Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: DcTykIFkQJcPiz/20NL8P+7dBoMjmOn6rUbYgx26BKg=
Subject key identifier: D3:B3:3F:DB:58:51:B9:A7:E1:47:F5:0E:52:0D:9F:8D:D1:C9:61:36
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 019A714A1F525C9A8A30F909A2DAD14C7544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 146C
Signing time: Tue 11 Nov 2025 05:01:14 +0000
Manifest this update: Tue 11 Nov 2025 05:01:14 +0000
Manifest next update: Wed 12 Nov 2025 05:01:14 +0000
Files and hashes: 1: Mym9d5dVDoOmCDQV51AwB-FfpCc.roa (hash: w5OUNkmnrUSeDRW2ANklyuAzFVL6KyBf5AcPHxY8618=)
2: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: csTWrybotdi30e2dSmTBG2vuzpTG7LLTo/rjVn0FBjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1f:52:5c:9a:8a:30:f9:09:a2:da:d1:4c:75:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Nov 11 05:01:14 2025 GMT
Not After : Nov 12 05:01:14 2025 GMT
Subject: CN=d3b33fdb5851b9a7e147f50e520d9f8dd1c96136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:ce:8e:a0:3d:54:ed:df:3d:8f:20:56:7e:
9d:b7:78:40:cb:0a:a9:66:9b:4d:52:1a:15:97:a7:
b1:25:a8:4f:b5:0c:0c:a6:60:8b:54:8f:ae:d9:f4:
ab:88:52:73:f2:d4:59:c2:06:70:3c:b2:df:f8:e1:
e1:82:5f:a7:78:48:b3:33:55:b9:52:8e:6f:09:43:
bf:cd:38:2d:2c:51:bc:0a:42:e6:1d:a1:c5:d8:c8:
20:e6:84:22:d6:31:bc:f2:77:bd:d0:c6:48:51:c2:
6d:b9:18:99:80:bf:b4:ed:a8:e6:82:a8:0a:50:23:
85:75:b9:5b:cd:c2:39:75:39:73:d3:66:c6:c0:30:
7c:41:c8:f6:f5:8e:48:8b:a6:a9:8c:79:bf:34:a7:
27:44:57:d7:55:be:b4:70:bf:2e:8a:3b:98:7b:91:
ac:ba:27:cf:41:be:66:af:86:ca:a5:68:f6:11:8b:
58:da:b4:df:ed:a1:14:59:c6:8b:0b:e3:79:df:01:
26:a7:c2:5b:d9:31:13:30:ff:c8:27:26:bf:48:a5:
52:db:38:5b:c5:33:d5:08:0f:4a:3d:69:01:e2:ac:
d8:74:b3:68:c3:55:44:b1:fb:4d:53:dc:8b:8c:68:
6e:e3:58:99:45:81:aa:f6:7c:39:e5:c0:f3:ea:13:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B3:3F:DB:58:51:B9:A7:E1:47:F5:0E:52:0D:9F:8D:D1:C9:61:36
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4f:05:30:59:2f:50:80:90:9c:1b:9b:63:04:c9:8e:a0:ff:
da:3d:0a:3a:cd:16:6c:45:53:ea:6c:9c:d8:ab:e4:73:5b:3d:
58:8e:1e:5f:7e:f2:a4:04:a7:d2:ac:d2:dc:b1:33:dd:74:9f:
24:d1:dc:ac:c8:5b:20:14:24:22:b7:25:eb:4e:00:6f:37:58:
e8:63:42:58:ce:cf:6e:29:a8:e2:6f:9d:77:23:52:31:e1:a5:
9d:94:7a:4d:52:8e:4d:79:4d:f0:a9:27:83:2b:46:2c:93:7e:
76:dd:6a:c0:e5:cf:42:87:6a:80:0a:05:18:1f:f3:96:7d:f3:
e8:5a:eb:31:8f:1e:d1:2e:f0:3b:8c:1e:fc:ee:89:28:c1:67:
67:23:ce:a4:05:1a:8a:09:90:ec:67:5f:49:a1:5b:63:2a:bb:
1c:0c:7a:a7:73:de:67:8b:bc:96:eb:ef:0f:a8:97:5e:b6:47:
2a:ac:f4:e7:a1:d3:6f:70:16:55:ab:fd:40:e9:6f:8f:b7:ca:
90:ee:08:2a:ef:59:0a:b4:97:e1:41:8a:d1:99:7f:d0:0a:cf:
0f:56:b2:79:f7:82:72:a4:f1:45:71:09:7c:bd:07:f2:15:0d:
ae:67:23:53:6f:bf:98:2a:29:98:62:30:5c:9e:49:74:52:3c:
9e:43:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:51:36 2025 by rpki-client