Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
File: U_rXyaSF_rKReT654tuY9BjlxLg.mft (raw, json)
Hash identifier: /IxScv5Mi2Bb8Dzmu68q10h+cUZZyobpiGTQ1fN+otc=
Subject key identifier: 61:B7:7E:97:20:8E:FA:D1:01:A7:08:E2:77:6F:F5:DB:2A:5C:69:BD
Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Certificate serial: 019A71808539B6598280668EB73C4A3F061C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
Manifest number: 23
Signing time: Tue 11 Nov 2025 06:00:39 +0000
Manifest this update: Tue 11 Nov 2025 06:00:39 +0000
Manifest next update: Wed 12 Nov 2025 06:00:39 +0000
Files and hashes: 1: U-A7UIF8HFfaIfqzdQ7C2L0zquw.roa (hash: GU58R8XVv5pE4eYMaa0KfDxvMTXKbkzu6n6kuXkDNTU=)
2: U_rXyaSF_rKReT654tuY9BjlxLg.crl (hash: DSlJcYC0O9ZDNhJJkD1mvaMlIs0dbvHftghZFJJIRNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:85:39:b6:59:82:80:66:8e:b7:3c:4a:3f:06:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Validity
Not Before: Nov 11 06:00:39 2025 GMT
Not After : Nov 12 06:00:39 2025 GMT
Subject: CN=61b77e97208efad101a708e2776ff5db2a5c69bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:3b:b2:9e:58:86:d7:f7:eb:5c:1f:da:c2:
8c:a6:78:ef:25:98:0a:8b:04:95:7c:ac:38:15:d5:
03:bc:fd:31:50:b3:37:97:75:d0:da:94:73:92:58:
78:d5:a4:90:e8:d3:3d:9e:f3:86:18:d0:8b:f0:4e:
7c:fe:81:17:0a:09:cb:7e:99:5e:52:c3:8f:0c:99:
19:d9:e9:0e:4e:a5:9d:09:74:8c:7d:aa:db:3f:71:
36:2a:80:93:e6:59:e6:eb:eb:db:7d:5f:ad:23:3b:
5f:e6:b3:0b:dd:45:c9:8a:7c:7a:16:cf:0c:8f:08:
83:b0:85:21:8e:a8:a9:f8:51:9e:26:5d:ad:90:46:
a5:d4:f7:4b:49:3c:0f:c3:30:83:93:57:93:f0:d2:
1f:bd:3f:72:a5:e1:90:d9:a9:f1:6a:1d:3f:27:a9:
6e:1d:ac:58:e4:9e:71:aa:8e:72:d8:30:6c:cc:27:
a5:26:ff:6f:ef:76:5e:3b:7f:31:9e:b2:03:10:e9:
5d:9e:75:cd:3d:24:2c:4a:48:2f:42:71:7b:c9:77:
2c:f8:d8:ac:ea:e0:62:a3:a6:9b:80:a9:ed:3a:d5:
a6:2d:78:0a:24:ed:c6:5b:a2:6f:56:be:9c:d9:e5:
ec:50:7a:29:4a:95:a5:9c:e6:2b:b5:52:86:02:ae:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B7:7E:97:20:8E:FA:D1:01:A7:08:E2:77:6F:F5:DB:2A:5C:69:BD
X509v3 Authority Key Identifier:
keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:10:19:b5:0e:e4:9a:51:8f:32:9c:c0:d6:ba:ca:b4:6b:4d:
7c:c4:63:4e:94:7d:70:a5:ff:c3:fa:53:2e:a4:7f:0a:10:a9:
b3:2b:ec:25:de:74:ce:a6:77:40:c7:97:05:0b:0b:56:a8:b1:
09:a8:cc:33:a7:d3:bc:fb:3c:14:f7:02:35:6a:36:a4:cb:ac:
6c:b8:2d:69:b6:52:e5:7c:52:74:88:ee:d9:d2:3d:2e:02:6a:
26:f1:b5:44:9b:f0:a4:49:0c:c7:2b:b6:61:a9:89:7b:2c:63:
9c:8b:0b:24:5c:6f:ac:95:59:a3:f8:20:67:db:d0:7b:94:3b:
49:c6:4e:80:a4:e3:25:20:cc:5d:01:29:cc:4b:fb:4a:26:b5:
23:28:09:69:23:97:29:31:d1:90:7c:9a:3c:14:72:c0:1f:f7:
00:70:00:02:6c:c9:02:ed:4e:b9:fe:26:4b:ea:89:84:19:9c:
5f:b1:7a:f9:6b:57:b1:e8:89:03:79:ce:fe:24:cb:93:d1:a9:
98:ef:f9:20:98:a2:7c:00:e1:74:65:bf:32:90:a0:d6:0c:ee:
14:b8:e1:29:7a:0a:f7:73:1a:15:e2:67:97:3a:d5:74:fd:d3:
20:a1:86:aa:ba:d2:95:36:6a:4b:7a:3d:88:5c:4f:c0:a5:a7:
b1:6f:a4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:31 2025 by rpki-client