Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: xn+jpxrgcPD5108SYZrjAEbhJovq4mFdjH4AyI4xNdU=
Subject key identifier: 13:FB:7C:D0:65:B6:C3:95:C7:16:56:21:8C:C1:50:2E:C4:1C:78:A6
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 0199FBEB52C500B823E0C29EA656F61EA5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 023A
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: VZUjwlgh/h7VaZR4e3Z+WfzSguN1MspwC3O8RHqWdeU=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:52:c5:00:b8:23:e0:c2:9e:a6:56:f6:1e:a5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=13fb7cd065b6c395c71656218cc1502ec41c78a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:85:75:f3:62:e5:6f:4e:af:e8:70:7f:a9:
d5:9d:9d:fc:33:1b:f6:ca:e9:74:8e:8c:54:9d:87:
57:05:65:7a:a3:04:d3:3c:12:35:91:e9:ae:f5:be:
63:63:68:5e:1c:72:6b:99:44:12:58:52:e7:a7:b9:
c8:09:1b:12:14:53:10:ac:02:91:72:bd:ec:90:44:
53:8f:b3:c1:68:62:16:ef:41:8d:9a:3a:6a:28:c5:
0c:ff:92:18:6b:23:a3:b4:47:aa:30:85:22:ce:4a:
f6:f1:e6:70:62:fc:4e:71:c7:96:cd:a5:bd:9b:c0:
c1:67:97:b3:1a:9a:cc:42:61:62:0b:13:1b:5d:73:
36:57:84:b0:db:af:8b:86:d3:c8:74:69:3b:da:4d:
fb:d1:ae:ab:db:f2:5d:4e:2a:9b:49:3c:80:b7:02:
38:b5:71:5c:0b:94:75:7a:25:45:30:11:02:45:2d:
4f:49:33:f6:14:46:d3:90:4d:a8:37:df:c9:df:0f:
0d:47:a3:9e:82:6a:7b:e8:4c:4c:89:7b:ed:73:6c:
80:c2:43:9a:97:f7:b9:3e:a1:71:0a:13:08:f5:48:
7a:11:ca:d4:75:be:eb:08:f1:76:92:53:93:3c:8a:
a8:b0:f7:2f:d2:da:2b:a1:9c:01:b8:50:41:5e:7d:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FB:7C:D0:65:B6:C3:95:C7:16:56:21:8C:C1:50:2E:C4:1C:78:A6
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ad:86:3d:ad:f9:66:9a:1c:de:cb:2a:72:f1:99:99:0f:03:
38:7f:9c:7f:b6:d2:d1:b2:9a:6b:a9:da:ce:66:64:b3:fd:1a:
1b:07:ef:bd:42:e9:77:8e:f5:e2:c7:f3:71:ea:b4:83:8b:5f:
c1:bf:d5:77:b2:d6:59:dd:1c:c7:3a:b6:9d:62:b8:9e:4c:a7:
a2:b6:8a:93:3d:94:47:59:61:4b:19:92:a3:79:e5:6f:9f:67:
d2:74:ff:b7:6e:b2:e5:6f:08:bc:b6:8b:7f:f9:9f:12:af:9f:
24:90:5e:52:b4:fa:c6:84:6a:32:8c:15:6f:3b:f8:f3:4d:8f:
eb:f5:f0:b5:38:9c:89:d0:95:05:08:61:97:c9:4d:62:5d:7e:
a0:8c:67:54:da:34:da:e9:3e:ef:0d:93:64:1c:5e:db:d4:d2:
6f:1a:4f:bd:b1:8b:4f:cd:77:18:ce:3b:d7:20:f6:0d:e7:e2:
b9:0f:22:9d:7b:52:2c:e1:19:9f:c5:cf:41:fe:46:4c:2e:cc:
5d:88:9e:50:96:23:cd:d5:d0:c2:5e:cf:89:1c:fb:6a:5f:fb:
ca:69:86:07:15:bc:15:71:05:ed:57:e0:f8:43:6e:ba:aa:c9:
52:1b:27:9c:5f:fb:a4:1e:55:51:ff:c0:03:64:75:61:41:c6:
10:7c:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:01 2025 by rpki-client