Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
File: U3h815RuENiGRqx53lfMbsWeQTI.mft (raw, json)
Hash identifier: 0/fFHSLTLhXFl0dOCeCOuXwEc/bkRL7T3Qlnvaf9eMQ=
Subject key identifier: 29:80:CE:6C:DD:5B:1D:8A:C2:04:60:1C:3C:5A:8A:78:9A:43:B3:25
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial: 0199C569DE5E3C7BE5E2AB3F712B3EAEBF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
Manifest number: 1374
Signing time: Wed 08 Oct 2025 20:01:13 +0000
Manifest this update: Wed 08 Oct 2025 20:01:13 +0000
Manifest next update: Thu 09 Oct 2025 20:01:13 +0000
Files and hashes: 1: Gb_tS4tDYUhq7ZFBBu6bXOHKxSQ.roa (hash: j+ql1A+cPykDsn/U+bRsvn2rorjyFgGlp+mF0Qt3tRQ=)
2: U3h815RuENiGRqx53lfMbsWeQTI.crl (hash: aVrtqXWzdUeHssrfApwpEKGaezj4GlrEoaiBKIOC29U=)
3: aDocXw9aAWTC2tonweXjSXZoNMs.roa (hash: M6NywDoKFY4uKrDQ3WCmTb7f59Ph9hBt6rzgbYZvGvU=)
4: dqRRF9NrCy7kpjHElym2fRaWWpg.roa (hash: yVbcvUrGd5qHEf8kKaXL1t+AGyhms8ILF9sbmeot86I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:de:5e:3c:7b:e5:e2:ab:3f:71:2b:3e:ae:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Validity
Not Before: Oct 8 20:01:13 2025 GMT
Not After : Oct 9 20:01:13 2025 GMT
Subject: CN=2980ce6cdd5b1d8ac204601c3c5a8a789a43b325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:e9:fe:94:e1:eb:52:a4:5d:f5:ae:90:f7:
31:2d:3f:5a:f2:9c:29:ef:8a:cc:7c:3e:1a:67:70:
b9:4f:ec:46:fc:b3:f4:2a:3e:aa:d5:4d:e8:a3:02:
dc:3b:28:4b:e5:59:9f:f6:84:f9:61:db:12:a0:00:
7e:70:9b:20:c6:0c:03:df:f3:21:96:2b:5e:07:58:
b8:de:aa:87:1b:cf:6f:1a:a8:22:a1:af:15:ea:2a:
95:b0:72:49:b4:48:09:0e:ac:a7:69:48:13:76:78:
28:1d:ac:3a:be:23:52:16:31:3a:35:c6:40:65:23:
73:29:38:ed:6f:1e:b8:3e:1a:28:bb:6a:11:f0:02:
49:51:c4:7a:2e:be:b0:8a:c8:69:af:f9:cf:a8:7f:
3f:6a:7b:a5:d3:59:42:1b:3c:92:be:9b:dd:45:99:
b1:14:56:8c:0d:5f:5f:35:2a:1e:89:e0:81:0f:e9:
c2:e5:22:1a:a1:9f:53:44:23:f6:f3:26:57:d9:24:
11:61:82:3a:44:74:76:d5:a1:b9:85:7b:d2:0f:65:
09:96:6a:79:b0:f0:89:1c:f7:c9:2e:79:c3:85:ef:
f5:d3:96:d3:bb:79:d9:93:0a:33:d0:67:d2:1f:73:
fb:22:e9:9b:58:21:0c:90:c8:52:d3:93:1c:65:6a:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:CE:6C:DD:5B:1D:8A:C2:04:60:1C:3C:5A:8A:78:9A:43:B3:25
X509v3 Authority Key Identifier:
keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:59:ac:da:2d:f4:98:af:9d:8e:62:78:5e:37:81:75:ed:b4:
11:a7:08:9c:ef:1e:e0:9e:a5:74:f8:0f:99:d0:47:76:13:e4:
90:3f:09:28:7f:28:f3:fb:85:77:98:05:b1:f2:0e:68:bb:49:
5a:f6:07:c7:30:52:da:bf:48:7e:78:1d:14:5c:32:72:b7:ff:
ab:c6:7d:c8:72:55:df:93:81:49:11:75:7b:51:c5:69:73:48:
e4:6b:3a:db:d8:1d:1d:2d:e5:be:17:ca:81:42:9f:c6:1a:32:
90:fb:21:10:d1:24:aa:23:82:8a:12:85:a2:d5:9c:4c:90:e3:
59:de:43:67:aa:a8:b8:1f:a2:99:c5:2b:27:a9:03:32:ac:4c:
70:14:0f:c4:91:51:de:86:ca:4e:62:6c:f0:25:67:4e:f5:93:
b4:55:31:2a:15:d3:ec:e3:d7:81:29:86:b0:66:cc:03:7c:20:
3c:b4:dd:4e:97:6b:44:d1:70:92:58:c0:96:6b:77:f8:8d:43:
18:9e:11:81:88:c7:c6:bd:74:cd:6a:95:24:cc:c1:b2:3f:d4:
df:1a:ed:26:97:ba:54:e6:29:40:46:8e:97:03:38:33:2d:09:
cd:7a:79:83:64:e0:36:3e:3b:4d:61:fa:c1:29:50:f2:4c:2d:
af:90:e1:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnFad5ePHvl4qs/cSs+rr8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzg3Y2Q3OTQ2ZTEwZDg4NjQ2YWM3OWRlNTdjYzZlYzU5
ZTQxMzIwHhcNMjUxMDA4MjAwMTEzWhcNMjUxMDA5MjAwMTEzWjAzMTEwLwYDVQQD
EygyOTgwY2U2Y2RkNWIxZDhhYzIwNDYwMWMzYzVhOGE3ODlhNDNiMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ezp/pTh61KkXfWukPcxLT9a8pwp
74rMfD4aZ3C5T+xG/LP0Kj6q1U3oowLcOyhL5Vmf9oT5YdsSoAB+cJsgxgwD3/Mh
liteB1i43qqHG89vGqgioa8V6iqVsHJJtEgJDqynaUgTdngoHaw6viNSFjE6NcZA
ZSNzKTjtbx64Phoou2oR8AJJUcR6Lr6wishpr/nPqH8/anul01lCGzySvpvdRZmx
FFaMDV9fNSoeieCBD+nC5SIaoZ9TRCP28yZX2SQRYYI6RHR21aG5hXvSD2UJlmp5
sPCJHPfJLnnDhe/105bTu3nZkwoz0GfSH3P7IumbWCEMkMhS05McZWr3oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmAzmzdWx2KwgRgHDxainiaQ7MlMB8GA1UdIwQY
MBaAFFN4fNeUbhDYhkased5XzG7FnkEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAt
NTIzZmQ4NmEwN2M3LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAtNTIzZmQ4NmEwN2M3
LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8Fms2i30
mK+djmJ4XjeBde20EacInO8e4J6ldPgPmdBHdhPkkD8JKH8o8/uFd5gFsfIOaLtJ
WvYHxzBS2r9IfngdFFwycrf/q8Z9yHJV35OBSRF1e1HFaXNI5Gs629gdHS3lvhfK
gUKfxhoykPshENEkqiOCihKFotWcTJDjWd5DZ6qouB+imcUrJ6kDMqxMcBQPxJFR
3obKTmJs8CVnTvWTtFUxKhXT7OPXgSmGsGbMA3wgPLTdTpdrRNFwkljAlmt3+I1D
GJ4RgYjHxr10zWqVJMzBsj/U3xrtJpe6VOYpQEaOlwM4My0JzXp5g2TgNj47TWH6
wSlQ8kwtr5DhGg==
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:36 2025 by rpki-client