Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: sb16pUlPWYbZio8eL2s5R0zG8ZhhZijbFHE8E1OGxwE=
Subject key identifier: 9B:60:4F:48:5E:05:95:2D:74:48:10:65:05:2A:7B:1F:51:FF:5B:B6
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 019A7225BDB3415B3F6B43251D8240AB1D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 0EBB
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: tVKP4kpf9qfJRDBOOo5oFktQuZQ/EP5wKetkzVFh21I=)
2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bd:b3:41:5b:3f:6b:43:25:1d:82:40:ab:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=9b604f485e05952d74481065052a7b1f51ff5bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:78:71:87:93:82:d0:a8:af:dc:1b:7f:8d:
e6:23:b2:0a:92:75:68:96:18:a3:c2:07:32:4a:df:
e4:fc:3d:ad:36:10:34:89:87:f2:ca:27:b8:25:84:
60:bf:74:ce:7a:9b:27:f4:78:8a:db:46:dd:3f:34:
56:51:e5:67:de:6a:5f:12:6c:7a:43:12:6f:e4:8f:
e0:9b:19:50:69:eb:4c:d8:ce:e1:49:59:76:98:24:
80:7f:c3:9a:48:6d:e4:56:4d:03:03:30:6f:62:35:
dc:c1:d8:d2:9c:9c:3a:27:37:b6:f5:4e:dc:4f:9f:
de:66:41:a1:0d:66:7e:d8:aa:e2:e0:2d:96:0e:93:
08:75:3d:d2:6d:0d:e4:f6:9a:6d:58:e5:4e:45:8e:
f5:6c:99:a6:3f:d4:05:f0:b7:1c:ab:1e:44:fb:58:
41:e5:05:a2:dc:a1:09:60:1a:75:85:2b:1e:4a:48:
aa:6b:06:fa:49:8a:ef:0e:ea:7e:4d:57:4a:58:0a:
ac:2a:01:f8:92:0d:76:bb:96:af:bc:08:e9:c9:c2:
4a:3d:a4:55:8f:03:68:4d:53:bb:7c:1b:63:2f:11:
ed:30:f8:d8:76:7f:96:8d:eb:93:e8:e0:c6:04:fe:
0d:da:77:a4:98:1c:b1:09:2e:dd:1e:e1:2d:43:c4:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:4F:48:5E:05:95:2D:74:48:10:65:05:2A:7B:1F:51:FF:5B:B6
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f2:4b:c6:55:08:02:96:b5:28:5b:c7:41:d0:1e:13:52:b7:
6e:fe:9c:8f:dc:a2:39:e6:21:5e:49:07:d4:65:d0:22:29:5a:
35:e2:d6:26:81:96:22:80:21:5c:3e:24:bb:3f:13:94:78:8f:
de:26:b2:51:b5:47:1f:41:20:75:62:65:f2:93:9c:44:f2:f4:
26:b7:36:75:fc:ce:16:4f:ff:1e:c1:61:38:b7:d6:24:76:b5:
0b:95:72:4b:7b:cd:74:d3:d4:bd:b0:6f:c7:34:9a:36:03:49:
3d:c9:2e:de:9c:80:ab:c0:ba:09:3b:2c:48:66:df:e8:29:54:
19:ae:91:ea:9e:8a:0b:78:eb:7d:82:e3:c6:60:2e:c6:2f:15:
de:26:7c:e0:34:89:b6:c1:12:b5:ce:a6:99:c4:50:23:7f:6d:
a5:7a:cd:f9:1d:2f:2b:c2:86:50:9f:72:fa:6d:6e:13:7f:67:
3e:ed:c1:a6:af:7f:09:53:7a:fa:56:e9:0a:ac:b6:f4:bd:25:
c0:a2:6c:49:3e:75:12:3d:e8:f7:df:08:f7:c8:8a:eb:7c:de:
8c:c5:c8:8a:a3:10:f0:3d:06:bf:f0:23:7e:cc:7b:dd:4b:5d:
16:c4:86:08:fe:4d:f5:24:a8:32:2e:94:4e:5b:0e:41:1b:16:
9e:1f:68:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:08 2025 by rpki-client