Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: KwqEpMZpOCJwt7Vhuy+JLbAHgh95C1gay9qJB52I1ec=
Subject key identifier: 20:BD:28:07:FA:F9:75:6C:69:65:29:9B:12:ED:B7:19:3B:49:1B:B4
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 0199FD34490FDF01D3A9E5B73187CEB3B10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:26 +0000
Manifest this update: Sun 19 Oct 2025 16:01:26 +0000
Manifest next update: Mon 20 Oct 2025 16:01:26 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: IIoRcqi6CHL8lII7b/U8HkXDbrjaKLu73yvQbPbaKv8=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:49:0f:df:01:d3:a9:e5:b7:31:87:ce:b3:b1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Oct 19 16:01:26 2025 GMT
Not After : Oct 20 16:01:26 2025 GMT
Subject: CN=20bd2807faf9756c6965299b12edb7193b491bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:6c:20:60:2a:6f:c1:fc:d9:88:79:29:b0:
8f:a6:8d:ff:d2:89:b1:9b:65:e6:b0:fa:bf:bc:78:
0d:ef:52:92:2f:dc:8f:83:ec:ac:54:c3:a6:25:81:
0d:99:a8:8e:33:ae:0e:b5:05:28:fe:f6:5c:a4:e3:
0e:01:0a:c8:53:ac:41:9b:31:c5:1b:77:2c:74:d1:
d8:4b:9a:e2:76:2f:56:d6:73:6f:01:0b:da:1c:f1:
d2:2c:26:11:66:bb:6c:dc:2c:9d:d9:23:2e:6b:3c:
1b:44:76:94:02:8a:97:1b:46:07:6e:b4:a8:f1:6d:
5d:77:03:fe:48:d0:c3:00:c1:6f:f5:10:e0:02:b7:
88:46:e0:23:f8:dc:bc:97:32:5b:17:80:fb:7c:d2:
a3:1a:24:b2:fc:4e:99:96:1b:77:b3:65:5c:43:be:
59:d2:ca:91:26:00:2c:04:cc:d9:6b:fd:c9:05:a5:
dc:ea:44:2d:0b:9e:a6:0c:6e:cd:af:12:71:71:04:
5a:ae:88:04:44:01:c3:8f:80:2a:35:11:eb:dc:69:
7a:67:ae:6d:dd:c9:51:db:bb:08:39:ee:4c:0f:d5:
f6:2b:ee:26:29:15:43:ce:96:d1:4b:0d:31:6a:d7:
35:29:52:9f:de:cc:17:b5:d2:6d:f2:26:75:f9:e5:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BD:28:07:FA:F9:75:6C:69:65:29:9B:12:ED:B7:19:3B:49:1B:B4
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:53:a4:39:c3:e8:d7:87:23:97:45:1d:03:08:12:b6:9a:83:
21:f7:75:51:56:a2:b4:04:05:b1:14:5d:7b:b3:05:72:88:ac:
94:66:a0:c8:f4:86:87:ef:ed:17:33:9b:29:1b:9e:c6:b9:a0:
65:85:3b:ad:72:a7:04:e0:10:9f:a5:84:b2:3e:b3:71:19:65:
8c:ed:5d:ba:61:a3:82:3a:b8:0c:23:1e:71:92:33:49:59:a8:
a2:61:8d:18:8f:6d:46:7a:a8:f7:63:1a:fd:f8:72:d9:d0:8d:
90:30:00:2e:e9:86:cf:a4:52:d7:a4:2a:89:84:87:fe:3f:2e:
62:30:c8:48:c7:b8:6f:9d:cb:20:78:13:fd:68:b7:78:d6:44:
71:6f:5d:30:77:00:1f:04:7e:18:8b:9e:14:b9:7b:bd:32:ce:
9f:d5:62:37:6f:b6:7a:ca:92:80:d2:d1:b9:81:90:3b:7e:90:
d6:29:74:8e:bf:1f:33:bd:9c:77:2f:66:43:cb:d5:43:8d:3e:
60:03:f9:ba:31:12:78:08:bf:2a:47:0a:69:4e:ea:eb:66:a5:
9a:ff:1e:10:07:4a:dd:31:96:ce:ef:fa:11:15:51:2c:16:77:
97:79:4d:10:ad:53:e5:94:0a:4c:1d:89:fa:a6:5f:d7:52:ed:
ff:51:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:40 2025 by rpki-client