Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: gAfsvtK++XuJMDj3vaNPYUIXUoAmHZWdGM2LVXH5BIs=
Subject key identifier: 6D:B5:2C:59:C7:16:DE:A4:4B:F8:13:A9:07:9E:C7:7E:FA:CA:DC:44
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 0199233146DF45A21A0F78E0F16E37C630A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0EA0
Signing time: Sun 07 Sep 2025 08:00:55 +0000
Manifest this update: Sun 07 Sep 2025 08:00:55 +0000
Manifest next update: Mon 08 Sep 2025 08:00:55 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: ZX8PjRGy6NjqqbVZGJ84y749kQ6iGA1zGa2BQMHQjL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:46:df:45:a2:1a:0f:78:e0:f1:6e:37:c6:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Sep 7 08:00:55 2025 GMT
Not After : Sep 8 08:00:55 2025 GMT
Subject: CN=6db52c59c716dea44bf813a9079ec77efacadc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:14:53:dd:d5:17:d5:ac:07:cd:47:1d:ef:
f9:6a:bc:e3:c5:1e:38:97:07:bc:9a:e5:10:71:86:
a1:ff:e1:d5:bf:fc:a2:f7:9f:c3:43:8b:b1:ca:82:
ee:3e:00:f1:e6:b9:82:ee:db:49:98:69:57:37:0e:
c0:4e:35:d6:7a:9c:93:94:0c:5a:5f:a4:a9:43:ea:
c0:ee:b3:ae:56:bb:13:40:da:8c:46:99:3f:fc:b8:
1c:92:81:5b:f0:a2:b9:c4:63:1b:3d:c5:ab:3b:83:
8f:e7:15:7d:e8:02:c9:4d:18:70:f7:7f:20:2f:15:
08:09:3b:1b:a7:c3:4a:ca:e8:d4:2b:c9:9e:d4:02:
51:52:03:3c:f2:e4:8f:59:06:08:02:df:ff:69:9c:
35:c6:e6:6e:d8:a3:7e:93:ea:6b:79:f5:f2:b6:1f:
90:d1:23:a0:b8:c1:71:3f:de:8b:46:9a:a8:c3:ff:
8f:c2:79:26:85:58:2f:f8:02:5f:d3:84:98:ec:0f:
55:34:65:bd:70:e0:15:96:43:8f:87:b5:c7:84:25:
2a:f2:25:45:45:aa:89:7a:15:c8:86:6d:18:e1:d0:
04:44:52:e2:d3:06:a9:2a:22:2b:91:8e:ce:41:52:
34:d9:3a:05:f2:f1:b7:b6:3c:96:80:68:86:32:1d:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B5:2C:59:C7:16:DE:A4:4B:F8:13:A9:07:9E:C7:7E:FA:CA:DC:44
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cc:16:23:6d:59:74:25:b0:83:bf:af:d0:59:93:1b:f3:79:
3c:f8:4c:32:a3:ff:62:d6:78:e4:84:8e:8c:6b:dd:b9:97:32:
39:93:07:7c:77:15:7c:2d:06:75:90:01:14:7d:c0:b8:87:31:
b6:9d:86:9f:77:f2:0e:ff:7e:fe:60:48:43:59:84:ee:63:a4:
e1:fc:33:e2:97:0d:61:15:79:98:0e:52:98:bd:49:f3:1d:a5:
86:15:ca:73:e4:ee:0a:37:02:e3:cf:0c:87:aa:36:de:ac:bb:
33:06:33:69:ab:23:7a:ba:ea:42:f0:82:99:14:ff:f0:6c:3f:
7b:66:ac:93:75:c6:59:08:e5:57:91:1f:89:4e:8b:7f:d5:18:
f3:ea:60:b0:36:57:a9:63:c8:26:2c:ad:15:8c:1a:32:6f:3b:
42:de:96:7d:48:90:ea:65:b2:e7:2a:7c:78:db:9b:82:21:b8:
19:63:dc:eb:d6:b4:0a:aa:13:29:98:ab:4f:bd:83:92:eb:f0:
0e:c6:d6:d1:9d:01:00:cf:61:90:a0:67:fa:dd:1e:63:fc:a1:
17:3a:c2:35:a8:5c:69:a8:5c:5e:be:2f:7a:e8:89:ed:d8:f6:
8e:f8:98:c9:ca:1e:7d:11:4e:b0:3f:dc:2c:e6:e4:d2:83:e7:
64:66:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:17 2025 by rpki-client