Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File: _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier: zvusBncat5adoBB3+22YG9vBQ9zQkHvDLRcKG+RkEQ0=
Subject key identifier: 7D:5A:F4:19:7A:19:DE:40:AB:97:00:4E:F6:B1:85:E2:9B:09:BB:A3
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 019A123AD4E9B90027079B4A0F2CBED7A282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number: 0B38
Signing time: Thu 23 Oct 2025 18:00:36 +0000
Manifest this update: Thu 23 Oct 2025 18:00:36 +0000
Manifest next update: Fri 24 Oct 2025 18:00:36 +0000
Files and hashes: 1: M58q90VZFeP3jvyPYnq7UDFhR3E.roa (hash: pfDDAToaRStBIBYW01WrjbiSm0zCrXjT/V6YwQttWeY=)
2: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: R1dgnIcr5vVjl0J7K7A/SqpaNN/+iNCLcbURARzmLuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:3a:d4:e9:b9:00:27:07:9b:4a:0f:2c:be:d7:a2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Oct 23 18:00:36 2025 GMT
Not After : Oct 24 18:00:36 2025 GMT
Subject: CN=7d5af4197a19de40ab97004ef6b185e29b09bba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:58:ea:77:b2:c4:0a:cc:94:32:e5:ba:6e:
ce:b2:75:d4:53:5d:4d:11:af:6f:1d:da:d5:cb:c8:
e6:5c:a9:3e:fd:58:7b:16:cb:ff:8c:5f:1d:a1:bd:
16:76:3b:76:a7:ff:75:10:60:8a:72:90:d8:e8:85:
01:4e:21:68:5f:19:7a:f2:99:50:40:a1:c7:5f:88:
63:2b:2b:ed:34:22:d4:e8:01:f6:1e:4f:5c:ff:0c:
bb:75:e1:83:49:dd:ea:1d:41:b9:67:b3:06:9a:35:
24:54:9b:b8:24:82:85:31:94:9d:0f:0c:54:24:2c:
89:81:48:02:97:c2:fc:7e:9f:f3:f1:9a:fc:cc:16:
a9:0c:7b:eb:66:33:62:ed:90:27:08:14:36:ff:7e:
4f:45:69:c8:db:fd:7a:f6:ee:ab:a2:87:cc:17:69:
88:2f:2f:ef:91:b0:56:85:68:46:85:d7:01:b0:ec:
d3:28:8d:2c:d4:97:5e:46:6e:27:63:a8:63:1a:c5:
29:c1:e0:60:39:b5:86:cf:e8:45:ff:bb:41:8a:55:
a7:f4:1f:78:c6:83:de:a7:52:f5:94:86:3c:6c:13:
c4:b9:bd:07:19:84:db:39:aa:cd:19:c5:69:f2:1f:
84:39:83:86:16:80:ae:44:aa:a3:cc:0d:84:81:b5:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:F4:19:7A:19:DE:40:AB:97:00:4E:F6:B1:85:E2:9B:09:BB:A3
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:57:89:3a:2a:0d:48:f7:0c:f9:a5:4f:5b:63:a4:71:e7:
91:7e:94:32:3d:5a:0e:3f:2c:2c:88:3e:ea:0a:19:be:0d:9e:
14:fa:12:74:95:ba:3c:3c:54:e9:37:70:58:11:2a:d1:a4:4c:
6f:7d:5b:22:45:8a:8a:16:6d:61:63:48:56:89:4f:0a:9b:f3:
33:58:08:4b:41:9b:a0:90:d9:ac:c3:ac:94:53:b4:2f:8b:ad:
81:bd:a9:2a:eb:26:9a:2c:c4:89:1d:5a:eb:b7:6b:a8:57:00:
25:32:6e:9c:8b:02:7a:c3:4b:da:c8:d4:cc:d5:d7:84:22:83:
db:eb:f2:ca:68:db:72:2b:bc:3f:d0:23:56:45:7c:d5:31:e2:
a4:bc:87:8b:56:04:f8:ec:63:bb:a3:d7:60:11:08:1d:cf:a6:
f6:90:5e:cf:39:10:70:f6:43:0b:32:ec:e1:6c:ef:fb:cb:c0:
03:8e:b9:d4:db:55:80:e5:8a:4c:d5:73:e7:00:7a:23:86:85:
8c:d6:8b:43:2a:7b:a4:da:75:bb:0a:d9:06:ec:ad:c1:58:c3:
c3:26:f8:5d:e1:87:63:8e:47:1b:49:ed:b2:d8:c8:37:e4:f1:
9f:14:d4:4e:3e:97:4b:0e:83:1e:c7:ac:e1:90:a7:21:7d:61:
46:54:e9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 02:41:19 2025 by rpki-client