Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: N415CboDDJIMImiSDp4bFMhECtk25KgkZ3GK5UciRsI=
Subject key identifier: 5F:EF:F5:62:82:26:B5:5D:DF:A0:92:13:A8:D6:AC:3B:34:E3:99:3B
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 0199FCFD6D674FC097A7C00162F9408E2180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 15:01:31 +0000
Manifest this update: Sun 19 Oct 2025 15:01:31 +0000
Manifest next update: Mon 20 Oct 2025 15:01:31 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: 3ePFTEn/EibiABA+VU76M4NF82HTAxWCQJtsZwSONq0=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6d:67:4f:c0:97:a7:c0:01:62:f9:40:8e:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Oct 19 15:01:31 2025 GMT
Not After : Oct 20 15:01:31 2025 GMT
Subject: CN=5feff5628226b55ddfa09213a8d6ac3b34e3993b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:38:db:41:07:8e:38:8f:08:2d:88:18:20:
ab:d8:96:b9:94:63:6e:ce:3f:0f:2f:cc:a1:8a:17:
c1:93:84:3d:ea:e3:3b:03:67:32:ab:ab:77:d4:5d:
d9:b1:fb:33:4b:50:0f:28:5d:f5:49:88:a1:b8:8b:
da:ac:da:81:96:29:ee:4f:dc:03:86:9d:7a:dd:4d:
1f:1e:aa:9c:47:d6:8b:80:7a:4a:8b:6a:55:37:53:
75:61:30:74:c4:aa:7b:ea:7f:11:51:66:37:39:dd:
10:6c:68:30:98:a5:37:c7:69:a2:94:2b:33:d7:e9:
38:20:48:6e:1b:d5:25:94:d1:0f:76:c5:30:11:f4:
4f:b6:9b:2e:d6:fd:1b:75:8b:dc:fe:61:64:5b:be:
b1:fe:07:91:87:ae:48:87:b3:8d:a4:ee:c2:83:e4:
73:bf:90:5d:b3:b7:35:dd:cf:66:59:11:a1:f0:75:
26:64:2d:1b:43:94:c4:7b:a4:06:4a:e8:35:8e:88:
05:e8:ef:93:7e:e7:f8:3f:61:b0:81:11:67:2d:9b:
e4:e4:d4:a7:3e:15:85:c4:1b:56:a9:84:9c:15:d9:
5a:f3:57:93:cb:6c:57:8b:60:f7:f8:b7:7e:18:4a:
14:16:c4:b9:9b:f8:1e:0c:e1:dd:2b:4d:81:45:cf:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:F5:62:82:26:B5:5D:DF:A0:92:13:A8:D6:AC:3B:34:E3:99:3B
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:99:ca:d2:02:08:da:28:84:ff:08:45:c5:28:d4:47:11:cb:
56:19:58:00:05:26:00:9b:6e:03:a9:cb:58:94:6c:94:0a:9c:
2d:1e:e1:82:28:8d:35:57:48:b1:a9:75:a9:33:b9:46:e1:a0:
b4:4d:ed:58:74:45:3e:09:e0:e5:06:37:b5:ce:62:49:5f:4b:
19:21:1e:55:1b:05:5b:c9:a9:a8:e4:79:84:03:6f:00:03:3d:
b0:ed:f7:4e:84:7e:ab:de:d6:24:95:dd:9d:65:4e:e5:6b:50:
45:71:d0:c4:52:f2:ee:11:b0:3d:46:00:71:03:37:29:57:a1:
45:51:35:26:39:4c:b8:19:af:40:36:14:1f:8d:75:8b:1d:b4:
5c:a0:61:24:8c:e4:f1:31:61:6b:51:e8:c8:1f:a7:6b:9a:f9:
32:42:0e:60:55:ed:c7:57:9f:e7:7c:6c:7d:c1:9c:44:26:6c:
81:b0:c8:dc:58:b9:3d:d8:b9:b3:61:d7:48:a0:c7:84:75:88:
86:ed:03:19:f6:f1:23:84:e9:00:c3:8f:08:6b:a9:74:64:e9:
a9:85:3c:11:a1:ef:61:3b:30:21:df:e9:85:ce:40:f3:4d:78:
9c:06:a5:a4:4e:98:81:48:8c:9e:ce:29:d1:d9:b3:19:3f:0f:
ad:11:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:37 2025 by rpki-client