Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: yss4BFHR1SCBLeWxda6rLByjL0Mtc7uiQT61luVeX5w=
Subject key identifier: 23:2F:5A:C9:99:DC:80:99:5F:80:C2:49:47:07:F1:15:1D:50:1E:E5
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 019A733818F4CF1FB12A2D3F43311EAFBA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 14:00:47 +0000
Manifest this update: Tue 11 Nov 2025 14:00:47 +0000
Manifest next update: Wed 12 Nov 2025 14:00:47 +0000
Files and hashes: 1: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: 0yeZGKMLYe2ZjZUx3Hho9N+t5mp3L6YD6HGUYlo4LpA=)
2: ax8BOGm-GJfb7NvYozzZ62QdRvA.roa (hash: cIhLyiLj0Foy8DN1xACbtMKul9Di0Oi3YIqfjaju72U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:18:f4:cf:1f:b1:2a:2d:3f:43:31:1e:af:ba:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Nov 11 14:00:47 2025 GMT
Not After : Nov 12 14:00:47 2025 GMT
Subject: CN=232f5ac999dc80995f80c2494707f1151d501ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:39:f0:1c:68:f6:d7:73:e2:d0:0f:fb:aa:
77:4f:d7:73:66:63:a9:b0:16:91:ad:ba:8f:ba:02:
1a:6c:3e:ff:25:00:2b:b7:01:24:06:9d:45:45:05:
37:e9:3b:11:f3:26:04:ea:95:ab:42:d5:ff:e8:04:
d2:5c:0c:b9:90:6b:57:ec:bd:e6:08:cd:b3:97:dd:
34:59:e0:94:5d:1d:96:5b:0b:04:0f:6a:0d:11:89:
b7:ed:e8:99:fc:9b:2a:77:5c:5f:37:bb:b3:6d:45:
08:68:12:10:a3:37:84:59:99:2c:9b:7d:75:35:06:
2a:1f:94:b3:c0:ca:05:a2:0e:bb:53:d3:eb:55:8f:
8b:f4:82:47:c2:98:e2:b3:a2:8c:f9:25:f1:e3:f5:
5c:3f:60:03:92:8c:d4:8e:98:83:38:9a:61:1a:b3:
d0:c0:12:6e:50:f0:94:5a:54:01:ee:04:05:79:ab:
1f:ef:21:b9:01:a5:5a:a0:a3:a5:c1:e2:e3:6a:39:
f0:9f:93:ad:10:79:0e:8f:3b:b7:f6:b7:0e:04:8c:
34:4b:7b:d6:5e:4c:15:f3:a0:59:59:f0:91:e4:85:
9b:d2:12:20:e6:49:7b:71:1c:05:32:ff:eb:42:16:
a2:12:59:6d:46:6d:b6:83:0e:0c:78:1f:87:75:ec:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2F:5A:C9:99:DC:80:99:5F:80:C2:49:47:07:F1:15:1D:50:1E:E5
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:20:b1:c5:39:b7:c4:9b:b2:73:7d:4f:34:5c:15:a5:14:cf:
ba:a5:5b:fa:78:d2:3b:c9:90:00:30:2f:f4:55:22:ae:0d:c9:
1f:f2:71:03:2c:49:73:6a:d2:2f:f3:13:30:7f:88:88:20:dc:
82:60:62:3e:f3:71:99:09:51:e5:e4:b6:f6:6d:e0:d6:7f:7e:
f2:1a:df:5f:3b:b7:8a:e6:3c:7d:fb:d0:ad:ab:db:e3:67:80:
fa:24:61:5c:81:95:6a:8c:97:15:b0:e1:21:78:f9:3e:5a:43:
d5:b5:cc:94:39:2f:b3:de:1c:2b:c8:52:56:e3:51:81:a8:26:
3d:8b:f6:36:30:e3:e4:dc:06:98:30:da:d3:96:55:40:8f:d3:
b7:21:0c:24:cb:cb:8d:60:6e:f7:6a:2c:63:fa:92:6c:3e:c3:
90:91:a2:5c:76:78:fa:26:3c:46:07:c4:d1:a3:3b:9f:61:af:
53:54:c5:5b:11:39:4f:99:fc:af:6f:97:1a:67:19:04:ef:4e:
78:b0:57:49:95:a9:20:bc:70:f9:67:aa:95:34:74:da:51:07:
35:63:66:46:6d:c4:4b:51:e1:ee:f0:4a:b1:63:25:64:7f:14:
84:df:27:88:8c:88:6e:51:2a:ed:29:8b:10:62:bf:0a:5c:c1:
fb:07:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:09 2025 by rpki-client