Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: IXuIGv62qxESPt9qFQvhNwcvdoEKe6M2cXUDBoak5RU=
Subject key identifier: 9D:72:29:DE:8E:CC:8C:34:A7:A7:74:AF:91:E9:1C:C2:51:A3:5F:BC
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 019A0D4BE8F7013789F46FA56B7DF84F0AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 16ED
Signing time: Wed 22 Oct 2025 19:01:09 +0000
Manifest this update: Wed 22 Oct 2025 19:01:09 +0000
Manifest next update: Thu 23 Oct 2025 19:01:09 +0000
Files and hashes: 1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: QIV4p3kSgzQkdEe1jWk1UbS9djlpvZJD5+qo26pu0mk=)
3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:e8:f7:01:37:89:f4:6f:a5:6b:7d:f8:4f:0a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Oct 22 19:01:09 2025 GMT
Not After : Oct 23 19:01:09 2025 GMT
Subject: CN=9d7229de8ecc8c34a7a774af91e91cc251a35fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:4c:c8:a6:fa:86:61:9d:51:50:4f:fe:80:
92:75:92:74:8a:fd:06:75:8a:e0:79:52:e2:d4:e4:
d6:01:58:64:59:18:37:5e:b9:61:fe:b8:e5:30:dd:
bd:c6:35:27:53:29:53:7e:98:94:35:6a:43:81:91:
0c:23:ea:f0:6b:c4:92:d2:21:d9:80:61:6c:3a:d9:
19:02:0e:b0:26:22:22:a1:9e:0d:2b:0c:93:3c:b6:
34:3a:90:ce:90:09:b7:65:e0:e2:23:11:40:cd:1b:
3c:b1:f7:a0:bf:f2:a1:f1:9f:cf:23:0d:86:23:ad:
78:2e:03:77:46:6e:ed:eb:19:a0:c3:d7:d5:c6:58:
0a:ae:8e:8a:36:1e:3a:4c:4f:5a:f4:68:ba:1f:a3:
2e:76:8b:76:6c:86:3b:f4:ec:81:44:9a:da:e9:a6:
de:76:5c:ec:b7:76:d6:de:9f:d0:78:66:c5:4c:ee:
ea:ea:98:98:e9:77:aa:d7:b8:72:60:09:e9:6d:ca:
67:ae:82:b3:0d:2b:b7:0a:d5:2c:07:66:59:04:9d:
42:3a:c2:dc:da:d0:23:a1:47:e1:a6:e5:64:60:65:
43:24:16:74:ea:07:33:ad:73:30:80:9b:b5:0d:91:
6e:b6:b8:61:b1:b8:28:01:32:df:fc:c3:7c:54:6b:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:29:DE:8E:CC:8C:34:A7:A7:74:AF:91:E9:1C:C2:51:A3:5F:BC
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dc:ea:d0:b7:34:b0:59:9e:3f:1f:65:6b:4a:a4:50:38:64:
bd:e8:23:6a:1b:de:b9:12:e6:48:96:70:d5:64:d9:a5:65:65:
62:96:c4:da:10:bb:b5:f0:18:4f:94:45:a1:8e:ec:1b:c4:da:
ed:3d:41:26:b5:80:cd:8f:9e:41:f6:9d:b2:bf:a2:c6:6c:95:
ef:4f:1f:dc:76:7d:31:c4:1c:23:ee:4b:d2:52:7c:33:69:d0:
da:5f:34:bb:56:b6:0c:db:c6:b4:30:c7:6c:05:43:16:28:cc:
07:5e:11:16:ef:ea:07:0d:5e:b9:14:c7:5b:c5:32:af:94:43:
b6:8e:e3:d3:98:b7:17:e0:7f:d4:23:e6:a1:92:7e:5b:29:88:
26:bb:74:d1:c4:6b:66:e8:cc:0d:0d:57:93:28:42:dd:03:d9:
20:66:a1:7f:31:5d:01:43:da:8b:7f:a3:99:b7:47:1f:9d:36:
7b:35:41:af:5e:df:4c:02:44:00:cc:e7:15:89:8c:da:63:35:
a3:54:55:bb:31:a1:71:e9:18:04:82:83:84:3d:1c:1b:f0:90:
2a:3d:a9:2a:39:cb:42:81:d5:6b:0f:c1:51:37:6d:a4:f8:fc:
d4:d0:15:a5:c5:84:68:c5:77:a1:2e:a8:00:9a:0d:fe:91:1b:
9c:5c:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:16:56 2025 by rpki-client