Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: cNlynH0LwPL0NF1nGsr7hrIiTrmxXTdXz4/qsS59B6U=
Subject key identifier: 00:2D:8A:2D:34:2A:31:9A:09:50:05:0A:8A:10:22:DF:F9:CB:6F:A7
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 019A1F5179D398096580F8700B7DF5787219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 07:00:24 +0000
Manifest this update: Sun 26 Oct 2025 07:00:24 +0000
Manifest next update: Mon 27 Oct 2025 07:00:24 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: 1TYNms3YOczxATtU4RTU9Seb8vcku1khyk6ezS1d2Lk=)
2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:79:d3:98:09:65:80:f8:70:0b:7d:f5:78:72:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Oct 26 07:00:24 2025 GMT
Not After : Oct 27 07:00:24 2025 GMT
Subject: CN=002d8a2d342a319a0950050a8a1022dff9cb6fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:8f:b5:d6:6b:8d:8d:c0:ef:15:d4:81:d5:
5e:5b:fe:c7:c6:10:7b:86:a9:74:c1:d0:56:08:9c:
c6:13:f1:0a:cf:11:5d:ff:01:10:1d:3b:8e:25:91:
d7:1d:6c:6e:f4:5f:e4:38:78:d8:cb:a9:bf:b1:8f:
f7:1a:46:76:26:68:0d:70:7a:63:1b:49:77:20:a1:
50:a2:51:c3:b6:9a:bb:77:12:34:a6:c1:ef:8b:ec:
78:47:b8:f4:d3:c3:5b:75:8a:59:cf:fe:9d:9b:53:
3a:03:e7:8d:c5:bb:8b:54:be:19:aa:15:3a:e1:c8:
76:3d:9d:61:a1:56:cd:9f:08:70:2e:69:55:1b:04:
ac:8c:1b:b7:61:d3:39:f1:b5:01:a3:04:e4:60:61:
49:7e:3d:2e:9d:e3:ed:0f:d4:cd:00:50:cd:23:4a:
0e:ae:b1:c7:0b:a6:f5:1c:14:a3:b0:01:74:7b:7d:
d5:39:aa:c4:b8:77:35:d2:13:77:a8:25:cc:71:a5:
7f:29:e8:a8:08:78:56:0e:8e:2b:3d:cf:81:9c:eb:
64:9b:26:34:f4:43:58:83:60:42:ad:e7:eb:6b:2b:
ab:3f:50:ef:30:50:ce:5c:54:14:f4:2d:05:e7:e0:
f8:fd:48:67:70:f0:50:a0:1e:33:83:32:48:c3:b2:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2D:8A:2D:34:2A:31:9A:09:50:05:0A:8A:10:22:DF:F9:CB:6F:A7
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1f:7c:26:ff:ba:01:33:bf:f5:70:d3:97:d3:af:73:a6:94:
5e:d9:c8:8b:32:4b:fa:11:1c:58:c3:76:75:84:1d:df:32:bd:
96:fe:a1:af:1e:79:bb:45:0b:43:69:a2:a8:2c:61:4a:d5:71:
e8:e5:e4:ba:dc:4a:52:9a:67:95:70:07:c8:71:40:f5:59:df:
39:bc:29:fe:23:87:de:66:38:00:53:0e:61:14:02:6d:8b:4e:
f6:74:66:10:de:cc:9a:9c:31:8e:7a:05:06:fa:5c:37:c3:5a:
df:72:ae:87:a4:55:b8:05:13:d8:6b:37:a9:62:d7:ff:ee:0d:
1a:b8:c9:8d:10:63:a3:ea:ad:c8:48:6c:2c:1e:71:f2:b2:b0:
46:6b:cd:2f:ff:e2:4f:e2:2c:11:5c:13:1d:d4:a6:9d:88:b1:
02:bc:56:42:fd:c5:6e:71:5f:89:11:a7:c5:21:d8:c9:5a:ee:
ff:db:fc:0c:93:fc:85:5f:20:69:61:9d:c7:af:35:90:a1:8e:
82:24:3d:66:5a:bd:79:63:31:6a:39:a1:c2:59:44:7c:4f:d0:
0e:2f:c2:82:66:75:66:9a:c4:d5:f6:12:80:05:82:99:82:b2:
b3:08:0c:05:dc:97:e0:27:02:20:80:93:53:fd:73:29:c2:05:
57:60:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:46:33 2025 by rpki-client