Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: gEBgXaq/IohHdt9gDeapP+vKRDXdIlCgn0rosuWIbyo=
Subject key identifier: C9:0B:A5:B6:BE:2A:A2:DF:25:BA:1B:B6:8E:C1:A1:DA:05:CF:D0:DD
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 0198D65FEF4729F348DA0296D4226C7AA557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0D07
Signing time: Sat 23 Aug 2025 10:01:07 +0000
Manifest this update: Sat 23 Aug 2025 10:01:07 +0000
Manifest next update: Sun 24 Aug 2025 10:01:07 +0000
Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=)
2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=)
3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: Py8sVBR5GD7NdEY3Q09UtnNy/G7f1yRHz+P9ChjPWKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ef:47:29:f3:48:da:02:96:d4:22:6c:7a:a5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Aug 23 10:01:07 2025 GMT
Not After : Aug 24 10:01:07 2025 GMT
Subject: CN=c90ba5b6be2aa2df25ba1bb68ec1a1da05cfd0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:ad:75:e9:61:f4:3d:ff:5c:2f:6d:f7:35:
d7:53:65:75:20:e7:d6:55:9b:6b:1e:a3:c1:e1:49:
c3:c7:46:2d:72:40:0c:25:99:44:1c:5d:69:a5:6a:
7b:45:8f:33:54:89:cb:15:b1:2c:7f:8d:1a:cd:8d:
a0:f2:f4:0c:b8:fd:4e:45:21:1d:ff:c7:cd:b3:ea:
e0:5d:97:87:e2:79:62:a7:a0:61:f5:f3:b0:79:eb:
d3:03:1e:52:d3:e5:71:34:23:26:99:22:53:e6:e1:
31:c5:60:8c:f2:95:31:6f:86:2d:a9:30:18:77:29:
2b:cf:eb:e5:8b:26:22:33:8f:08:0b:fa:2e:cf:39:
94:80:41:31:b8:b9:b8:cc:a8:58:f0:10:c0:86:71:
55:2c:fa:66:81:6a:22:c7:98:94:0e:35:be:49:f4:
23:6c:29:50:32:89:e3:82:fd:39:f7:8e:b4:ea:6c:
53:b2:aa:55:d0:63:f3:0a:99:9a:15:e3:f2:cf:1e:
87:37:fc:21:94:c3:0b:80:db:16:39:27:79:26:43:
bc:97:30:ca:38:24:58:c8:f6:ff:49:bb:03:62:78:
bc:33:dd:36:2e:e9:d0:05:73:33:41:27:da:06:d0:
16:e6:10:79:af:24:f7:0f:7b:e7:f2:5c:b4:e3:b6:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:A5:B6:BE:2A:A2:DF:25:BA:1B:B6:8E:C1:A1:DA:05:CF:D0:DD
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b6:3c:f1:e3:fe:ab:98:38:1a:66:85:0a:c4:4f:6c:0a:81:
97:bf:7d:70:21:79:62:c1:a4:e2:d5:09:15:ae:b9:d7:37:b4:
c8:1b:fc:de:5d:f8:dd:dd:ac:f4:c3:91:ce:69:b4:7c:c2:bf:
ad:f1:37:2e:d3:66:f1:a6:93:c3:39:cf:d1:3c:ca:d4:69:8a:
4e:bb:3f:f2:33:84:ea:36:fb:ce:2a:b0:97:e0:24:90:a2:51:
68:42:5d:3e:22:73:4d:a3:c5:66:2e:df:88:2e:65:82:29:02:
f5:ab:62:9e:96:e3:68:86:25:a8:60:2c:33:6f:c9:92:9a:40:
dc:0f:c9:f3:ae:25:42:5b:36:6c:65:21:c1:39:29:d1:6c:b6:
4a:e1:bd:c9:fb:a7:3e:e0:f5:72:1f:9d:b9:33:6a:e1:f4:80:
1f:1c:a6:61:97:c0:21:93:22:81:e6:2c:4e:d2:9b:4a:1c:1b:
ee:de:5d:29:a0:ec:86:9a:d1:9a:17:b2:ef:f0:a2:5f:22:5b:
4c:2f:a8:80:99:6f:64:4b:1a:db:47:48:79:6c:a7:87:15:2d:
ec:f3:82:34:de:62:dd:d9:ee:a8:c5:92:14:af:3f:58:5c:a4:
b2:59:ca:96:df:0d:c7:55:7f:3f:6f:db:9d:dc:9d:79:c7:1b:
d4:c5:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:22:32 2025 by rpki-client