Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: 46f86iz6Ae2F1ny6k4+VxUcUZfnuAMMGfyP/ufO063c=
Subject key identifier: 65:C6:17:64:6E:0E:30:E7:C6:E6:0F:03:73:46:A2:92:34:B0:82:20
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 0199FBEBC0BA5909551DBA98A1D5BFD7C748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: RcjX3QjITyIyMpYXJVSUwNPMOFayJCFO1U9W+o1c/lg=)
2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c0:ba:59:09:55:1d:ba:98:a1:d5:bf:d7:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=65c617646e0e30e7c6e60f037346a29234b08220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:cb:0a:00:bc:5e:e1:ac:d1:ce:3a:a5:4f:
ec:f5:1e:22:41:f5:91:79:09:dd:65:13:32:61:16:
82:44:bb:e5:d6:e8:d9:76:6b:d5:de:9d:2e:d4:df:
b0:18:25:fe:53:be:2b:3d:33:62:53:aa:1d:d1:1f:
8b:2a:8a:5b:e8:95:07:fa:0e:9e:5f:80:99:37:05:
c2:9a:de:06:e3:5b:52:38:b3:da:e4:69:cd:05:e4:
9a:9a:55:24:29:2a:59:5c:75:02:03:da:df:03:f2:
fb:c3:7c:3e:9e:5b:7d:4c:8e:0a:56:73:6d:38:32:
86:97:8f:1f:16:87:a3:dd:8f:f1:17:86:12:dc:32:
37:f8:bb:cf:74:f9:8f:a7:e4:d4:75:bf:c3:f1:c7:
92:38:06:26:cd:20:23:dc:e4:1a:97:69:e5:eb:70:
fb:0c:c4:5f:d9:f5:38:c5:2a:20:93:b6:17:42:86:
e9:3d:30:f5:be:b4:c1:bc:a7:68:f2:18:32:92:39:
7c:e1:1c:e1:1b:73:67:60:fb:61:80:99:68:28:2b:
e8:71:26:a4:2d:aa:ce:f3:b3:18:e8:7a:b5:e7:20:
5c:81:4b:34:d2:ec:93:fa:59:23:b4:52:34:6d:da:
52:70:a6:35:5e:3c:24:0a:69:d6:7c:84:e2:d8:01:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:17:64:6E:0E:30:E7:C6:E6:0F:03:73:46:A2:92:34:B0:82:20
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:53:ed:07:f0:a6:77:d4:0f:97:86:d1:d4:9b:43:7c:1c:
83:f1:15:3b:cc:31:5e:58:3e:86:9f:3e:61:78:8d:dc:8b:08:
07:46:b4:55:08:67:77:e4:04:ef:4b:0b:1a:61:63:75:98:40:
9f:65:70:07:cd:9f:c0:d6:79:cd:f8:ba:37:d5:aa:ce:0e:9c:
99:cf:c8:a2:81:73:ba:3b:66:93:52:d9:4c:4d:9b:7d:d0:20:
b6:49:30:01:14:06:47:a3:09:7b:3b:bd:67:4f:fc:fc:27:a0:
70:f5:99:96:97:6d:39:50:29:d5:e2:d8:48:bc:a9:a0:98:2c:
f2:53:e2:f5:9f:c1:1c:73:07:20:14:4a:e3:f1:95:cf:44:70:
37:73:ec:1d:61:ae:7d:c0:0e:47:9a:2e:eb:aa:42:51:91:fa:
a3:2d:d1:bb:0f:5d:77:76:5f:53:02:6f:c3:6b:f3:fc:2a:ab:
dd:03:fc:29:2c:bf:f2:b1:75:d5:10:aa:b2:05:c5:29:0d:97:
2a:8b:ea:ce:9b:07:e7:ae:6e:34:3e:3f:b6:f3:cb:26:89:8c:
df:27:93:28:c3:3a:b0:59:a4:33:c5:cb:32:be:47:b3:53:a3:
c7:1c:a7:a3:46:f1:9c:bf:e2:e0:78:b5:13:91:98:72:0b:83:
07:e0:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:14 2025 by rpki-client