Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
File: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json)
Hash identifier: PwCZxChDW5Y2SUmqYUejKRopl0Uq+s4VVYkFuu9PnBI=
Subject key identifier: F2:34:43:EA:86:EA:B1:EA:F2:52:FB:D7:58:25:6D:06:6A:D7:55:DD
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial: 0199FBEC02ECD425D15B3285D2EB14648A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: AAtrMPOaRL5xGvuGJnOztQKIuNLL1WU8bnswdmH0ATA=)
2: kgy9uroMpZcNrgZQHiOHzstivPY.roa (hash: Xv6NaivYBEvpPSpEf7smylfVsD4m8uMWLcQBfecPM1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:02:ec:d4:25:d1:5b:32:85:d2:eb:14:64:8a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=f23443ea86eab1eaf252fbd758256d066ad755dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:53:bf:74:6f:8b:77:a2:39:37:00:cb:6a:
22:10:8e:47:f9:d5:2f:18:2c:6f:d9:ec:20:93:27:
a3:85:01:3c:40:a5:fa:e8:fa:6b:bb:69:22:25:67:
5d:21:43:a0:94:21:55:22:7c:7c:73:08:cf:ad:fb:
89:b7:62:dd:1e:e9:7c:1d:fb:b0:d6:eb:f9:c7:12:
f5:8f:10:c3:4a:76:81:90:8d:21:28:a1:c4:5b:bf:
95:91:74:ae:89:ca:f8:43:19:6b:7d:ce:3a:49:c6:
01:67:70:29:4c:38:a2:4b:09:53:56:6b:5e:5a:91:
b5:1d:6a:8a:ab:f7:ac:fb:cc:e6:69:8a:9f:bc:3d:
b3:3d:70:db:a6:8b:dd:1c:21:84:92:5c:2f:95:92:
3e:58:70:a4:f2:57:18:07:25:23:34:4b:b5:bf:06:
20:77:cd:81:a4:41:2b:86:df:44:20:a8:b7:53:73:
a7:cb:44:7a:d7:41:1f:0d:6c:33:1f:18:2b:24:28:
86:22:c8:7f:39:6b:05:5c:fb:24:96:27:8d:01:61:
39:73:dd:6e:4e:92:f7:d9:33:97:ec:f7:03:1f:ef:
10:24:5d:d2:12:8f:42:4b:de:6b:9e:58:7b:5a:ee:
73:d6:c4:d8:ff:92:2f:1c:a4:07:ae:24:4d:f9:17:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:43:EA:86:EA:B1:EA:F2:52:FB:D7:58:25:6D:06:6A:D7:55:DD
X509v3 Authority Key Identifier:
keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c7:90:dc:04:2b:a1:17:7b:e6:76:62:8c:b2:6e:12:07:a9:
be:0b:6a:9f:8c:02:36:04:45:94:80:5b:00:aa:00:f9:14:d5:
ba:65:67:e0:8f:33:9e:7e:82:5b:ca:e0:09:cc:e5:28:b5:33:
4a:c3:c2:e5:2b:e2:62:fa:b1:cc:b3:84:c8:61:bf:60:2f:bd:
0c:49:24:a8:8b:10:71:fd:a8:02:e8:9f:9e:75:f7:23:2c:c7:
ac:ce:f4:78:bd:41:ea:2b:28:e4:0c:17:0e:a6:9f:9f:8f:ba:
92:17:ba:61:30:c1:12:54:ca:89:39:f8:1d:05:16:cc:52:0e:
af:00:36:44:59:e3:c3:12:ed:00:29:34:cc:62:38:c4:91:6d:
a8:bc:67:8f:30:95:cb:26:0a:dc:bb:2e:07:4c:76:03:56:09:
85:da:62:05:51:4c:6e:ab:42:b8:b7:fc:e8:d0:56:c4:ba:b1:
3f:7b:b9:1a:9f:d1:6a:58:0a:10:ae:0b:b4:a0:ff:15:7f:fa:
25:7b:18:36:b0:b4:83:2d:f6:64:50:7a:a6:f3:4d:ec:a4:2c:
14:69:34:dd:f9:f7:97:6a:72:de:ba:d0:8f:78:31:e0:69:0b:
02:0d:84:27:df:80:34:e2:7c:0d:e1:49:8d:1e:91:46:bd:62:
44:13:ab:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:38 2025 by rpki-client