Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: 0RCdK5O82nGJDfmG8RYwSi3J17/zxKjP61OdwXD6SVI=
Subject key identifier: 96:C0:65:63:11:66:1F:6B:31:A5:3E:6E:C5:CF:35:CA:A1:4F:78:8A
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 0199FAD7EFA4319F4D8786DA26746E004B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0540
Signing time: Sun 19 Oct 2025 05:01:19 +0000
Manifest this update: Sun 19 Oct 2025 05:01:19 +0000
Manifest next update: Mon 20 Oct 2025 05:01:19 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 0wjALC3tlTijt0HT/4jotx4pA7SnwHuv/Q4PbukwBN4=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ef:a4:31:9f:4d:87:86:da:26:74:6e:00:4b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Oct 19 05:01:19 2025 GMT
Not After : Oct 20 05:01:19 2025 GMT
Subject: CN=96c0656311661f6b31a53e6ec5cf35caa14f788a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:f9:ac:d4:35:5e:15:04:d9:88:79:55:6b:
2f:3b:2a:1c:3f:49:ab:86:2a:54:f8:38:69:52:14:
e8:66:e7:92:25:ab:0d:5e:c4:bf:2d:2d:7d:ec:02:
bc:04:92:41:c1:33:62:5e:60:bc:55:39:48:b7:ea:
19:0e:ba:bc:05:4b:ef:34:79:24:c4:b8:63:98:ac:
b1:fe:0a:d9:b1:fb:a3:db:79:69:16:0a:81:c8:43:
07:8c:d0:37:9b:dd:19:54:db:b2:c0:f1:ea:61:3c:
8b:bc:ab:a8:54:a1:33:6f:5a:71:c2:fd:36:2f:bd:
ca:c6:aa:a9:99:50:90:98:13:76:85:c7:79:8c:0f:
49:e6:49:66:24:6c:6d:3f:da:d8:6d:3f:f4:d9:5d:
3c:8e:54:be:f8:58:5a:74:d9:1c:8b:64:ef:eb:0e:
01:37:df:9d:d4:cd:a2:0e:4f:95:e0:27:68:1a:5c:
9a:9c:fa:3b:69:da:51:75:fa:7a:03:41:8e:98:60:
c2:fc:87:e5:cf:aa:df:b4:79:99:18:44:d8:e4:d8:
2b:36:51:f1:c5:9c:db:cb:cc:87:53:11:b4:c6:61:
1f:49:17:83:6e:4e:06:5f:43:b3:89:66:12:30:5f:
79:d1:2e:f1:c9:ff:11:64:80:e0:d3:e4:b4:4c:e4:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C0:65:63:11:66:1F:6B:31:A5:3E:6E:C5:CF:35:CA:A1:4F:78:8A
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e0:0e:33:78:23:18:62:4d:87:c9:fc:e3:55:15:61:77:1a:
14:ce:2c:29:3a:8e:0c:8b:be:3c:55:ab:7f:2c:a5:8e:44:6d:
59:7f:0d:67:59:c3:ba:8d:49:23:20:79:26:ad:c3:01:0d:c0:
10:f1:ae:91:f6:84:94:ea:09:31:08:a9:e6:2d:5a:2d:ac:03:
da:73:a6:65:6c:12:b1:79:db:da:3b:19:16:0a:f4:1a:9a:35:
12:a8:e2:a9:6b:0b:74:d7:9c:d8:db:47:56:42:2e:d6:de:08:
3e:33:c4:49:22:0f:61:47:f3:1f:5b:d3:a3:3a:94:01:6a:8e:
7e:dd:ce:d2:98:3f:ae:a7:4a:f1:d8:bc:2a:d8:0e:0f:68:1a:
ba:16:6f:43:ce:83:2e:fc:d7:84:1c:6d:53:b8:cb:a4:97:99:
5c:26:ec:9a:7e:3b:8f:52:48:e8:6b:4c:45:fe:a5:36:70:50:
43:59:36:c5:40:6e:b7:4f:56:cc:12:c8:23:f7:53:f2:a8:4a:
f7:45:e8:01:64:ba:d2:a9:80:94:5a:fa:0b:fe:32:65:cc:28:
3e:15:ca:d1:90:5c:e3:0f:fc:50:e4:4a:b2:63:c7:24:0d:fd:
47:fa:ef:90:85:8a:7c:80:fa:da:b4:c3:b8:27:44:26:fe:ce:
e5:b1:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:10 2025 by rpki-client