Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: WsTUNvmNoqDl/80SoZ3NSkw5KDuwwNwbtqQvcH0PjYs=
Subject key identifier: 42:13:07:38:D7:B9:9F:AE:46:F8:2C:6B:46:5C:A7:0D:E3:C5:DA:0A
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 0199FB7C748C1D4F32E0ACC5B13596B15AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: ey0zwyqlqpj/rEn0zE13+KOBjWNNKx/ZGgEsWGCmXak=)
2: ax8BOGm-GJfb7NvYozzZ62QdRvA.roa (hash: cIhLyiLj0Foy8DN1xACbtMKul9Di0Oi3YIqfjaju72U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:74:8c:1d:4f:32:e0:ac:c5:b1:35:96:b1:5a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=42130738d7b99fae46f82c6b465ca70de3c5da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:9d:c8:da:93:b1:69:79:eb:a0:52:70:97:
08:46:3e:c5:48:8e:79:4b:77:bd:1f:3a:97:11:a0:
36:50:6c:c0:9c:60:ed:40:29:ad:3e:d5:02:b3:71:
f6:53:51:6d:34:b0:60:87:3b:35:39:76:85:7c:3f:
e7:20:0e:d0:32:9d:c1:58:6b:28:c8:5e:c9:b2:cd:
01:4c:d7:37:38:55:a7:17:4a:e4:e4:e2:59:6c:56:
96:83:97:c2:fe:71:2b:f4:a5:b4:bc:24:fe:bf:af:
d0:e5:2d:d9:95:9c:80:de:d0:55:9b:33:ae:60:b5:
90:d2:d5:6b:83:a3:55:4b:86:dd:83:3e:1c:32:4f:
be:0b:e8:df:fe:f2:93:8a:de:82:3c:97:d2:80:aa:
ef:e3:5c:8c:19:b8:1b:7c:63:88:e3:5d:7a:ac:06:
51:94:ad:ff:5e:da:ae:b5:52:46:3c:37:88:af:e3:
32:a6:eb:83:01:14:53:25:6a:f8:46:ab:bc:e4:c9:
28:ff:19:cb:01:d3:88:2d:3c:77:93:4f:fa:6a:b7:
37:43:a4:37:98:88:44:33:3d:ce:41:d6:69:fe:05:
3f:a2:29:11:f4:3f:ca:a9:12:c4:9e:48:05:98:33:
a0:f1:79:c4:83:f5:32:44:94:13:49:a8:4c:52:b5:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:13:07:38:D7:B9:9F:AE:46:F8:2C:6B:46:5C:A7:0D:E3:C5:DA:0A
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:74:48:ec:9e:76:3e:8f:55:2a:4d:3f:f4:e6:43:e8:b3:ee:
ac:8c:3a:00:ff:03:c8:87:fc:cf:0e:a7:15:0f:18:eb:30:ec:
9b:5c:cd:2d:51:95:ac:2d:0f:4f:d0:34:b8:a2:0e:b1:c7:e7:
2a:6d:f4:37:55:ac:7a:7a:b8:07:25:1f:0a:6b:8c:61:eb:71:
41:0d:39:0e:ce:e1:ac:77:c5:90:d4:1b:bf:ec:01:0c:ac:2e:
64:bc:d0:21:70:87:81:33:64:3a:45:84:fa:dc:63:c4:0d:86:
81:65:28:12:f2:7e:dd:21:2a:5a:7b:57:b5:03:57:50:2e:0c:
96:8e:d3:d3:ed:e5:9b:62:35:79:32:fb:f4:6c:a6:ac:68:5f:
bf:7d:9b:52:82:ee:12:41:f4:9d:b8:cb:06:d5:e7:cc:6b:de:
5e:8d:57:e0:14:6a:0f:0c:f1:a4:45:2a:64:dc:d6:28:53:3e:
24:b7:04:a1:1b:74:74:e0:f5:7f:89:70:37:d7:9f:e1:7b:55:
66:f5:6f:90:e3:a6:56:e0:67:eb:96:6b:e6:7b:6e:e3:4f:e6:
98:b4:60:9d:17:2a:1c:f7:cd:1d:51:95:73:71:4d:f3:05:92:
6a:67:de:c1:07:61:bb:3f:d7:dd:8b:43:42:ff:8a:97:86:28:
41:1c:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:13 2025 by rpki-client