Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: koEJ/sZLFvE+1FRmo4siSvB0LQmPiUYXmXgaVavxM3k=
Subject key identifier: 53:ED:A5:9F:55:B6:F5:DD:12:E9:08:A8:D9:05:90:CA:CF:C0:FC:76
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 0199FB45A03AB8253BCAC48BD2DBD2C88E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 16B4
Signing time: Sun 19 Oct 2025 07:01:07 +0000
Manifest this update: Sun 19 Oct 2025 07:01:07 +0000
Manifest next update: Mon 20 Oct 2025 07:01:07 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: UWeDjU6gK0OXbm5/wOT+9ZojW1R+jIoeG1hi2LFZtyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a0:3a:b8:25:3b:ca:c4:8b:d2:db:d2:c8:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Oct 19 07:01:07 2025 GMT
Not After : Oct 20 07:01:07 2025 GMT
Subject: CN=53eda59f55b6f5dd12e908a8d90590cacfc0fc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:33:e9:6c:a1:93:e6:4e:2c:0d:b8:59:06:
d6:56:90:bb:6a:6f:73:a3:5c:00:d5:a4:26:33:34:
58:81:e0:34:7b:bc:e5:90:c4:43:e2:1c:f7:3e:34:
3e:25:52:6d:f7:a0:01:ae:fa:5e:7b:31:07:7b:8d:
0a:5d:c5:b5:91:82:a5:b1:cb:c4:4c:79:0e:f5:a7:
0c:24:ce:0b:3e:7d:da:c7:64:2b:83:96:f4:d7:05:
e3:e2:d4:8b:52:8c:ab:8c:cc:aa:ad:d2:e9:5c:69:
e4:00:1b:9e:6f:e5:6f:bf:e4:bf:ea:d7:aa:bb:3f:
07:3f:37:1b:a8:ba:99:3f:b3:0c:48:33:0a:37:88:
22:64:1d:45:ca:da:79:32:c2:a3:e7:21:57:7b:ab:
3e:23:35:36:e7:0b:93:fd:e8:7f:ea:cf:2e:0d:c0:
cc:c3:fa:79:ca:fe:7e:60:f7:47:4c:05:cd:b7:31:
35:aa:3d:7c:96:e9:e9:9f:22:de:38:09:08:41:1b:
cb:49:79:4e:95:cb:53:dd:8d:dc:d3:8f:c5:cf:b0:
37:e7:31:e6:57:fe:73:85:3e:f2:2b:ce:8a:74:8b:
ae:d1:16:6e:3c:7f:5c:14:9f:e8:d3:c5:e9:7a:52:
0e:ab:f6:df:8e:2f:78:9a:f6:75:6a:ea:fc:00:92:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:A5:9F:55:B6:F5:DD:12:E9:08:A8:D9:05:90:CA:CF:C0:FC:76
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c5:c6:44:12:d2:45:a5:f2:0b:7d:1a:b2:fe:d5:9b:01:75:
b6:ea:8d:56:70:9d:60:83:58:3c:aa:b1:f4:1c:72:af:d2:f6:
bc:ad:84:df:fc:4f:23:ed:13:54:0b:6f:55:eb:61:a4:65:b2:
ce:1b:52:e9:39:29:9a:46:1c:6a:96:55:c9:31:47:c1:b6:09:
06:78:05:2d:20:e4:51:10:96:69:a0:8f:e7:14:50:0a:6e:56:
e9:da:d8:a1:41:0c:4b:4a:df:5f:99:b4:21:9d:b6:38:b5:2f:
34:a2:a0:d4:3f:75:c7:43:44:6c:35:d0:dc:1e:09:ab:09:c2:
0c:94:a4:34:32:1f:a0:da:f7:e2:89:5c:c3:94:0f:a7:25:91:
5b:c0:65:51:2a:71:f1:32:d5:4f:77:e5:d1:33:6a:4d:d9:1d:
d6:62:f7:28:39:dc:09:23:ee:5d:87:81:ca:ae:78:b1:1c:3c:
12:1c:07:28:00:c5:bb:b7:a0:72:4c:4f:8b:15:0d:be:d6:61:
f9:c7:00:7a:00:db:9d:40:ab:b3:1c:ff:8b:56:77:62:40:db:
b4:55:0e:ae:0c:2b:5c:76:30:a6:e8:ce:fb:90:0c:11:4c:d6:
6a:cc:a1:37:46:47:82:e2:85:6f:c7:7f:2a:63:82:99:e8:f1:
85:40:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:39 2025 by rpki-client