Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: e03URFr/y5ZQlMGhyn+y0iFUm9gWFXYU263vQUU4CW8=
Subject key identifier: EE:D6:97:3F:77:10:05:F3:7D:AD:6C:4F:30:68:AF:55:9C:4E:3B:83
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019A21ADF79B1EDFB414485E5637007EBEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 18:00:40 +0000
Manifest this update: Sun 26 Oct 2025 18:00:40 +0000
Manifest next update: Mon 27 Oct 2025 18:00:40 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: t3TsXr6RYQMni4MAjtmdJb6+KRPE/4bf/n2DryouPzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:f7:9b:1e:df:b4:14:48:5e:56:37:00:7e:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Oct 26 18:00:40 2025 GMT
Not After : Oct 27 18:00:40 2025 GMT
Subject: CN=eed6973f771005f37dad6c4f3068af559c4e3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:ec:ff:31:47:73:e4:d0:10:56:9c:fb:e9:
78:df:c3:87:62:f6:71:89:e1:b0:e0:07:13:d7:3d:
c0:bb:67:ed:68:e5:c5:24:e2:38:ae:59:a7:10:aa:
b2:74:b2:b2:43:0d:53:0b:31:06:79:31:e0:6d:8e:
3c:76:d1:97:47:92:df:23:e6:a4:19:b5:23:d6:34:
10:56:8a:ee:a5:c1:30:4c:59:57:c8:8c:01:85:55:
c6:6a:ab:19:8b:d2:53:0e:3d:b2:d9:14:f3:4d:ee:
4f:39:c4:6d:ea:1b:ac:8a:83:13:40:3d:94:f2:26:
79:87:9d:69:42:93:fa:d0:ad:ad:a3:3e:b7:2a:0e:
3e:34:f7:85:8c:97:b9:8c:94:76:1d:59:25:a6:21:
34:4d:a9:b6:d6:bc:c7:bc:68:9e:6c:00:02:1e:85:
f4:4b:85:ae:8a:e1:2d:a7:c0:f8:9e:ec:65:63:65:
85:9e:5e:45:65:27:5c:55:db:d8:4d:c9:1f:ca:af:
35:eb:6c:6e:39:6b:9f:76:c6:12:bb:45:03:65:ee:
35:ab:1e:83:e5:15:2b:dd:f4:c5:15:bf:f2:39:75:
40:61:3d:9e:83:00:4b:b0:81:d9:0d:da:bb:ef:bd:
92:0b:b6:83:0a:15:3b:3c:65:39:7b:60:9b:a5:b1:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:97:3F:77:10:05:F3:7D:AD:6C:4F:30:68:AF:55:9C:4E:3B:83
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:48:9d:9d:31:47:ce:66:4a:de:cc:16:6b:78:d1:7b:45:ed:
86:c1:eb:66:83:31:30:8b:be:f3:e8:f1:48:bc:74:73:3b:5d:
45:b3:63:1e:d0:a3:ec:0d:71:43:3f:1a:cf:19:a0:f7:09:12:
3a:45:0e:15:cf:8e:c8:ed:da:5b:8d:dd:21:e7:60:79:12:44:
df:09:a2:22:80:55:99:91:3b:2c:a7:1f:2e:06:31:10:0f:0f:
79:4a:43:32:99:af:0a:13:ee:9a:fc:6c:cb:42:73:e5:00:83:
9d:bd:b6:92:6d:3c:9d:a3:33:a2:6e:9d:f4:a1:c8:a3:0c:5c:
52:05:f7:93:05:9a:8a:0f:0c:ef:79:19:af:36:cc:92:cf:f9:
e4:a1:8b:65:f0:2b:92:8f:83:a4:c9:5b:49:74:80:9f:32:40:
2a:cc:c4:23:67:0f:a5:cc:3f:30:c8:84:eb:e9:82:7b:8a:34:
d2:b7:4d:bd:34:b2:eb:dc:76:e8:a9:b1:08:6b:7c:ed:a2:8c:
cf:26:9f:e2:b3:b8:fd:5b:2b:b3:1a:65:32:33:af:2d:2d:a7:
0a:e9:93:a0:f5:5b:a1:07:10:48:1d:a3:de:72:22:8e:6a:b6:
57:99:40:98:42:3b:36:79:83:79:67:cc:e6:51:bf:3b:eb:18:
d9:c5:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:19:42 2025 by rpki-client