Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: qKl26ZPSHdhTj5kLP2wwfLHXOsUycCEWNO7yf29KEgU=
Subject key identifier: 42:1A:EF:85:91:B1:33:77:C8:C9:BA:7F:70:DF:21:2D:69:86:D6:7E
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 019A025A19530B4C3E8B757BD61BB891663E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0CDA
Signing time: Mon 20 Oct 2025 16:00:50 +0000
Manifest this update: Mon 20 Oct 2025 16:00:50 +0000
Manifest next update: Tue 21 Oct 2025 16:00:50 +0000
Files and hashes: 1: 29SLMo34FhaAnpTCRG4-JhzaoEU.roa (hash: 2fi9WOSprxmNRnuIjRed7XskP0Ewr4AfYM3eX1Xq9nE=)
2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: BlO/nDVZhvmjhuMXZXjcVT0xBJUfVdtJyPn4vS3futc=)
3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=)
4: uGMjxL6ptlnIymAtFcUWAuWkKNs.roa (hash: wNITF9iZ/qjiP9YwkUs7vr6JSMFVD33mpPFOLdc+0gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:5a:19:53:0b:4c:3e:8b:75:7b:d6:1b:b8:91:66:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Oct 20 16:00:50 2025 GMT
Not After : Oct 21 16:00:50 2025 GMT
Subject: CN=421aef8591b13377c8c9ba7f70df212d6986d67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:99:a3:e2:9b:08:ad:01:ec:13:3b:b0:68:
23:2e:4d:37:00:78:1c:fa:c7:b9:ff:79:34:ef:f1:
e6:24:26:1e:bb:cf:3c:0c:b5:ce:60:01:77:e5:b0:
cc:d8:88:a3:b7:29:10:33:c4:39:83:a5:6c:54:f7:
23:53:fe:d0:b1:49:7a:90:b7:45:bc:a2:b1:0e:d2:
fa:1e:c9:25:21:b2:87:9f:13:d4:5f:65:ae:7c:97:
ec:60:17:b7:49:72:86:e5:6c:0b:79:1f:71:d4:8f:
eb:f7:4b:2a:9d:6f:a9:38:01:35:ac:36:fa:22:8c:
4c:29:88:70:73:55:fb:ba:3b:16:3e:8a:1e:9f:5d:
9d:66:95:57:5c:91:ca:98:c9:05:64:ba:c7:69:ed:
61:30:17:09:38:d9:ff:71:d0:aa:2e:e6:9e:86:47:
5f:c9:7e:22:21:1b:6d:f5:26:48:90:1e:cf:65:fb:
3e:4f:f1:41:e0:3d:b2:f6:d1:b1:76:31:bd:44:7d:
76:ce:21:29:b9:c9:ae:7a:86:4e:f6:b6:d3:79:8b:
9b:57:22:cc:2c:3c:6c:45:47:d3:00:0d:5a:d3:56:
75:a6:3e:e5:ad:3b:b2:cb:00:0f:de:a5:39:92:77:
52:51:44:0f:15:7b:96:e1:cb:50:7c:53:ee:61:87:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:EF:85:91:B1:33:77:C8:C9:BA:7F:70:DF:21:2D:69:86:D6:7E
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0a:a5:02:fe:49:d4:1d:ac:8f:fa:54:0a:08:5f:ea:66:c1:
d9:2a:a9:e0:84:39:c8:22:6f:9e:63:f5:61:b8:57:0d:4d:20:
7e:69:ae:cd:dc:8c:80:de:70:ab:4c:75:0c:ed:0c:59:34:cf:
b5:00:32:8d:86:9d:e9:c9:83:91:fe:f1:e4:b2:fa:ba:9f:6b:
b1:bc:70:ac:11:61:df:43:78:0b:48:3e:e0:f2:4d:f9:a1:9a:
34:06:72:83:2a:87:87:3a:06:b1:ec:e0:5a:a2:7f:0d:80:0d:
33:52:e4:e8:b7:f5:98:e4:2a:65:50:c6:d4:10:72:30:58:1a:
da:5a:da:8e:a2:b9:a4:c9:f3:62:3a:c5:ee:4e:0e:16:ab:7c:
44:e9:b5:76:03:b9:4a:18:e3:5e:87:6e:75:de:2f:11:39:cf:
63:1e:14:7d:9c:85:17:db:30:68:6e:eb:ae:08:7c:8f:e3:58:
bd:69:b2:68:e0:b5:4b:a1:9a:83:83:d3:11:7a:76:e2:57:f0:
b5:e8:d8:7e:fb:6b:21:1f:fd:90:cc:5a:3e:f4:10:93:32:1b:
5b:e8:b3:8a:da:33:47:58:a1:65:ef:db:54:ea:47:97:30:01:
f1:7f:a4:ff:c2:d3:55:d5:39:28:12:bd:71:10:21:9c:ed:c1:
0c:43:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:36:35 2025 by rpki-client