Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: ozOuTJBL1pyRME/6AcD2VHu5KOtoklv08y8/07l/Lcs=
Subject key identifier: 2B:0B:F3:37:71:CD:D2:84:66:98:C8:DD:C1:08:BA:54:8C:F1:37:57
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019935374220AE2FA8B27D5F7AB2A519345E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 035F
Signing time: Wed 10 Sep 2025 20:00:37 +0000
Manifest this update: Wed 10 Sep 2025 20:00:37 +0000
Manifest next update: Thu 11 Sep 2025 20:00:37 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: /ovdJaE7+L7UPFMU4ruI5Ir8lRVyXPattAhy6plZ9n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:42:20:ae:2f:a8:b2:7d:5f:7a:b2:a5:19:34:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Sep 10 20:00:37 2025 GMT
Not After : Sep 11 20:00:37 2025 GMT
Subject: CN=2b0bf33771cdd2846698c8ddc108ba548cf13757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:67:3c:28:10:01:0e:2b:a1:85:79:e6:d2:
d8:8a:78:80:3b:15:f2:60:23:da:5e:2c:2a:4f:bd:
21:f7:22:a2:1f:43:16:0d:4e:75:75:2a:a2:93:a4:
e1:9f:10:5a:58:3c:71:97:48:6d:df:db:b6:2a:8a:
ad:fd:47:40:66:c4:ce:f8:6d:d9:ca:b5:97:d5:18:
34:99:26:08:1f:05:1a:ff:a5:90:5b:7d:b0:56:4c:
36:db:fb:2d:a5:33:c9:bd:6e:38:2a:a4:41:cb:0b:
66:fe:fc:d3:65:17:2b:4a:6c:d7:00:ef:05:d0:0c:
e1:8c:58:58:b2:02:7c:8a:e5:8f:e8:60:14:49:92:
93:14:4f:e3:79:5b:b7:fb:97:45:1b:84:fc:9d:71:
cf:a8:96:fa:0b:69:e3:21:eb:d0:48:c0:23:b3:64:
25:d2:ad:7a:e4:57:16:fc:26:bc:f3:22:52:09:0a:
b4:3b:e5:ec:23:1b:a4:5c:85:11:ff:d9:4f:09:14:
12:fa:2c:58:9a:f5:d2:5b:8a:d5:25:34:2a:3e:ad:
4d:5e:a7:23:d7:15:a1:c7:d9:e1:1b:48:b2:41:90:
ec:98:a5:03:69:4c:76:17:ba:b9:55:35:1d:c3:a9:
9f:9f:0d:b0:f4:a9:6a:b6:0e:90:01:ca:67:39:c3:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:F3:37:71:CD:D2:84:66:98:C8:DD:C1:08:BA:54:8C:F1:37:57
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:93:2c:29:e0:8d:77:3b:b5:6b:19:46:fe:53:5d:db:22:d5:
46:1a:4d:e2:4a:88:33:f4:6f:af:07:0f:56:e9:85:58:0f:42:
fb:7b:48:f5:be:8d:ad:08:d5:4c:2b:f9:3e:05:2d:22:79:f2:
92:5c:9c:6b:03:7e:57:0c:27:d8:65:df:a8:58:7d:27:c7:22:
d4:70:eb:27:f4:5f:f8:32:7c:fc:78:ee:ac:eb:87:b0:16:c3:
29:7b:b1:22:9f:19:bf:e2:ab:49:11:a6:2b:73:46:36:fe:66:
95:1d:47:2f:85:34:84:a7:41:b5:a9:9f:1d:42:b9:7f:42:4a:
dc:8d:86:a1:5b:2e:e6:f3:23:6b:88:96:36:87:f4:a8:53:05:
97:0a:11:c3:82:fc:43:ab:a9:a2:8c:7b:99:15:2e:55:08:12:
3b:1a:84:2f:38:2b:ba:d9:78:6c:5d:4a:46:46:8d:6a:1d:88:
16:99:09:41:01:33:49:d1:7a:18:b6:62:b2:db:14:9b:09:12:
2e:18:4e:bd:9d:bf:db:74:ff:07:76:2e:ae:75:7e:92:c7:23:
01:42:a7:83:f6:4a:e4:68:bb:5d:d9:57:6f:c4:a8:af:a0:74:
47:42:41:6a:c6:17:27:5c:23:3d:32:f2:a8:d2:4d:59:b0:dd:
57:0b:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:56:57 2025 by rpki-client