Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File: Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier: HIbxYbIlZgLq92APxMpS1+UHGFI5MdWMJEjZmKzU9ZY=
Subject key identifier: B6:83:16:44:0F:E2:C5:A6:ED:95:21:E2:73:18:1E:DF:ED:78:01:D2
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 019A70DC70FE421C0E32FDA1F9B500428401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 03:01:26 +0000
Manifest this update: Tue 11 Nov 2025 03:01:26 +0000
Manifest next update: Wed 12 Nov 2025 03:01:26 +0000
Files and hashes: 1: 23ykqlSoxhCVfaY9IS92DsNyWBE.roa (hash: EcOQRm/PU+EVIJkGyqpMDHmRcGo4Swnj7UgNzWEeajc=)
2: Ukpz258Pu7bNWf8NOO8xTSDm6ac.roa (hash: N3tcSeOhnfUpzG6xjoUCZ9+KDhbzHATSPGgHhTJK3Ng=)
3: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: 4W8tVv71vVg+O7tYNIiho8fWmZF1A+/OmWb7Ewhe0TI=)
4: eWric6r-5T_Rp4hV5FAy7I4IoJY.roa (hash: NkPTqBN+TTAOu9SJvsMG3iRYoMiT60DbDNclBXlGKDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:70:fe:42:1c:0e:32:fd:a1:f9:b5:00:42:84:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Nov 11 03:01:26 2025 GMT
Not After : Nov 12 03:01:26 2025 GMT
Subject: CN=b68316440fe2c5a6ed9521e273181edfed7801d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:8d:41:52:bc:1d:17:3c:93:8b:fb:b0:aa:
65:df:18:f2:40:d5:6a:a1:37:ea:8a:4b:1c:e4:7a:
cb:98:e6:d9:ee:80:45:39:d5:f6:fd:d9:bd:3f:7c:
cb:d3:52:8c:94:a3:1f:6c:cd:28:e2:11:da:aa:c5:
92:5e:1b:f3:c0:6c:80:93:e4:6a:c6:61:a2:1f:b5:
9b:3c:49:60:43:c9:76:45:73:ad:2b:d4:e1:fc:a8:
e1:fb:74:4b:ab:7e:c9:a3:b6:9f:57:5a:85:f4:b0:
f2:89:57:da:4d:b8:99:95:e9:dc:82:cf:4b:05:39:
b6:f0:e6:ef:7d:cf:ac:b3:e9:43:4b:8c:58:c3:46:
a8:1d:97:a3:4a:47:6a:61:d7:ae:18:4d:63:b5:44:
b2:2e:c0:ce:b5:b9:99:bc:92:7d:f9:60:c3:cc:47:
32:7c:56:6e:d9:32:4e:e6:73:95:1c:f2:91:55:02:
ba:ba:62:38:b3:60:17:39:79:61:d2:a7:68:10:15:
d3:b1:94:a9:e2:ec:c9:fa:98:79:56:03:2d:81:25:
09:b3:27:a0:b3:7d:96:71:6e:da:f0:1b:12:2f:0a:
10:5c:4b:85:8d:09:48:9a:cd:8d:4b:49:a7:fb:e1:
ad:2c:62:b5:18:5d:34:98:0c:07:82:a1:54:14:93:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:16:44:0F:E2:C5:A6:ED:95:21:E2:73:18:1E:DF:ED:78:01:D2
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d9:fc:0d:e7:0c:1d:89:f4:43:87:05:32:6f:27:62:ce:65:
5c:4b:86:07:ca:12:23:82:dc:e6:a5:ad:44:ce:aa:75:4e:7f:
bf:a3:ee:36:ae:ff:a7:e8:c5:a7:e5:dd:7c:33:4a:9d:a8:13:
7f:b0:9c:5c:f5:2a:82:04:48:75:87:ba:d4:86:dd:7a:47:11:
e4:70:d4:57:63:89:50:22:b6:b6:9e:10:23:c9:15:66:af:0a:
05:5a:fe:5f:ee:94:57:b3:aa:fc:92:b8:3f:0c:71:8d:d4:3c:
1e:f5:c7:83:e2:cc:9c:bc:54:b4:9c:aa:d7:26:e4:be:11:9f:
de:56:7a:50:cb:31:ab:be:8e:79:ef:cb:74:30:c8:d3:33:31:
de:24:08:1a:bb:b5:f0:93:a8:1c:02:e5:06:ec:87:76:4e:3a:
00:72:62:de:c2:4c:c9:af:49:b6:be:d9:33:52:fa:71:19:aa:
b5:2e:16:6f:f5:0d:09:ae:92:bf:64:a2:d3:9f:3c:41:cd:b6:
e4:39:ef:62:be:48:13:14:fe:ea:a3:45:8f:b3:ab:80:34:f8:
bf:b3:3a:68:f4:e8:40:55:99:59:3a:6f:bd:78:b8:c7:bc:1c:
21:39:0c:57:f7:7a:d6:c8:53:00:33:ca:71:88:ba:db:4b:03:
69:49:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:24 2025 by rpki-client