Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
File: U6i3vKixHSeFDpGMpZlmmIAWKSk.mft (raw, json)
Hash identifier: cWmARnKt2WzS6YbbSvYA3cyEPYw0m7CvoEhTPzaJvMA=
Subject key identifier: 1B:09:AB:0C:3F:73:E2:8A:22:0E:1C:B3:F4:37:BD:5E:71:78:3E:D8
Authority key identifier: 53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
Certificate issuer: /CN=53a8b7bca8b11d27850e918ca599669880162929
Certificate serial: 0199FC21BED2D8062D2949FFBC8A536C257C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
Manifest number: 02F2
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: U6i3vKixHSeFDpGMpZlmmIAWKSk.crl (hash: uso3hHETzTzEdrCUtD9n69+YH5xaDREf69q2ZXgUakY=)
2: qST1YzpfG0Aj9HfkTwxj9U8CUhI.roa (hash: wruCCghr0kJqtbuyZdJFoTZhRH+nhRjwzTxdaCBX4hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:be:d2:d8:06:2d:29:49:ff:bc:8a:53:6c:25:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a8b7bca8b11d27850e918ca599669880162929
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=1b09ab0c3f73e28a220e1cb3f437bd5e71783ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:ca:e1:bd:99:76:c8:aa:c3:f1:7a:64:79:
65:f7:a6:58:b1:c1:08:47:dc:64:bf:d0:86:b0:3c:
6f:83:e9:0a:9f:de:ed:ea:d5:8e:0e:31:da:b1:09:
03:e5:43:9f:aa:d0:0e:28:67:e2:6d:2d:db:a2:07:
f1:98:3e:39:70:7c:6d:46:c9:0a:6b:7f:5a:ba:1b:
7d:4a:cb:3e:11:6f:8b:71:bd:78:99:00:8b:4e:ea:
41:e2:f0:30:b2:ac:8f:00:24:54:81:aa:bc:d3:64:
70:18:ef:d9:77:da:6a:34:c4:a7:b6:91:8e:65:05:
8c:0f:e2:de:35:26:68:f2:9b:92:62:0f:48:da:ae:
8a:cd:8f:e9:4c:f1:6c:7e:67:05:f3:ee:03:fd:5d:
b2:75:7b:a8:ec:3c:c8:fd:1a:3e:65:db:f4:5b:5c:
19:ed:75:c7:43:a5:f0:ad:fe:46:24:cc:d9:a9:75:
ca:05:27:1b:48:2e:23:92:58:ed:98:40:9f:0f:8c:
3b:1f:9e:73:bb:57:fd:6e:ef:70:6b:d3:7e:9f:ca:
35:64:b2:f6:88:3d:43:08:76:70:a3:85:a2:5b:5e:
11:a7:3d:df:ea:0e:27:b0:72:bb:c3:df:e3:ba:2c:
74:13:67:3b:f7:5c:90:93:21:62:35:e7:bd:c5:9b:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:AB:0C:3F:73:E2:8A:22:0E:1C:B3:F4:37:BD:5E:71:78:3E:D8
X509v3 Authority Key Identifier:
keyid:53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cb:95:46:07:3d:64:4f:d9:a0:60:df:0f:39:90:c3:6d:ad:
49:87:54:37:7f:0b:49:38:ab:80:73:69:4e:01:66:ba:68:37:
5a:86:e5:82:56:47:9d:ec:fc:ef:09:95:d8:05:34:2d:15:70:
37:86:c0:7e:48:e5:ff:9b:66:07:76:72:04:15:ec:d5:f1:e1:
d6:43:98:2f:81:12:31:a3:d3:06:8e:43:f9:dd:c1:cb:e4:6e:
bf:53:02:46:6d:a2:69:72:3d:0a:98:46:bf:3c:b4:9d:8f:d7:
af:95:67:fb:a0:18:a0:a4:54:41:76:65:94:39:d5:e2:b0:df:
8d:ef:62:90:1e:5f:18:02:96:15:7a:1f:5e:49:93:7d:d5:c1:
27:52:a1:da:c5:46:3b:f8:5c:5e:4c:09:c7:84:69:97:4e:df:
93:e4:1a:4a:cd:a9:0b:e7:2e:19:7d:a1:ba:67:7c:24:c0:9f:
7c:7e:d4:d3:9e:56:49:b0:49:bb:09:57:1d:ff:bd:ef:9c:44:
58:80:4b:b2:6d:2e:2b:a2:0d:88:bf:cb:7a:73:7a:31:13:13:
ae:60:51:28:99:a2:76:ca:7c:ad:91:54:f1:53:4e:5d:a0:7c:
fb:66:ac:4a:17:41:cc:ee:2e:71:f2:d6:d8:77:ff:70:bc:35:
c0:42:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:19 2025 by rpki-client