Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: GaTbuglQgihmK/bu7OHKgFWCJ2rgDlXEdH80OcbQqgA=
Subject key identifier: D7:6B:A4:9D:95:1C:0E:AB:77:53:D4:53:03:F4:29:09:4D:16:92:8F
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 0199FF229A8C9D3D95FEF41DF9D1BCBF2DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 0FF8
Signing time: Mon 20 Oct 2025 01:01:21 +0000
Manifest this update: Mon 20 Oct 2025 01:01:21 +0000
Manifest next update: Tue 21 Oct 2025 01:01:21 +0000
Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: 2Fl351kmEHvEPstR97CqNgtKDKvpTawfNFThDzhtbOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:9a:8c:9d:3d:95:fe:f4:1d:f9:d1:bc:bf:2d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Oct 20 01:01:21 2025 GMT
Not After : Oct 21 01:01:21 2025 GMT
Subject: CN=d76ba49d951c0eab7753d45303f429094d16928f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:a3:61:9c:c9:52:7d:f6:10:da:8c:74:df:
44:0c:cd:98:be:54:a6:53:4e:1a:88:72:fe:02:1b:
ac:81:9c:ea:36:96:34:40:56:1a:b5:7e:eb:7e:be:
e5:63:00:bb:a9:c3:6e:b1:1a:65:91:d3:7f:f6:51:
c0:87:fa:19:31:dd:00:d3:6f:56:bc:12:70:1d:77:
31:ca:de:27:f8:8c:76:16:3a:b4:6d:ea:79:85:f4:
ed:3a:c0:70:d8:98:2b:b7:65:41:10:01:ab:da:5f:
d7:1f:27:de:7c:bb:95:c8:b3:f6:74:6e:c5:90:c1:
a7:d0:54:df:36:a4:18:b4:d8:7d:b1:61:2e:e0:63:
2d:77:33:86:5b:88:58:02:a8:84:7e:a7:4f:25:bd:
9f:8f:ca:fa:6c:12:db:af:c1:28:1b:af:36:16:9c:
7e:20:e7:43:78:ca:30:b2:8c:36:ee:ff:2b:d6:39:
b4:0a:65:54:27:78:c9:f3:06:ae:42:aa:86:e3:55:
1b:87:aa:e7:5f:83:82:4c:7b:20:76:85:c7:35:e4:
64:c1:94:d6:4c:52:36:41:f9:cc:2e:17:d2:58:3d:
54:57:7d:b1:31:4a:5e:cc:1b:31:e5:0e:65:b7:53:
3f:3e:42:4d:ac:ca:77:92:da:c0:d5:1a:4c:b5:c1:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:A4:9D:95:1C:0E:AB:77:53:D4:53:03:F4:29:09:4D:16:92:8F
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7f:23:34:5c:d5:90:99:d8:c3:80:09:44:c2:0e:9d:b6:e3:
b2:84:98:33:19:76:bb:d0:38:cd:81:89:b8:d8:6f:2e:25:55:
98:70:1d:51:8d:eb:ec:7f:d2:73:3a:32:06:f7:c8:ec:9a:5a:
21:a5:f3:55:39:18:41:17:bf:0c:10:9d:1d:ab:7d:6f:42:ec:
36:10:b1:53:f3:a9:c0:0f:48:88:aa:ac:98:c4:0e:d7:af:3d:
e0:84:05:c5:fc:1a:71:dd:e2:37:5d:23:60:ce:11:ab:91:c9:
05:12:13:30:81:56:05:c3:f2:55:6e:11:a0:98:3b:8c:8d:cc:
d4:a9:c3:62:2b:b4:41:c4:5d:d3:f9:3b:12:cd:4f:b6:22:ab:
00:10:85:ae:f6:43:2e:c6:52:39:1b:58:99:93:04:fc:d0:c8:
d0:ee:99:99:4e:56:bd:81:c9:de:4b:0c:82:b0:fc:5d:c0:c5:
b4:4a:b9:bc:cf:72:38:8e:8c:e0:2a:31:11:a3:f8:dc:db:87:
4a:dd:7f:61:ee:cd:2c:11:f6:e0:ef:45:a4:f8:fa:24:fb:85:
0e:02:d2:9e:2e:49:b6:04:98:90:0e:18:4a:29:a6:6a:ee:80:
05:bb:34:53:f3:29:7b:f4:80:a7:7a:53:6c:a2:13:34:60:e6:
3c:bc:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:07 2025 by rpki-client