Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier: CbslgF7E41bcrUDAuFQiDYRBx4OLavy7WDS7gR6b2JU=
Subject key identifier: 46:83:DB:6B:8E:68:5D:D9:01:BB:E7:9B:79:5A:1F:84:53:8A:A1:54
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 0199FD6B6895172FE8B56E857184327429C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number: 16CB
Signing time: Sun 19 Oct 2025 17:01:38 +0000
Manifest this update: Sun 19 Oct 2025 17:01:38 +0000
Manifest next update: Mon 20 Oct 2025 17:01:38 +0000
Files and hashes: 1: SIEblnDTmxDkNQuR8GrQyNScjq8.roa (hash: 994/huZNdlRSyw8MDRW+EKE0ylyI66j7DW5sNtIspOA=)
2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: zzMnU/4Yb/i0408PORYgM2dfdafnAcsxGAPBHZV+uAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:68:95:17:2f:e8:b5:6e:85:71:84:32:74:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Oct 19 17:01:38 2025 GMT
Not After : Oct 20 17:01:38 2025 GMT
Subject: CN=4683db6b8e685dd901bbe79b795a1f84538aa154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:4c:f2:bf:2f:0c:9c:a6:a8:56:9c:b3:e1:
72:a7:1a:61:96:f1:79:b8:85:42:05:7b:06:1c:01:
e3:3a:d7:82:41:4d:da:22:2c:30:ab:b5:2e:89:14:
21:03:69:45:36:80:a9:90:66:bf:42:19:aa:8c:94:
d0:5c:a3:cc:7b:57:bc:23:84:c7:c6:f5:60:e2:06:
28:e9:3f:c1:a1:3f:13:d9:0f:1c:c9:1e:2b:7b:a0:
ec:c2:08:a5:26:5c:38:c9:c8:f5:c3:15:73:c9:2d:
a5:24:31:1c:45:df:bc:41:6f:7d:e3:68:df:d8:44:
c7:a9:64:0d:c8:52:3e:08:4f:ce:e4:20:a6:ab:fb:
8d:3f:27:ac:1d:f3:1c:d0:c4:7e:29:07:93:9a:2b:
2b:ee:d6:7d:a5:98:29:3a:6d:7a:72:a1:a6:45:60:
4f:f5:15:9f:ed:ec:94:db:8f:7b:b8:7e:57:96:8d:
98:1c:1b:1d:7e:05:e2:35:b5:6e:bd:18:26:8d:cf:
95:65:48:f5:af:e5:73:33:08:29:5a:6b:cb:c5:da:
8a:78:91:eb:92:26:e7:22:7d:8d:3a:63:45:e3:66:
2b:59:84:25:32:47:84:9f:f2:df:10:13:66:3e:54:
d1:df:24:e8:35:61:f3:cf:c1:51:20:21:56:8b:e7:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:83:DB:6B:8E:68:5D:D9:01:BB:E7:9B:79:5A:1F:84:53:8A:A1:54
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:90:ce:b0:ca:a7:39:eb:d9:fc:99:6d:10:2d:f3:bc:eb:70:
93:6f:73:48:23:44:d1:bd:a3:7d:70:be:52:88:d7:03:5f:1b:
b2:d1:db:e2:4d:92:21:da:08:84:61:56:c9:4e:46:80:a2:12:
fe:aa:f8:d1:b3:20:b6:b7:7b:fc:05:ea:bb:49:51:57:b4:6e:
45:bd:92:60:92:4b:da:32:9a:6b:8d:63:c4:2c:70:a9:a6:c7:
d7:a5:00:6e:69:39:98:25:10:a9:c8:2e:06:49:39:6a:f8:13:
9e:29:1a:51:c5:63:f7:19:e6:9b:24:31:eb:e2:40:f0:94:14:
8c:9c:5c:0c:14:3c:f5:fc:74:aa:37:53:56:5a:e9:0c:68:c9:
ce:a0:22:89:ab:34:11:10:6c:37:d7:a9:4d:ba:a4:c4:69:89:
23:e1:a9:c4:7d:f0:53:7b:f9:1b:d3:05:eb:b9:c8:d5:10:7e:
0e:cb:12:15:b8:e5:7e:68:ee:c8:f3:11:54:87:00:c3:98:97:
cf:7e:8f:03:d8:c5:af:cc:be:b7:a8:14:3c:b3:ec:ea:7e:e6:
75:ab:10:95:29:2b:5e:5c:15:ba:c9:ca:70:70:1a:ed:1d:c4:
cb:d0:8d:32:82:3c:70:c2:a2:3e:99:a7:88:bf:56:63:27:ce:
78:92:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:14 2025 by rpki-client