Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
File: U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json)
Hash identifier: nx9UwJpyXL+D+UvvqJR2kziPjtAsl4jha92VYTCy/U8=
Subject key identifier: D0:FE:4B:F9:2E:DC:C2:75:A3:1E:3B:8E:E3:AD:DF:FE:FC:8A:4F:67
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 019A722612F436A1C15EBA34158EC36A15E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: N395374_mmN2AD-ofI4gXJ3cQpU.roa (hash: Zf59hxbYn2Mwx3RShNxnNZI4f8JDWVmUB1iW/NWH/74=)
2: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: GqC9LcLYmQTELZ8Gc4Zd4BJhJ6fhMqyN5ONWfRDKHBs=)
3: WX6sNrF92l686KdkTXPFkLfxe3U.roa (hash: Abr+DHAKxIPDGR7zdXI5jJnVVIXCf9i5JeUWk/vC2vA=)
4: WcSAU3UG3fbCDubUuAbDmN9BNXw.roa (hash: lUiGwZsu8aUjDmUrAqfxfzum4CcP/EsvidCuJT28td0=)
5: YsUzeXuKor8g8xJ2qQAIbZwuLdA.roa (hash: b8Dg+ptVU/0cD+fmDjz15R9Y3ThIrc8W4BKhqUm2GSI=)
6: vdc8LHeirosn85jHF2y6k4tZWpE.roa (hash: bWLLd9BGuNkbp8DQiZZnq80FzJLO4Q8aaegMFqU4oPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:12:f4:36:a1:c1:5e:ba:34:15:8e:c3:6a:15:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=d0fe4bf92edcc275a31e3b8ee3addffefc8a4f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:bf:a2:6f:6d:a6:a9:60:d1:81:fa:93:d6:
b7:0d:f0:6d:a4:1f:13:e2:d5:74:62:ce:20:76:11:
24:1e:18:b2:aa:c0:c4:a0:c3:91:d3:7d:c8:5b:b9:
ce:4e:61:31:4f:ff:a9:66:cd:f5:8c:8e:f3:54:81:
b4:02:31:e2:a5:58:7b:38:3c:63:83:d0:cc:64:4a:
63:c9:7a:af:b6:b6:36:5f:38:1f:08:f0:9c:e7:0f:
ee:61:92:d9:e1:e2:a6:53:6c:96:61:fd:3f:6b:db:
4b:f1:11:64:12:8d:ee:e3:8b:f4:7a:48:84:c8:8a:
67:ca:8f:d9:e0:7a:31:fc:c7:6b:fc:a9:a9:16:9d:
aa:03:35:f0:8f:e8:ee:7d:8e:6d:c9:e5:24:ee:f6:
ca:88:f1:4e:9f:e9:1f:44:e4:d3:88:ed:94:0a:87:
d1:9f:20:1b:4d:ed:21:a6:c4:ac:e7:01:29:e6:d1:
f5:03:7d:5c:02:ef:6b:cd:57:96:22:33:68:64:ff:
45:6a:6a:fb:5d:84:15:d0:f1:6a:6e:09:42:e3:c6:
71:d3:94:49:88:00:7e:7d:f3:79:2f:b0:b1:22:69:
8f:95:de:da:26:4b:81:77:a4:a4:67:58:68:8f:64:
50:2b:43:e2:90:66:f2:f0:ba:6f:88:ee:5c:4d:cb:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:4B:F9:2E:DC:C2:75:A3:1E:3B:8E:E3:AD:DF:FE:FC:8A:4F:67
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fd:46:93:b7:5d:97:04:cf:a1:b2:af:75:2d:ed:c5:14:90:
d5:df:68:e8:1a:d5:e4:54:37:30:fd:36:57:82:1b:8a:36:77:
09:98:83:73:84:41:f0:c9:e0:7f:17:a1:ee:60:9e:7b:09:dc:
b3:69:84:71:c1:40:b6:7b:05:cd:fd:29:6d:5e:ed:52:6f:83:
ed:cb:64:b0:0c:9a:36:36:79:4e:c3:08:d1:22:3e:74:e3:69:
1b:02:8e:0a:8e:82:9c:6e:6d:61:0f:51:b5:df:26:bb:b4:f2:
30:4f:32:d2:24:15:65:f0:e6:43:f7:1d:6e:23:a9:03:e2:c6:
96:4e:96:da:7c:26:e4:eb:5c:a9:e4:37:6c:33:31:30:35:90:
f8:a4:b6:47:d3:61:ae:a8:c5:2b:1a:40:3c:aa:6a:f8:41:2f:
b3:9c:a2:bc:27:25:44:20:77:b7:9c:72:a5:94:ce:4d:02:64:
4f:ff:ea:aa:85:2d:30:f5:f3:eb:c7:fa:43:6b:eb:b5:4c:12:
df:a7:67:4e:50:e6:e3:61:f3:bf:6b:91:34:86:d3:43:8f:a7:
5e:15:c4:b0:e4:ea:26:01:dd:8c:0c:29:c7:00:35:d9:ab:c8:
a9:fe:be:8e:ca:84:5b:80:9d:ec:d9:df:48:a0:68:e6:f2:ee:
bb:6d:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:44 2025 by rpki-client