Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: YZg6lFFmH5OkBbeso/Mt/JxRSwRTlFbfROAOwyAAw20=
Subject key identifier: F5:99:AD:9B:C7:43:6E:0B:C8:43:5F:16:07:71:58:45:82:FF:40:21
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 0199221F2C97E86D09DD5D7DE3716B11CB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 0E0D
Signing time: Sun 07 Sep 2025 03:01:32 +0000
Manifest this update: Sun 07 Sep 2025 03:01:32 +0000
Manifest next update: Mon 08 Sep 2025 03:01:32 +0000
Files and hashes: 1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: xN+fwkDN+yqewiUv5qcFloa23+mw+aiCU521Ys8EYuo=)
2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:2c:97:e8:6d:09:dd:5d:7d:e3:71:6b:11:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Sep 7 03:01:32 2025 GMT
Not After : Sep 8 03:01:32 2025 GMT
Subject: CN=f599ad9bc7436e0bc8435f160771584582ff4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e4:2a:e0:65:f3:df:c7:ad:15:81:bb:61:05:
c1:55:7d:a8:58:14:5c:17:14:82:7d:95:ce:a6:ed:
d6:9c:7a:3c:45:3a:2a:80:f8:39:eb:33:c7:1f:19:
5c:da:5c:16:ca:92:cb:12:56:bb:f6:87:54:30:1b:
c2:5a:07:7f:b5:bf:82:91:df:26:18:4d:7e:5e:43:
34:c9:a8:c4:10:2e:ba:fc:e9:00:97:7d:ef:89:ec:
4f:05:5d:b8:42:e5:2e:db:09:7a:72:bf:ef:c9:35:
40:35:94:2a:29:dc:b6:24:e6:97:e7:66:ed:63:9e:
a2:c9:fc:4a:76:5a:71:2e:29:04:4d:fc:e8:f8:ae:
db:f6:f0:49:77:de:13:33:de:75:97:03:a4:4e:db:
6b:d1:32:04:9e:01:54:c3:45:46:4e:7e:85:cd:a0:
f5:cd:4d:a9:55:38:dc:09:7d:55:2e:ab:22:99:be:
ac:29:91:7a:54:13:f5:39:54:74:35:54:bb:48:b7:
71:ac:83:10:4e:49:45:f2:37:aa:e4:7c:8b:65:ec:
ec:22:75:18:62:91:1e:10:84:47:7f:5c:18:df:25:
a4:d1:a3:fa:da:88:71:b0:ac:e1:29:d0:34:fb:f7:
67:8a:54:ab:9f:a8:28:42:36:b8:b2:f3:ab:34:13:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:AD:9B:C7:43:6E:0B:C8:43:5F:16:07:71:58:45:82:FF:40:21
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:88:25:04:0c:63:69:68:9d:43:8d:d7:28:b5:70:ff:b9:59:
cd:2a:26:a1:7d:88:75:98:85:f5:5f:69:00:02:5d:58:88:d2:
23:9c:b6:67:0a:36:5c:d8:97:04:dc:6b:17:d4:be:dc:b1:e9:
aa:e8:e3:d4:65:fd:e2:95:ef:2b:b2:25:30:1d:e9:1b:47:6e:
fa:21:4f:02:5b:d9:01:0e:eb:71:b4:51:89:0f:11:e5:22:ce:
6a:15:1d:d3:e6:1a:5f:31:5f:00:5a:e1:cb:0e:bc:32:9e:b8:
1a:a9:a9:78:cb:d4:fb:49:d1:1c:8c:bf:e7:46:97:1d:2f:69:
bd:42:c7:ee:26:0f:e0:01:13:1b:ac:05:1a:39:6e:b4:23:a8:
a9:13:8e:73:ad:93:22:05:95:cd:30:30:19:6d:28:6c:19:e0:
e9:9d:d1:3d:77:72:93:63:58:ad:93:13:18:36:1c:9a:2f:86:
32:14:1e:ce:80:4c:0b:04:88:d4:65:73:9f:0e:1c:16:de:a8:
a0:9e:76:9c:81:c6:22:9d:32:ee:97:12:9d:01:72:5d:ac:46:
eb:f0:61:f1:99:7d:a1:61:f0:60:e2:24:5f:f8:7e:67:1b:1e:
8e:55:08:31:38:72:b3:86:1b:17:c1:9f:f9:b9:4e:0f:0e:7a:
4a:3f:4d:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHyyX6G0J3V1943FrEcsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTUwYjIzODJlMDBmYTdkZjE5NGU2NDg1ZmUxNDI1ODM2
MjEzZmYwHhcNMjUwOTA3MDMwMTMyWhcNMjUwOTA4MDMwMTMyWjAzMTEwLwYDVQQD
EyhmNTk5YWQ5YmM3NDM2ZTBiYzg0MzVmMTYwNzcxNTg0NTgyZmY0MDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOQq4GXz38etFYG7YQXBVX2oWBRc
FxSCfZXOpu3WnHo8RToqgPg56zPHHxlc2lwWypLLEla79odUMBvCWgd/tb+Ckd8m
GE1+XkM0yajEEC66/OkAl33viexPBV24QuUu2wl6cr/vyTVANZQqKdy2JOaX52bt
Y56iyfxKdlpxLikETfzo+K7b9vBJd94TM951lwOkTttr0TIEngFUw0VGTn6FzaD1
zU2pVTjcCX1VLqsimb6sKZF6VBP1OVR0NVS7SLdxrIMQTklF8jeq5HyLZezsInUY
YpEeEIRHf1wY3yWk0aP62ohxsKzhKdA0+/dnilSrn6goQja4svOrNBPGiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWZrZvHQ24LyENfFgdxWEWC/0AhMB8GA1UdIwQY
MBaAFFNVCyOC4A+n3xlOZIX+FCWDYhP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNWJiNmItNjQyNS00NTNhLWI5NDIt
ODljNTNkNjMwNzY1LzEvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jNWJiNmItNjQyNS00NTNhLWI5NDItODljNTNkNjMwNzY1
LzEvVTFVTEk0TGdENmZmR1U1a2hmNFVKWU5pRV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwIglBAxj
aWidQ43XKLVw/7lZzSomoX2IdZiF9V9pAAJdWIjSI5y2Zwo2XNiXBNxrF9S+3LHp
qujj1GX94pXvK7IlMB3pG0du+iFPAlvZAQ7rcbRRiQ8R5SLOahUd0+YaXzFfAFrh
yw68Mp64GqmpeMvU+0nRHIy/50aXHS9pvULH7iYP4AETG6wFGjlutCOoqROOc62T
IgWVzTAwGW0obBng6Z3RPXdyk2NYrZMTGDYcmi+GMhQezoBMCwSI1GVznw4cFt6o
oJ52nIHGIp0y7pcSnQFyXaxG6/Bh8Zl9oWHwYOIkX/h+ZxsejlUIMThys4YbF8Gf
+blODw56Sj9NAA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:36 2025 by rpki-client