Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: H6OBcI/BJpWFulPvn81Q66XzQEsUaGY7ZR+RQwlJdqs=
Subject key identifier: 24:2B:47:AA:F7:B5:4B:90:95:86:2B:C8:AE:6D:91:E3:14:38:66:81
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019A2B1E8EACAC7C76E31B36FC5E41575759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 14:00:14 +0000
Manifest this update: Tue 28 Oct 2025 14:00:14 +0000
Manifest next update: Wed 29 Oct 2025 14:00:14 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: /DqiWEeuvCEs5+6c0geUE0YxnSNxl7T9qLcYuYQ9jhk=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:8e:ac:ac:7c:76:e3:1b:36:fc:5e:41:57:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Oct 28 14:00:14 2025 GMT
Not After : Oct 29 14:00:14 2025 GMT
Subject: CN=242b47aaf7b54b9095862bc8ae6d91e314386681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:66:27:be:1e:a8:c8:0d:08:5b:be:40:33:
d6:9b:5e:d7:be:39:bc:0a:34:95:08:46:b9:b4:5b:
77:7c:86:58:a8:fe:f5:1f:22:fc:29:8b:4a:dc:e9:
1d:4a:1c:c7:3d:77:ef:95:b0:61:8b:8b:bb:85:05:
d0:bf:e0:0b:64:e6:cb:52:29:b0:e7:72:b1:4e:ab:
18:e1:a0:ee:ac:64:e4:dd:f8:bb:06:9e:b7:64:e6:
6e:fb:6f:cd:e4:42:a2:ab:58:88:56:50:84:2d:93:
56:54:ab:8b:d2:4d:9a:85:90:41:35:d4:32:21:f3:
07:b0:28:3d:2a:da:ee:c7:15:b6:44:51:28:23:1f:
c2:f7:47:1c:3b:be:c9:fa:6b:23:99:f1:d0:b3:a9:
2f:fd:a9:19:35:ab:7d:4d:dc:f6:75:bb:a4:33:0d:
d5:04:62:db:26:cb:4e:29:a1:d2:43:f7:01:4a:12:
38:d8:12:32:a2:59:fd:05:3e:d7:7d:e5:82:2c:47:
48:b6:3b:93:f6:ab:c7:ad:26:b0:a8:3f:a7:3d:dc:
83:20:87:3f:60:6a:fc:06:31:36:2c:3e:0a:9d:5c:
da:4a:1c:7a:b1:f5:05:b0:68:c4:03:e0:b1:b7:c0:
bb:df:de:c6:9d:c4:d2:b0:90:0e:f1:2f:81:7f:3e:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:47:AA:F7:B5:4B:90:95:86:2B:C8:AE:6D:91:E3:14:38:66:81
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7a:da:7d:88:1f:7f:5a:53:29:09:42:fc:95:33:ae:09:13:
85:02:b8:c0:ea:a1:ac:8b:08:04:36:5e:39:49:1d:dc:1b:d0:
45:7e:99:39:13:fc:82:88:f8:c7:d2:6d:44:60:20:63:ef:82:
02:3d:3c:84:67:20:25:7c:96:ee:17:6b:97:39:c4:41:59:18:
26:8c:a4:dd:b5:97:52:0c:c2:85:3b:4e:1c:2f:d2:87:55:12:
b1:1e:da:f9:98:b8:7d:46:fd:46:46:03:4c:cc:eb:d6:a4:2d:
57:10:57:ad:60:f1:10:26:d9:28:11:65:72:a7:d7:33:93:11:
78:83:81:56:44:e1:f7:fd:02:9c:05:23:aa:3c:55:ed:54:5d:
a2:d4:c2:34:49:9b:5b:62:d7:12:eb:67:c8:9c:b7:79:39:a5:
f9:21:df:0d:59:a9:a6:1b:7d:da:a1:a4:31:79:eb:dd:8a:a5:
f9:e2:93:eb:6b:30:8f:94:4d:dc:78:42:51:55:a2:b6:7c:0b:
be:69:97:d1:ad:35:b0:8b:d4:40:de:fe:6e:03:aa:22:02:86:
f6:b4:27:13:df:3e:b2:85:b7:e9:ed:b0:9c:fb:7c:51:7e:9c:
44:2d:61:bc:be:04:ba:40:34:aa:0e:da:72:a4:86:7e:9b:85:
62:6e:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:43:36 2025 by rpki-client