Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: HHgGmC/WhS+hax5/hZcXEdjOAYzN+dZn74ux55iB9U8=
Subject key identifier: FE:33:81:47:4B:05:0C:FF:B9:0F:23:CD:99:4E:20:89:C0:F5:B7:04
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 0199FEEBFC8FC2E046546C79B7B4EEA8DB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 00:01:42 +0000
Manifest this update: Mon 20 Oct 2025 00:01:42 +0000
Manifest next update: Tue 21 Oct 2025 00:01:42 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: GLAn1sb9kvFXf/POCNZ/3nqPT7Ts7KjQTMxyt3AJrGo=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:fc:8f:c2:e0:46:54:6c:79:b7:b4:ee:a8:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Oct 20 00:01:42 2025 GMT
Not After : Oct 21 00:01:42 2025 GMT
Subject: CN=fe3381474b050cffb90f23cd994e2089c0f5b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:d2:f7:a1:36:1e:93:b6:5f:52:75:22:1a:
3f:2a:c2:45:37:6e:e5:f9:f2:6b:d2:e0:9b:93:18:
46:26:7f:b7:e3:33:1f:1b:80:f0:47:43:74:2c:23:
24:ee:5c:22:80:85:a5:34:de:d8:93:01:f2:53:06:
05:d7:be:09:4d:15:92:8a:8c:15:cb:b6:01:21:9f:
aa:de:a1:69:51:51:30:22:37:7e:55:e2:c9:a2:ae:
9e:07:00:0f:ab:f3:c9:10:c0:bd:1d:35:18:5a:bc:
69:db:bf:6c:bb:95:45:40:f3:4d:63:b0:8a:0f:b2:
1b:ca:dc:c1:cf:0a:49:4b:69:7d:c2:a0:bb:21:9c:
a4:41:7c:5a:e2:bb:0b:63:3b:e7:ab:ec:0d:4f:bc:
06:d6:a3:46:3e:4a:63:11:00:d6:25:93:4f:b1:1d:
9a:fc:4c:10:9b:0c:ed:eb:f3:9a:bc:01:a1:13:b7:
79:da:c3:84:49:69:1a:b5:b9:8e:e1:5b:ef:ca:47:
6b:79:c3:f1:20:b2:9d:b4:d2:58:b9:f9:35:32:f7:
d4:3f:1f:42:75:e6:39:8d:e6:f2:16:94:55:6e:ef:
d0:e6:5a:34:4d:db:32:69:2f:47:81:af:52:92:9e:
e5:ab:c5:95:1f:38:dc:c9:8c:6e:45:05:1e:83:28:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:81:47:4B:05:0C:FF:B9:0F:23:CD:99:4E:20:89:C0:F5:B7:04
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:51:bf:b5:3b:f8:d2:83:64:b9:96:23:b6:ab:27:c1:58:94:
2c:36:a9:c7:49:6b:2f:89:d2:ee:ec:36:2a:2c:00:79:27:b4:
a4:a4:1d:27:ac:05:d3:ef:2d:28:29:09:49:34:93:4d:65:dc:
5c:4d:09:db:96:04:fd:8b:ee:80:51:b5:4a:04:e6:96:5b:23:
3e:aa:e0:5b:93:07:73:f5:6c:a8:84:ef:b4:87:22:84:7b:dd:
bc:8f:9e:ef:e0:c3:00:41:02:f6:60:e7:cf:9f:af:54:2a:95:
2b:df:55:41:c1:98:db:d1:58:17:24:e4:48:d0:8c:4e:54:92:
b6:81:8d:89:87:0c:26:a1:da:c5:95:8f:59:f0:26:69:fc:1d:
04:49:19:04:52:a4:ee:11:d3:66:72:c5:0a:f7:a7:aa:86:4c:
c1:a0:3c:45:ec:95:ab:f8:6f:d2:31:a0:fc:5a:e7:39:2a:cc:
bd:c8:ed:42:2c:da:48:fa:2d:0a:70:ff:71:a6:74:5f:2d:5d:
83:7a:be:83:63:6a:ad:ab:c5:f8:7b:3c:8b:a1:cc:f9:cb:2d:
d5:7d:8b:25:af:48:7f:03:cd:c8:52:63:17:c4:ee:6e:41:01:
bd:4a:74:01:18:93:db:4a:be:35:82:28:73:1d:d0:d0:12:ea:
c2:df:25:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6/yPwuBGVGx5t7TuqNtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzkxMmEwNDExYmIwMTc0NTA3MDkyZDBjYTM1YTkxYWQ3
OTkwNWMwHhcNMjUxMDIwMDAwMTQyWhcNMjUxMDIxMDAwMTQyWjAzMTEwLwYDVQQD
EyhmZTMzODE0NzRiMDUwY2ZmYjkwZjIzY2Q5OTRlMjA4OWMwZjViNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLzS96E2HpO2X1J1Iho/KsJFN27l
+fJr0uCbkxhGJn+34zMfG4DwR0N0LCMk7lwigIWlNN7YkwHyUwYF174JTRWSiowV
y7YBIZ+q3qFpUVEwIjd+VeLJoq6eBwAPq/PJEMC9HTUYWrxp279su5VFQPNNY7CK
D7IbytzBzwpJS2l9wqC7IZykQXxa4rsLYzvnq+wNT7wG1qNGPkpjEQDWJZNPsR2a
/EwQmwzt6/OavAGhE7d52sOESWkatbmO4VvvykdrecPxILKdtNJYufk1MvfUPx9C
deY5jebyFpRVbu/Q5lo0TdsyaS9Hga9Skp7lq8WVHzjcyYxuRQUegyjhoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4zgUdLBQz/uQ8jzZlOIInA9bcEMB8GA1UdIwQY
MBaAFFPJEqBBG7AXRQcJLQyjWpGteZBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAt
ZTIxYzQzNmI2MmVmLzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAtZTIxYzQzNmI2MmVm
LzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglG/tTv4
0oNkuZYjtqsnwViULDapx0lrL4nS7uw2KiwAeSe0pKQdJ6wF0+8tKCkJSTSTTWXc
XE0J25YE/YvugFG1SgTmllsjPqrgW5MHc/VsqITvtIcihHvdvI+e7+DDAEEC9mDn
z5+vVCqVK99VQcGY29FYFyTkSNCMTlSStoGNiYcMJqHaxZWPWfAmafwdBEkZBFKk
7hHTZnLFCvenqoZMwaA8ReyVq/hv0jGg/FrnOSrMvcjtQizaSPotCnD/caZ0Xy1d
g3q+g2NqravF+Hs8i6HM+cst1X2LJa9IfwPNyFJjF8TubkEBvUp0ARiT20q+NYIo
cx3Q0BLqwt8l1A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:30 2025 by rpki-client