Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: phAltyVAv33eSup3XuVwMv9O/UFf5KNocSe+7x2a97A=
Subject key identifier: 0A:6A:72:AF:42:57:4F:B7:96:F0:13:1D:2C:BC:43:30:F2:CC:F7:5D
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 019A71B8D71632223E188C9E29552C4EACA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 0277
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: 8eveQxOa6jmoQI0UKkkm4Lne2dPaTiAqOAdNnUMfYnk=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d7:16:32:22:3e:18:8c:9e:29:55:2c:4e:ac:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=0a6a72af42574fb796f0131d2cbc4330f2ccf75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:53:18:35:38:1c:4b:25:1b:be:57:42:ab:
eb:70:20:e6:52:cc:4d:db:28:0d:c1:a0:3a:7d:54:
45:c1:83:b6:03:6f:ef:0d:b2:f7:3b:44:fe:e9:e1:
39:e5:14:93:e1:d2:27:2c:3c:5e:45:d8:cb:50:38:
7b:fd:1e:da:d0:80:8d:bf:ea:00:06:0d:c4:b1:51:
fc:b4:a6:32:d9:9d:f4:22:79:9b:7b:65:6f:cc:e4:
c5:1b:5f:2d:38:a6:c9:ad:0a:a2:ce:6f:5d:65:20:
f0:ed:07:63:1e:e2:e1:d9:69:6a:4d:3e:23:72:86:
ca:63:7f:c5:a1:7d:41:19:bd:76:dc:f0:ad:3e:e1:
6b:d7:a7:41:7b:df:d2:a7:f4:4f:cd:be:ed:74:0c:
40:19:d4:01:7a:2e:16:af:02:7f:1f:f3:70:07:73:
27:ef:9b:9d:cd:d0:da:fb:cd:a2:7c:8f:84:71:5e:
23:d6:2a:5d:28:99:04:29:ea:bb:e7:a3:76:91:b7:
f0:16:8c:22:f1:07:39:75:b5:57:b8:e9:fd:1f:b5:
3d:75:87:34:7a:9e:5b:f3:91:3f:ed:ee:5a:bd:83:
11:0b:61:da:77:99:c5:93:a1:c6:c9:46:44:ca:51:
95:7c:10:b8:cd:ee:f4:17:b7:0b:6e:d4:92:27:b7:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6A:72:AF:42:57:4F:B7:96:F0:13:1D:2C:BC:43:30:F2:CC:F7:5D
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7b:27:02:d9:5a:41:e0:37:29:1a:91:29:45:75:0b:fe:af:
26:ae:b0:4c:b1:37:98:18:9f:7f:57:18:7e:ba:01:66:c7:b6:
f0:a0:43:45:53:7c:60:8a:5c:09:db:77:60:8b:71:40:41:e8:
10:86:2c:74:69:99:28:90:6f:84:df:e1:04:5e:60:c9:87:d4:
16:29:00:80:e2:2c:01:20:b3:66:f3:f2:25:0b:c0:fe:87:0c:
33:a1:9f:20:92:bd:9c:cd:09:21:45:f1:50:f7:e2:31:15:08:
b4:5b:b0:d6:19:a1:3d:2f:c7:8c:37:ae:55:62:39:ab:4a:29:
70:fe:a7:8e:41:5f:34:49:03:9a:54:d7:b2:fb:c4:bd:34:26:
82:3d:13:71:da:25:65:ed:e5:99:fc:df:9f:02:c9:eb:d3:62:
47:a4:0f:65:37:1f:a8:f6:c7:57:a3:ff:df:bf:7f:b5:9c:14:
06:47:4a:69:f3:20:a0:87:b2:cb:96:91:a4:27:26:92:02:e0:
1a:b2:ca:8f:77:c9:6f:66:30:f0:c4:cc:04:98:41:d7:f1:30:
71:b6:b1:1e:1c:29:1c:4a:40:dc:a4:d8:5b:a9:84:56:9e:8d:
13:ae:39:31:b8:76:b4:6e:46:48:63:8c:1d:fb:98:cd:19:1c:
8d:30:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:59 2025 by rpki-client