Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: PaUi7tDT6LCj3H6PjGABmqK9TyvBoXV37OTyFeb4XqM=
Subject key identifier: DD:78:E4:24:71:CC:F3:68:7E:5C:0D:6A:2E:A3:6F:26:6E:FE:27:00
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019A1B06EA65D1659D7ABBFFFC17D8010AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 11:00:29 +0000
Manifest this update: Sat 25 Oct 2025 11:00:29 +0000
Manifest next update: Sun 26 Oct 2025 11:00:29 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: pghYaDm12nkMNrb0NJK1hLTBFytx0KgoBYbdwFkfI1o=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:06:ea:65:d1:65:9d:7a:bb:ff:fc:17:d8:01:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Oct 25 11:00:29 2025 GMT
Not After : Oct 26 11:00:29 2025 GMT
Subject: CN=dd78e42471ccf3687e5c0d6a2ea36f266efe2700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:fe:71:49:03:77:a6:a9:0c:30:e7:85:43:
b3:d8:f2:a3:9f:cb:35:d7:a4:85:cf:34:c6:58:c7:
b1:83:fb:d4:8e:d1:64:6a:20:b2:ba:3d:fe:c2:7f:
ae:11:97:d6:69:85:a9:fe:7a:16:89:bd:c3:d2:e2:
23:f2:d2:c9:10:38:9b:22:6b:87:58:fb:00:dc:a1:
21:80:26:b1:2b:44:23:1e:a7:8e:cd:8e:36:ba:ed:
68:d6:99:ce:24:f9:1b:23:d5:e7:d0:3a:d8:dc:c8:
d0:14:07:92:de:5c:17:41:90:3d:68:d5:a7:12:f3:
08:01:c8:8a:77:23:b3:6c:52:54:79:3f:bc:b9:c9:
f8:04:c6:fd:f3:2c:4f:4d:76:4a:d3:e8:61:64:c8:
02:54:32:e5:33:87:a2:12:d4:36:e0:1c:dd:c5:21:
33:34:90:99:3e:a6:18:d6:6a:fc:dd:13:6c:01:57:
3b:32:fe:0c:3c:95:cb:19:3b:04:a0:dc:0b:b8:53:
a8:a0:dc:b7:75:46:a0:67:3a:46:8d:9e:3b:8c:77:
4d:06:93:73:f5:40:bc:27:66:a3:38:c2:4b:24:c6:
30:a1:7d:df:dd:77:f9:d6:77:5f:88:dc:a5:66:03:
4f:57:2b:53:26:9f:a7:b5:5d:17:10:f5:0c:0a:94:
a3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:E4:24:71:CC:F3:68:7E:5C:0D:6A:2E:A3:6F:26:6E:FE:27:00
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:9f:6b:39:a1:f8:8a:70:2d:a6:b3:25:57:c3:b9:65:38:
77:13:03:24:1c:88:4a:a3:fe:02:72:8e:c9:b8:1a:c7:16:ee:
8a:d5:f6:9c:a3:d3:d3:35:31:fd:d0:b5:23:78:80:44:20:94:
33:c7:38:cf:e5:fb:f9:70:aa:40:4f:6f:c2:33:49:88:32:57:
b0:79:10:22:98:27:ae:ac:74:b3:9e:dd:5a:d4:fa:28:80:40:
f9:da:38:d4:ff:11:89:b6:39:0b:aa:e0:1c:c8:01:b0:65:42:
a0:76:12:21:6a:c7:cb:05:ec:c6:77:ce:4b:8d:5a:7e:c6:cc:
12:ce:ae:39:37:37:9f:f2:ad:c1:f2:02:54:d2:80:b0:c7:93:
74:e6:0e:e2:02:6e:40:e1:13:d1:94:16:bd:10:74:f9:1b:21:
e2:59:06:f9:b5:84:19:02:53:6c:16:40:70:27:4a:01:0e:ca:
7e:aa:1c:d6:7a:61:ea:30:c8:87:00:0f:1a:b1:b9:10:2c:06:
e0:2d:15:14:b5:18:29:e6:d4:7c:d4:60:0b:cc:24:4b:f0:f6:
ec:28:85:9e:48:44:ca:f9:f8:7a:e0:8f:6e:7a:d4:70:b0:10:
60:af:73:cc:45:2f:44:f3:de:45:e6:8a:f5:f9:72:24:67:25:
f5:16:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:31:03 2025 by rpki-client