Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: 2dp04NPQ2WQk9aBZyIEEa2MWJU3ssi+sEy29hPigPOs=
Subject key identifier: 3B:4E:72:CB:23:E2:17:E0:1B:63:E0:B3:3C:18:0B:01:D2:12:A6:83
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 019A2477D97F2665A7B9529B56E95470D98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 07:00:25 +0000
Manifest this update: Mon 27 Oct 2025 07:00:25 +0000
Manifest next update: Tue 28 Oct 2025 07:00:25 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: fhXGLTmL7jYrXhjB99cF1DVSQ5hQjstQFGwfcaa6TeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:d9:7f:26:65:a7:b9:52:9b:56:e9:54:70:d9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Oct 27 07:00:25 2025 GMT
Not After : Oct 28 07:00:25 2025 GMT
Subject: CN=3b4e72cb23e217e01b63e0b33c180b01d212a683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:81:de:c0:a4:43:ae:30:b8:05:dd:af:a2:
23:85:ee:1a:b5:ee:7b:ae:92:85:53:ae:66:8b:d2:
ee:17:ed:ca:18:2f:05:b5:53:4b:3f:4c:2f:54:2c:
54:ac:81:cc:95:71:31:1d:da:a4:6a:71:98:2d:ad:
5a:f6:c9:21:3a:39:dd:9e:f9:60:58:17:78:a7:3f:
f2:ed:64:a1:cf:59:c8:7c:bf:ad:3d:11:ff:0b:85:
9b:a8:c0:41:1c:8b:a0:e2:15:76:ac:45:53:95:02:
b3:9c:e0:6c:d4:a4:0c:ac:9c:cc:02:00:ed:34:28:
cd:cc:1a:72:3a:d7:6b:0c:19:50:57:ca:3e:98:b0:
5a:17:5f:b2:13:18:bd:80:cf:a2:ea:19:40:fb:5a:
2d:67:8f:20:4a:70:c3:75:6c:45:0a:68:c9:f2:cc:
ac:cd:ae:3f:1f:b9:fc:41:a0:b0:46:a9:23:bf:d7:
7a:d7:b7:bb:1b:ab:54:6e:da:41:c8:ca:ce:ef:8a:
b9:eb:d2:39:b4:00:03:10:74:5e:f5:47:7e:2f:ad:
1d:ec:c7:48:e1:65:44:9a:b0:1d:f1:d8:45:8d:df:
3b:c6:10:64:99:53:dd:6b:88:e8:d8:ce:31:55:79:
37:6e:94:bb:51:31:16:b7:8a:fa:90:4c:d9:7d:73:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4E:72:CB:23:E2:17:E0:1B:63:E0:B3:3C:18:0B:01:D2:12:A6:83
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:be:37:6a:94:80:f0:8e:5e:60:b4:38:14:89:24:9a:e9:59:
75:53:ee:17:8e:88:26:78:d7:96:39:08:19:c3:68:9e:98:0a:
53:25:80:ec:cd:4e:b0:7a:f6:eb:e9:59:21:2d:51:44:33:c2:
e1:1b:2b:2f:aa:a8:b9:25:b4:40:13:4b:7b:c2:27:19:f6:0e:
03:e3:5c:80:ab:9a:94:a9:4f:30:ff:d9:3d:87:9f:3c:58:8d:
9b:e6:29:d0:cc:60:81:19:38:51:e7:68:d0:af:80:60:7a:93:
d6:8c:8c:46:a4:40:75:c4:2f:87:8a:aa:73:30:14:8f:06:47:
23:0e:c8:bb:a2:d5:ec:c1:6e:5c:73:5b:3f:4d:62:a5:0b:1b:
9a:4b:bd:0b:07:fd:33:eb:61:59:d1:d8:df:81:b6:47:52:8c:
20:b0:3d:ba:bb:78:7f:69:6f:87:59:18:9c:eb:93:dd:b4:9a:
9d:87:a6:99:dc:27:ad:e5:c0:3f:08:c3:15:c4:6d:e4:2a:ed:
b1:5b:d6:7c:28:94:39:69:c7:b7:ef:e1:33:38:f3:cb:66:c7:
f2:fb:42:8c:65:04:f3:de:9c:f5:99:b3:be:63:af:d8:e2:28:
3e:4f:a7:c3:f6:6e:4d:5c:d6:45:56:45:d9:bf:42:c6:3f:50:
98:57:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:48:02 2025 by rpki-client