Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: +XBO3pqJ39S63574S9iH9gV0vzzMl0qz7natAHIh9/s=
Subject key identifier: D9:5D:18:55:11:F1:C3:05:4D:B0:B6:7C:56:47:4C:31:AE:52:E3:9A
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 019A18737CEF204CE857DCB5032FCFC3575C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0CE6
Signing time: Fri 24 Oct 2025 23:00:13 +0000
Manifest this update: Fri 24 Oct 2025 23:00:13 +0000
Manifest next update: Sat 25 Oct 2025 23:00:13 +0000
Files and hashes: 1: 29SLMo34FhaAnpTCRG4-JhzaoEU.roa (hash: 2fi9WOSprxmNRnuIjRed7XskP0Ewr4AfYM3eX1Xq9nE=)
2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: GOGHKQQ+o7tJonANcQICJ9Prp5nXj/RZ+TaDW3j9eFs=)
3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=)
4: gC44VWnXdqeRgBq7XFfpWF95Q6M.roa (hash: ZlFvQ0FdcQWc6LDQd+RgeJur3FpyWFSWGQsV0siREzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:7c:ef:20:4c:e8:57:dc:b5:03:2f:cf:c3:57:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Oct 24 23:00:13 2025 GMT
Not After : Oct 25 23:00:13 2025 GMT
Subject: CN=d95d185511f1c3054db0b67c56474c31ae52e39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:47:8b:d0:1b:bc:57:74:40:41:15:fa:9d:
e6:0b:44:f9:02:b2:3a:40:9b:1c:1f:14:b8:1d:a3:
2c:96:2a:60:17:bf:3f:36:55:f4:a5:ac:87:c5:ab:
14:ec:79:04:62:bd:0a:9a:85:a3:82:da:6d:68:2f:
45:d5:65:55:4a:73:1c:e1:f9:6d:d0:d6:ca:d5:37:
6b:47:5a:9e:82:e6:6f:b9:dd:70:57:fd:71:fb:33:
eb:91:f7:2b:47:e3:7e:f6:32:6c:30:a1:4f:ea:80:
6e:6b:48:7c:90:f4:d9:f2:f7:0b:de:49:39:5a:25:
89:f8:78:18:bd:94:c5:7e:f8:de:d6:8a:29:57:94:
d8:4e:4c:27:b1:a3:40:7e:de:5a:36:59:40:0d:3c:
b4:a7:0e:39:71:5b:86:b2:d2:19:72:ea:cc:47:8b:
12:e8:e7:2c:54:5d:25:d9:65:30:03:f2:ce:fc:7c:
5a:69:32:10:83:f3:c6:5d:32:3c:f3:a2:c6:33:66:
0b:29:97:38:b4:0e:8c:b2:7b:0c:28:13:b4:79:02:
59:2c:e7:aa:78:39:26:50:48:f6:da:f1:bd:2c:16:
df:bb:0a:0c:9f:af:72:86:81:cf:a1:05:49:6e:5a:
3d:fb:f0:f8:01:f4:32:7c:f4:dc:7b:07:c3:fc:05:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5D:18:55:11:F1:C3:05:4D:B0:B6:7C:56:47:4C:31:AE:52:E3:9A
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:aa:b8:41:ee:e0:69:3b:40:02:cc:9f:4e:b7:ab:e3:f8:8e:
3b:0f:c4:5e:b8:b1:8a:6c:c2:3e:a2:4e:1f:d9:d4:b2:25:38:
a8:7f:0b:4e:2f:53:5a:9a:58:6f:5e:78:87:b6:38:bb:ab:a9:
c7:1d:16:0d:c4:21:45:ea:0d:ab:00:10:26:c8:fc:cc:ba:be:
1a:f3:60:31:6a:8a:97:db:71:5a:4a:76:74:b8:8a:2f:60:8d:
d1:d1:1d:fa:ba:80:45:f0:72:e1:51:9e:2b:c0:ed:56:c7:bc:
4f:28:85:1d:b0:ce:2c:5c:92:e2:07:b0:86:74:61:00:de:f8:
77:70:0a:e6:7c:6b:65:5a:ab:4b:bc:b6:95:a7:95:06:29:e7:
86:10:3a:d7:da:dc:d7:e8:8f:de:af:a5:dd:5a:77:24:a1:72:
6e:a8:39:1a:ca:b0:1e:ad:0c:4d:28:dd:21:1b:e4:9f:60:0a:
f8:da:ce:c9:da:0e:f8:12:39:06:68:5a:0d:8d:56:63:0a:8c:
b3:b0:c3:ae:4a:fc:88:1a:45:30:4d:07:91:f9:e6:2a:6e:95:
c4:a0:2d:7c:8e:12:24:69:e9:59:12:42:6a:2c:f7:46:85:9f:
e7:7a:23:80:5e:35:79:a9:90:6e:6e:93:e7:d9:c1:bb:95:fe:
79:30:bd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:21:42 2025 by rpki-client