Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: AMrAe0sd7pGo4UM/6LQi0eILVsiMA0660xJkUjyArNQ=
Subject key identifier: 14:27:1D:93:14:62:7F:8B:2E:AD:26:F6:FA:0C:04:09:6D:0C:76:C0
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019A0892BFD8CF7FEDAA57097C86014E632C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 16ED
Signing time: Tue 21 Oct 2025 21:00:26 +0000
Manifest this update: Tue 21 Oct 2025 21:00:26 +0000
Manifest next update: Wed 22 Oct 2025 21:00:26 +0000
Files and hashes: 1: BuG2OAiPDQnyx6d-WMA8tpFdnHw.roa (hash: uZBmZl0o3YtVzo0taGTcZqTYaNccqkyd0kSYhjubo7I=)
2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: O0RwtvY/jzEWY3g19kTuONyMhqJbTxGu7BaD9vLodcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 19:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:92:bf:d8:cf:7f:ed:aa:57:09:7c:86:01:4e:63:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Oct 21 21:00:26 2025 GMT
Not After : Oct 22 21:00:26 2025 GMT
Subject: CN=14271d9314627f8b2ead26f6fa0c04096d0c76c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:66:10:c1:4b:ff:47:0a:3c:76:8e:4f:ca:
ad:cc:a1:2b:d3:44:00:20:80:75:3e:2e:eb:c1:33:
ec:03:f2:07:c5:ad:49:7c:28:04:7b:75:3f:dd:83:
87:b6:63:a8:a8:c1:b4:ad:d5:fb:8b:bc:e7:3a:da:
02:38:0f:d3:6e:9b:34:5d:ff:b3:41:12:40:b1:16:
86:79:dc:c2:37:49:01:83:fd:55:15:9a:6b:fa:8e:
08:2d:b2:02:62:5f:ea:a2:77:01:06:66:be:dc:2c:
6a:d7:ec:a8:d2:76:9f:56:3f:c0:bb:f2:08:cd:ad:
75:66:62:0f:d1:f2:a5:7d:9e:78:60:ef:6d:ac:ad:
50:aa:4b:af:06:51:27:c6:87:7e:92:c6:8b:21:97:
55:56:fb:34:e7:5d:98:27:fd:c5:90:e9:d6:32:50:
3c:d9:72:d7:bf:39:3f:c2:6f:92:91:28:4f:aa:95:
a5:f9:11:a8:ee:0d:63:e9:ac:2d:a7:55:cc:fc:bc:
f7:59:97:0b:cc:6a:05:08:28:a0:13:d6:24:4c:dc:
ac:90:c5:f8:16:50:6a:e7:b9:de:75:fe:1d:c7:6e:
e2:bb:80:0e:d3:58:a1:d7:a4:e0:12:09:8b:f8:a1:
e2:1a:a5:f7:d6:17:a7:5a:51:47:82:c2:f6:28:52:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:27:1D:93:14:62:7F:8B:2E:AD:26:F6:FA:0C:04:09:6D:0C:76:C0
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:bd:dc:13:0e:b3:10:ab:b1:7a:4c:44:30:f7:8a:35:42:
d5:e3:49:83:b6:9e:34:2a:84:40:5d:b4:f9:fc:57:85:f0:4c:
f3:ac:5c:40:b3:d8:07:75:54:33:4b:50:ac:31:fa:10:ce:eb:
1e:c7:cf:ff:89:20:fe:a1:4f:e2:10:5d:b0:64:f7:61:18:05:
31:57:e2:41:91:19:0f:c2:fd:e4:f3:37:ea:97:c2:68:70:a9:
2a:88:9f:82:20:34:98:4d:51:36:b9:11:e5:54:8f:32:8a:35:
3c:7a:11:5d:8c:91:f6:e5:0a:3f:6b:31:58:68:a5:81:0e:21:
c9:28:b0:10:67:64:c0:06:8e:78:a4:34:8c:34:bb:1f:b0:94:
2b:5d:c7:5c:dd:eb:b2:92:89:ca:8a:c8:e1:e5:4e:fc:b2:5c:
2b:d9:bc:34:34:a1:ea:55:d3:7b:81:db:38:e6:09:ae:31:a2:
64:7b:28:25:f2:7a:ba:df:55:99:9a:68:6d:e1:6d:7a:18:fd:
24:ac:12:58:ca:b5:7e:ae:2c:69:9e:d5:84:dd:f5:54:a0:01:
01:4b:c4:6f:c0:75:3b:bb:83:7b:34:b6:28:f1:a5:43:3a:1e:
84:04:68:cd:13:ee:d9:da:dc:18:37:fb:7e:dc:0e:80:5f:dc:
89:dd:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 01:25:07 2025 by rpki-client