Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: bdMSU7c7KYtDFu2h/gfHYX4z/NfDQ9I/9AvYTbLKwmc=
Subject key identifier: 8E:B1:C4:37:54:98:74:99:8A:08:23:75:16:18:2C:CC:11:7D:68:AD
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 0199FC8F73BB392E870D07219A6FFB87E07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 1604
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: 4X5XPxmPxnpuWfkMNjjLjTt3RpSVco6EQaMMg+Vslj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:73:bb:39:2e:87:0d:07:21:9a:6f:fb:87:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=8eb1c437549874998a08237516182ccc117d68ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:fb:e0:a1:2c:a7:e7:a9:24:46:d3:92:6f:
b6:59:7f:8a:bd:79:a1:5d:b2:12:27:fb:d8:ec:ef:
13:5b:93:ba:08:66:5c:3d:11:17:b5:3c:1a:19:c4:
dc:0b:af:d4:fb:e7:2b:02:d6:f1:f4:16:8a:d6:e4:
0c:73:4c:b8:59:99:b3:88:0d:8f:8f:b6:8d:1e:5d:
da:b7:a2:50:82:42:05:69:95:a4:63:65:cf:0c:88:
d0:7a:bb:2f:ce:77:ba:ed:4a:ea:f3:36:45:8c:1d:
2f:d4:c6:3e:50:8c:86:fa:d7:99:41:f5:e2:3f:69:
ef:72:ab:a2:3c:20:16:9f:b1:65:e5:9e:32:55:6b:
c7:db:69:24:8c:3f:98:25:3f:6e:f6:42:03:f3:cb:
05:e1:0e:66:50:df:2d:e8:57:b7:90:b5:05:5d:cd:
dc:c0:aa:d2:fb:d3:3d:c2:76:f9:d1:36:b1:da:2b:
24:69:b8:12:6a:05:a2:01:c3:69:b8:73:33:a3:f9:
cf:2f:36:be:30:c5:f8:42:da:53:fa:4a:db:cb:3c:
76:eb:fe:4c:00:17:3a:d6:89:8c:26:21:05:6b:d1:
e5:88:a6:c8:50:4f:d6:92:da:53:cc:dd:90:d7:23:
61:e9:48:7e:cd:3c:3d:fa:8c:d8:7b:66:0c:77:51:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B1:C4:37:54:98:74:99:8A:08:23:75:16:18:2C:CC:11:7D:68:AD
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fd:cd:cc:d0:32:80:86:01:11:a3:be:5a:79:5c:97:5d:c6:
50:9b:b7:6f:9d:80:e7:c1:ae:42:39:be:1c:cb:5c:33:0d:a8:
d0:c0:87:5a:48:a2:d3:a4:2a:9d:36:7c:ae:4a:ff:46:42:21:
d8:ae:3e:e8:c9:0a:82:8e:66:2d:10:e4:8e:4e:b7:3a:d5:e6:
aa:53:bc:95:7a:51:35:f7:51:b1:f1:e4:ff:31:22:24:de:60:
7c:2c:8b:bb:03:ec:2a:3e:a9:84:c4:95:ab:38:55:a7:a8:e9:
08:3a:01:90:34:a2:02:2b:71:c1:18:ce:26:3a:17:1a:df:44:
95:94:31:85:9b:65:03:51:11:0b:e0:f8:c3:94:28:83:a1:74:
aa:63:0a:10:4e:2f:90:6d:09:64:6a:90:a1:0f:5e:10:12:df:
84:3d:88:03:3a:ee:28:a9:c3:00:43:e4:56:cb:5f:60:88:96:
a6:cf:30:cb:0b:d7:25:60:b8:e8:d9:a6:53:d3:7d:c6:7d:a5:
51:97:59:15:9f:86:8f:d3:87:56:54:98:99:eb:9c:73:29:24:
a2:03:fe:b3:b3:36:bb:21:df:ba:b9:70:f2:c5:43:fb:36:9b:
a4:bf:61:c5:39:1b:06:9e:99:34:19:68:f4:20:42:ff:0a:fc:
ec:b2:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:37 2025 by rpki-client