Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: vlUwf8dI2BR32nQSCElDvRIC3NWEkfMWo4WjDVVsMXk=
Subject key identifier: 2E:A1:7F:86:5C:22:02:D4:9E:AF:37:3A:BE:EA:4A:8F:58:AA:58:8C
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 0199FCFD94772C1FB10012247CFF68F012B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: IvH/SDlK7AMABD8uLP/uVHmy+mrx1hBoGckmP4GrY6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:94:77:2c:1f:b1:00:12:24:7c:ff:68:f0:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=2ea17f865c2202d49eaf373abeea4a8f58aa588c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:47:da:5b:96:2c:21:c0:3d:9c:69:f8:80:
5f:38:2f:75:a2:85:8a:ef:5e:06:6d:08:4f:fd:12:
76:28:0e:8f:01:12:e0:f0:bf:e0:57:ea:4a:fb:31:
d4:66:a2:44:fd:58:20:cc:62:9f:8c:a5:65:98:e3:
59:d5:0e:64:64:8e:47:26:8e:61:04:66:2e:59:e4:
ff:97:fa:9f:49:7e:82:18:02:ab:77:f9:35:37:64:
f9:62:0b:30:ff:a9:b3:d8:9e:ed:a6:48:49:19:dd:
35:bf:1c:79:62:de:5b:0f:04:c7:2c:1d:4e:0e:61:
5b:4b:22:31:1c:d2:a0:5f:8e:6e:1a:23:2a:7d:a6:
69:96:33:11:a8:22:a7:61:b6:ab:92:b0:f6:6a:1b:
27:5a:3a:12:11:1a:ff:98:10:8f:d2:0a:92:e2:c3:
01:45:3e:0c:b1:1d:03:85:ae:67:3e:52:68:4c:6d:
e6:f9:d9:9e:04:96:5f:10:4c:3b:78:8f:a5:f8:91:
ba:b4:40:f8:31:71:b4:c9:20:2c:02:31:68:16:af:
bb:db:82:70:6c:be:c8:c4:9a:17:5b:77:50:52:26:
d4:5c:5c:03:f7:5b:21:4a:7f:14:ab:56:6b:55:82:
ec:8e:6a:1d:9b:f9:81:2a:2d:06:35:0d:cd:eb:91:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A1:7F:86:5C:22:02:D4:9E:AF:37:3A:BE:EA:4A:8F:58:AA:58:8C
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a1:9c:14:ad:d7:99:1d:33:a6:a4:a9:80:4c:c4:1e:4b:bd:
08:1a:04:b9:94:2e:a9:ca:39:26:57:1a:46:f4:2b:d5:38:5d:
c3:9f:27:40:8e:48:02:dd:83:a7:27:e8:1e:10:24:16:f8:ea:
c0:db:bc:00:8f:1f:64:60:2e:a0:c8:18:25:6e:cf:6c:1a:ff:
83:5f:33:e3:eb:a8:ae:f4:5a:ba:e2:e2:b5:51:4d:fd:e6:61:
27:ca:01:5d:18:5c:12:af:63:12:16:b8:6c:8b:7c:73:30:3f:
a0:fd:1e:a3:d6:43:25:5b:de:83:61:b0:93:34:5d:f7:72:93:
43:26:6f:04:68:5d:c6:d8:cd:5c:3e:2b:53:c5:5b:50:b8:95:
80:af:78:e2:cf:98:13:5a:ac:c9:cb:2c:f7:6c:39:7a:53:0a:
79:38:c4:c3:38:ca:f5:49:0b:34:cc:07:49:15:8c:1f:2b:c5:
6b:b6:c5:6e:4f:14:60:af:9c:ab:d9:eb:fc:e4:64:15:66:75:
36:85:d6:bd:f9:29:6a:2b:d9:78:8f:a8:e8:af:2f:09:81:20:
91:62:6b:b4:bd:bc:36:09:89:80:c6:b8:02:d4:7c:77:00:7d:
98:bd:86:c0:ac:b9:b6:dd:4c:b6:38:25:4f:28:17:aa:43:95:
58:48:6c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:34 2025 by rpki-client