLdE2Tr0=
Subject key identifier: ED:8C:42:1C:0B:66:7E:C2:53:1E:3E:43:11:C6:BA:69:DC:B0:90:33
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 0198D4DFD102F86028DCBCFED18DC95F6DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 062C
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: AyCykuGeDjV2a2wQijVvbnY+GFU1j4Kg4mY7M5+UJes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d1:02:f8:60:28:dc:bc:fe:d1:8d:c9:5f:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=ed8c421c0b667ec2531e3e4311c6ba69dcb09033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:03:52:60:4e:63:bc:fd:4a:96:ec:82:a8:
4d:34:8f:d8:a9:8b:65:90:44:5f:53:f1:b6:d3:bd:
9c:bb:0f:83:ab:f1:da:c6:c0:3d:08:42:0d:68:2a:
07:c9:ef:e0:92:99:ef:33:75:1b:2c:23:cf:8b:f9:
35:e3:9b:65:62:10:6b:86:c6:ab:2e:fe:ac:da:9f:
87:93:1f:8f:39:19:7b:bf:10:2d:a6:1a:5d:91:2d:
b6:a8:29:fb:b9:76:33:84:94:1c:ed:c1:ab:9f:ef:
1a:5e:d1:d9:d6:05:3f:25:2e:14:e1:45:6b:48:c5:
32:28:c7:35:34:af:ef:56:a3:32:fe:6c:c4:43:99:
37:59:6b:1b:47:65:50:a2:4a:58:5a:1d:4a:0f:33:
e8:60:b3:ae:f5:47:f0:4d:70:03:72:f9:52:c8:5e:
44:f7:d6:ba:03:df:23:15:b9:66:98:dc:e9:23:11:
e4:c4:dd:2f:c2:2b:76:fd:ce:a0:19:f4:80:6f:ff:
d4:1c:c8:8c:2b:8e:5f:11:91:c2:b0:d1:cf:d3:04:
09:e0:01:20:b4:77:c7:19:9a:13:2d:92:8d:72:00:
9f:31:ec:37:f8:df:e2:12:6e:79:85:8a:bf:fd:81:
6a:b5:6a:fa:ef:0a:e5:0d:84:3b:00:19:c0:45:f1:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:42:1C:0B:66:7E:C2:53:1E:3E:43:11:C6:BA:69:DC:B0:90:33
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:58:cf:bb:15:4f:9c:7e:f3:61:a1:cb:80:be:ec:09:af:
6a:5c:8a:15:5d:d1:ce:2c:69:8f:c0:77:d6:a7:87:3b:c8:ca:
d4:21:1a:5d:2f:9b:5d:75:46:ce:fe:90:ec:64:76:7e:aa:54:
af:55:ab:ed:9b:4d:75:90:c5:94:85:ab:c7:24:ad:bb:e1:22:
a8:eb:bc:d8:91:3c:8b:70:7d:ea:3d:cf:91:e3:62:d8:08:11:
a3:8f:96:c0:9d:f3:9a:c6:41:8a:95:c4:11:bd:d8:02:18:c9:
28:56:5f:7d:1e:9f:c5:6c:95:9b:17:62:ed:a4:e3:02:ce:72:
e9:91:a6:4b:75:58:71:ed:9c:21:8a:30:2d:f5:17:a3:08:a7:
77:99:3c:c8:55:87:ad:56:88:86:a3:58:52:2f:96:58:48:7b:
c3:5a:f4:af:8e:73:82:09:80:3c:08:e4:e6:00:61:e0:d6:2f:
64:bb:e1:e1:5c:6f:44:e9:32:44:ef:1f:3e:3c:e8:08:79:4d:
d7:26:74:7e:c4:76:19:85:7e:85:c4:df:ea:f1:7e:03:e7:ca:
c9:df:0c:b5:b0:19:71:fe:ba:45:06:36:6c:55:0d:02:21:13:
86:86:5c:86:4d:a8:12:ee:99:4d:6f:ce:13:4a:5c:01:2c:59:
96:0d:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:59 2025 by rpki-client