Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: ssyu+/N+VglbesgbVnAwuzioI/xqN3XwAT25wt33UL4=
Subject key identifier: 80:30:7E:A1:F4:E7:00:09:85:65:AB:C1:8D:39:A2:1F:6C:36:4D:1A
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019A096E95E78FD71168B91EB038675CD86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 01C7
Signing time: Wed 22 Oct 2025 01:00:33 +0000
Manifest this update: Wed 22 Oct 2025 01:00:33 +0000
Manifest next update: Thu 23 Oct 2025 01:00:33 +0000
Files and hashes: 1: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: RArNjMPLX1EI3QjeJmPEwW5osBkflDk/uvTcZOINR/Q=)
2: pjCkQXuBbqOHzoKD1mw-qrFiWGY.roa (hash: MiX/u7zxhzpsdUN3cx+sdMgoTiE427DJRykzUPzL3BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6e:95:e7:8f:d7:11:68:b9:1e:b0:38:67:5c:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Oct 22 01:00:33 2025 GMT
Not After : Oct 23 01:00:33 2025 GMT
Subject: CN=80307ea1f4e700098565abc18d39a21f6c364d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:f0:9b:5b:9c:c3:29:d0:68:26:d1:2c:eb:
9e:50:5f:e9:83:2b:71:a9:80:da:8d:82:05:22:62:
8f:d2:4d:46:81:0c:cb:55:5e:f3:82:78:27:7c:5f:
b2:ee:ff:43:34:19:63:41:60:88:45:b0:6a:52:c1:
f8:5a:c2:bf:4b:f6:40:57:d4:ff:3e:6e:a0:87:78:
4e:30:10:8a:91:ca:30:d6:4e:ac:c0:86:f8:86:b9:
9d:29:a4:66:02:88:8d:98:3d:5c:0e:e7:da:40:5e:
93:82:01:02:8f:db:a7:09:be:2d:80:af:25:ac:c4:
2c:8c:06:40:85:31:2e:c6:8a:2e:15:9a:fb:45:05:
7b:58:5c:a6:d6:c8:3c:1c:ba:40:d1:64:9b:c1:19:
5b:60:e0:86:b4:60:b4:42:2d:d3:c9:10:14:7a:1b:
65:48:fc:ad:33:78:90:a0:ba:2a:b4:d0:64:48:16:
03:74:db:3b:d5:7d:03:56:b7:5b:aa:76:06:9e:13:
82:86:da:3a:58:01:98:9e:9d:41:c4:d3:1a:82:3f:
8e:4f:9c:8b:e2:71:7f:d5:d9:2a:dc:5b:71:b9:41:
f5:a4:c2:52:84:13:c3:4b:27:9d:b1:95:50:87:9f:
cf:68:f6:8b:63:15:8c:59:c4:e7:81:d6:f9:e0:85:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:30:7E:A1:F4:E7:00:09:85:65:AB:C1:8D:39:A2:1F:6C:36:4D:1A
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e9:cf:e7:ec:bf:90:f3:b6:9e:ea:f0:a1:d2:10:3b:b8:69:
1e:32:35:a5:94:23:3c:5c:2f:70:b4:05:9b:75:49:8b:ae:f7:
3d:36:cc:36:75:4e:53:47:61:e5:fa:ba:b0:10:1f:74:02:49:
8f:13:64:f4:a8:20:d4:4b:1d:33:4b:7f:74:46:7c:8b:b8:d0:
79:a1:3a:45:06:da:7b:1b:a7:0d:5d:70:0d:86:33:2c:23:15:
2e:e5:b6:dd:e5:0b:e5:c8:25:b9:23:f2:72:c3:6d:e7:47:a5:
fc:1f:4e:fb:82:29:6a:1c:18:4c:91:35:c5:3c:e9:49:2e:ef:
60:ee:4a:67:ed:b2:00:8d:11:43:ed:73:a0:26:8e:26:e8:86:
cb:20:33:4c:1d:0f:ea:f7:72:88:3b:16:66:e6:5f:3f:eb:13:
70:e9:2b:b7:df:a6:fc:9e:f4:3c:67:ce:5a:75:94:86:c4:82:
ae:52:f0:2b:c2:62:a3:30:5b:67:b8:5c:f6:2e:46:39:33:43:
fc:84:1f:08:db:8f:31:66:a0:47:55:cf:bf:c4:52:93:c6:fa:
4a:74:b9:d5:ac:f7:ed:7d:e9:18:2c:5c:bb:72:e2:7d:e5:e0:
aa:c5:2d:72:30:b9:9b:ff:1e:39:0c:10:67:0f:9c:8c:5f:f8:
c7:cc:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:16:00 2025 by rpki-client