Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: DbifRwtVMbzdOS3A1YZ2LGY/0Hxqc56nkLwrV9wWml8=
Subject key identifier: B6:03:39:C4:DC:9B:19:F5:1E:1A:97:AB:BC:FE:7A:D3:F3:20:80:C5
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 019A725CE6E76C2412631048EE31411BCA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0B82
Signing time: Tue 11 Nov 2025 10:01:22 +0000
Manifest this update: Tue 11 Nov 2025 10:01:22 +0000
Manifest next update: Wed 12 Nov 2025 10:01:22 +0000
Files and hashes: 1: GBm75ZmZioJB2ocCMhAt7gwcAjo.roa (hash: gsh5fLNtNPH78sBeeVxRzXrv6jA9hVTz/xvnQZtNCkc=)
2: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: sSgTG60AtsMFXeiYU6pY5P41Hmyt1CXY4Gywe18lwC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e6:e7:6c:24:12:63:10:48:ee:31:41:1b:ca:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Nov 11 10:01:22 2025 GMT
Not After : Nov 12 10:01:22 2025 GMT
Subject: CN=b60339c4dc9b19f51e1a97abbcfe7ad3f32080c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:c9:51:2a:7f:88:e8:ed:5e:d3:2b:e3:0b:
6b:7a:65:d4:9a:ac:fe:74:df:38:6c:19:36:ae:16:
ea:ed:19:12:10:46:26:e4:ae:8d:c5:e2:27:81:af:
98:15:3d:10:9b:61:1a:28:0e:7e:87:e0:b9:f3:3a:
5f:9d:66:26:78:bf:7b:a6:fe:85:d3:4a:8e:ef:57:
8c:98:b0:a4:bb:da:cd:ec:17:33:2d:ce:e0:6f:a5:
17:5d:40:de:df:4a:a3:7e:1c:3a:d3:c9:17:f9:f9:
8b:0d:2a:70:c4:97:29:94:e5:a6:f1:00:cc:14:45:
07:70:65:ee:1b:85:33:41:b7:62:bd:4b:48:2f:a6:
e9:b6:ae:f5:09:06:1d:78:12:9a:6d:56:ae:dd:c0:
fa:f4:2b:9c:8c:a5:b0:dd:39:a1:cd:80:85:22:dd:
78:b2:73:7f:65:16:e8:36:68:8d:25:26:b6:cd:d0:
ae:97:42:ad:d1:97:71:cc:1a:b2:be:02:55:0b:74:
62:85:c0:60:ea:8f:ba:29:f9:04:4f:b0:25:01:17:
f8:90:df:20:96:06:8c:17:cf:6d:2c:31:a8:b4:c9:
6d:76:74:4d:db:db:90:d8:3e:26:30:a2:16:77:34:
35:f8:c1:b4:d7:ae:09:df:e7:94:5b:79:10:b3:3b:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:03:39:C4:DC:9B:19:F5:1E:1A:97:AB:BC:FE:7A:D3:F3:20:80:C5
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:33:fd:98:9c:74:45:50:9c:e7:ca:53:be:f7:58:86:78:db:
8a:a8:be:d8:74:34:c6:3d:b7:2c:0e:54:aa:84:8e:2e:12:42:
0b:1a:b5:31:4c:b0:f4:10:31:28:1b:05:dd:49:ff:48:03:1c:
72:93:c8:2d:d8:8a:e9:d4:98:04:ac:b8:04:ab:e1:68:04:8e:
80:8f:69:4e:8b:80:d8:d2:6d:21:be:f3:ae:ee:ce:f6:e0:11:
0d:69:04:bb:60:48:4f:ee:7c:1e:8a:04:ac:83:22:e1:3a:1f:
bb:31:f9:1b:55:2b:c1:03:07:42:57:8a:30:60:8f:3c:e2:f4:
f4:88:27:99:10:85:9f:97:e7:e8:d4:c5:33:e5:a6:fa:f1:44:
0a:37:15:2d:9d:b6:1c:ea:54:a6:54:4f:61:d5:3d:5b:c9:8e:
27:da:d9:6a:69:c2:c5:d2:07:65:65:2d:e2:5b:45:bb:95:f7:
7d:62:a8:eb:4d:40:2d:c8:2d:97:3b:23:37:dd:82:ab:0a:df:
cf:3a:9f:cf:b8:78:6b:79:6c:c1:f7:19:40:7d:2c:bd:1b:17:
3c:1f:08:46:9d:79:97:93:e9:64:db:c4:86:24:c4:09:fd:02:
d4:cf:59:76:31:72:88:45:6e:12:fc:c3:12:a9:5e:07:e4:8c:
a7:56:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:21 2025 by rpki-client