Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: 55ykuKX0nrYTORgroTmd3qoYvN6kA0sW+XABybphu40=
Subject key identifier: 43:4B:A7:A1:73:CB:B9:45:C4:08:A6:6F:A4:43:80:BE:6D:DC:A0:27
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 019A70DBEEE88257FCE6A492C5CEA1488E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: GUGobmdQFIGuazHV+HwxHnLjrqYTnDznnGNdBVS4V3k=)
2: bldtfvyuIcb6nqjUAl8Ak0zMF30.roa (hash: dx6ZT1WJQ+QEzva9Bd5tv/adJVLszcwVSLKhJy+UO24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ee:e8:82:57:fc:e6:a4:92:c5:ce:a1:48:8e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=434ba7a173cbb945c408a66fa44380be6ddca027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:26:51:3d:82:2c:20:9b:81:a1:22:f6:d7:
88:4e:d8:20:e2:34:93:43:df:fa:09:d1:fa:d7:27:
5a:68:41:2b:90:8e:e5:80:2e:c6:ea:d6:de:42:15:
48:7e:ce:41:e2:0f:f7:2f:06:a0:da:95:1f:8d:78:
93:0b:15:b6:51:72:18:55:0c:df:8f:84:31:76:d2:
b1:e2:70:e2:a9:16:27:fc:4a:83:8b:3f:da:6b:25:
78:16:cf:70:08:01:70:ae:4b:52:71:24:a1:df:6c:
22:8d:50:68:ab:03:10:74:32:21:f2:4c:ca:4b:0d:
8d:36:5f:9c:b2:2a:00:0f:2e:0b:b7:6a:05:98:cd:
35:09:82:35:d8:0d:7e:c6:7c:67:b8:30:97:6a:62:
a7:79:92:cf:7f:f4:83:49:22:38:85:c8:3d:fc:21:
79:e6:9f:41:b5:8c:29:d7:69:50:1a:33:93:a9:b7:
8e:17:27:ab:cc:0a:42:26:b3:8a:68:36:0d:16:00:
34:0b:09:ca:93:b1:54:41:14:5f:eb:52:ab:ba:52:
88:40:cd:ad:03:b1:be:6b:77:bc:b9:40:0f:6b:d5:
8d:66:56:89:19:b1:1a:21:17:15:fc:ae:b9:ea:52:
e9:fd:7e:89:2e:b8:ac:0a:41:2d:18:5d:ef:a7:08:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:A7:A1:73:CB:B9:45:C4:08:A6:6F:A4:43:80:BE:6D:DC:A0:27
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ab:73:2e:07:c7:69:9e:eb:86:63:18:21:fd:56:47:45:5c:
a6:66:16:b8:6d:ae:2e:3e:75:f1:ed:af:7f:f5:64:0b:4e:e9:
6b:55:b8:15:9b:ff:a1:62:fa:d4:cc:eb:49:e1:77:e4:b6:00:
36:32:df:e4:db:c5:55:e2:18:93:72:79:f1:1f:94:9e:69:15:
ea:58:0b:a2:24:0b:d8:26:6f:7f:5a:44:0d:fb:b0:e3:de:b3:
87:47:ad:00:29:e3:19:24:a4:af:1c:29:f9:0b:3f:08:c8:be:
15:01:00:45:5a:ba:e7:4a:16:a9:86:1e:c2:2e:e4:25:08:2d:
bc:9b:0a:98:03:0c:3c:4b:13:6f:3a:11:bd:05:9e:c7:92:3e:
b7:79:5e:2c:08:48:a4:12:8f:83:50:7a:ad:73:b2:1c:d7:ae:
99:86:6a:6b:92:f1:fe:19:6e:6d:4a:8b:5f:c0:e4:e9:76:10:
b8:fb:7d:d9:54:f0:72:09:f4:c9:3c:f4:67:85:03:87:c8:1e:
b1:fb:26:77:ce:47:4a:3d:22:bd:ab:fe:91:da:30:4f:71:26:
ad:61:18:ea:8a:97:2d:4d:c1:75:06:39:7d:a1:2f:01:f5:6a:
a8:72:d5:54:ff:75:1c:90:03:6c:aa:1d:56:2d:56:bb:4a:db:
b2:a8:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:14 2025 by rpki-client