Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier: xLULK64wRoEWze/NKYxx+7KGfMygGX7GtKwEKgMRdWk=
Subject key identifier: A5:0C:37:BD:94:F6:D7:07:8E:97:D6:80:49:AD:CA:76:26:D0:0F:BB
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 019A73381B374B40037C20FD7C7A7FA86405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number: 1708
Signing time: Tue 11 Nov 2025 14:00:48 +0000
Manifest this update: Tue 11 Nov 2025 14:00:48 +0000
Manifest next update: Wed 12 Nov 2025 14:00:48 +0000
Files and hashes: 1: SIEblnDTmxDkNQuR8GrQyNScjq8.roa (hash: 994/huZNdlRSyw8MDRW+EKE0ylyI66j7DW5sNtIspOA=)
2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: I4NiFFUhA5jMNta0wJQ1D2zEKua14KKN/AYPEp/oj1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:1b:37:4b:40:03:7c:20:fd:7c:7a:7f:a8:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Nov 11 14:00:48 2025 GMT
Not After : Nov 12 14:00:48 2025 GMT
Subject: CN=a50c37bd94f6d7078e97d68049adca7626d00fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:4c:fd:2f:2a:ca:6d:fa:ac:d3:66:57:48:
bb:64:3c:32:95:69:ea:d1:3d:7f:24:f2:05:63:df:
4f:2a:40:00:6b:9d:a7:c5:d7:be:76:eb:98:cd:34:
24:a9:aa:c2:71:96:d7:c1:2b:37:4f:30:dd:b9:23:
1a:da:88:6a:ff:eb:e2:89:3c:93:a7:30:b6:50:3b:
ee:e0:70:67:c0:6c:2e:0a:e2:fa:c9:30:ad:6c:68:
13:3e:b6:dd:ed:43:80:81:48:a3:e6:c5:d0:46:c9:
b2:e1:8b:41:ca:df:99:71:aa:e6:0b:c7:16:4d:7d:
23:47:d2:6a:78:2a:34:a7:ee:89:6c:d7:2c:2b:98:
b4:c9:9c:3f:a6:f2:f9:0d:47:0c:c7:39:73:3a:1f:
e6:21:ed:7f:a2:71:75:78:70:ce:c0:7b:6a:27:f5:
16:ea:d0:eb:63:ce:d4:0e:d8:b5:43:08:53:da:cb:
0a:c8:e5:b2:3d:ba:c8:68:ad:dd:ce:3f:c5:f5:bf:
23:c6:e2:e0:e9:ff:9c:3e:86:bc:a9:db:88:82:01:
a8:e2:40:41:4f:da:06:a2:66:ba:c5:f8:79:4f:26:
48:06:2e:fa:6f:1e:4a:77:f6:b4:51:58:35:6c:e8:
8d:84:76:ff:d9:1c:b4:89:9d:c4:b8:13:46:bd:34:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0C:37:BD:94:F6:D7:07:8E:97:D6:80:49:AD:CA:76:26:D0:0F:BB
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:73:35:3b:3f:41:3a:ec:7b:9a:4d:e5:0b:79:22:ad:ec:e3:
67:72:cc:19:b9:58:6a:52:81:3e:08:1d:15:ac:cc:f0:0f:50:
e9:e7:6b:13:6d:a1:05:1d:c6:8c:eb:63:d5:48:da:ff:f2:66:
82:e2:23:e0:af:68:fb:d8:c9:55:c2:b0:b3:ae:84:c4:55:a6:
ad:38:de:24:f8:b1:ce:c3:81:2a:7c:a1:2b:6b:8a:63:b0:69:
29:89:c6:c5:4a:72:36:8a:19:04:7e:4d:3f:bb:91:58:8f:47:
1f:1a:31:db:bc:aa:87:fb:a1:2a:9c:82:cf:36:2a:65:04:42:
da:78:56:21:6e:bf:f1:7c:6d:6d:90:54:49:6c:97:93:e6:05:
2c:fe:c2:d8:31:50:32:e2:fa:21:67:4e:14:0a:12:a9:97:a5:
8d:e6:27:52:c5:ce:b4:93:e7:07:e0:78:9c:7e:96:7a:dd:f4:
72:e0:60:62:4d:8e:cc:5a:64:15:54:63:24:d1:7f:67:39:ce:
54:3c:86:e5:70:e2:a5:b7:18:78:0a:5c:3c:98:cc:a7:9d:c5:
0f:fd:a7:12:f4:49:ef:7b:4d:bf:25:ad:29:c0:be:20:8d:5c:
4d:77:fb:41:b6:cb:a7:3c:85:46:40:1d:48:f9:54:87:a3:3c:
6a:0e:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:14 2025 by rpki-client