Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: VdftpY+CDV6lT8o9aqKePI/va7chaX6MwzXex8dLlqw=
Subject key identifier: CB:30:09:BA:01:13:3C:19:43:75:D5:77:AB:0A:72:F7:DF:8C:F7:F2
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 0199FFC7D18D3DD2852E58A0C1F537931A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 0878
Signing time: Mon 20 Oct 2025 04:01:49 +0000
Manifest this update: Mon 20 Oct 2025 04:01:49 +0000
Manifest next update: Tue 21 Oct 2025 04:01:49 +0000
Files and hashes: 1: PrynGxhd3fBYSysYytSLlNvgiPU.roa (hash: c1xBK/MstkcP/5fvaGRoD60yvfbDsZTSPuvQcmy7U14=)
2: Py8NBn2wKQtg0zHbcBysEwIXqks.roa (hash: NTVpJIiHXmRF3xsTXgz/x/FsM7sCsul7uRQRW+IaP6E=)
3: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: YELoyUyroNOI91yX38renwlOb+jG933txR0GeklZOLw=)
4: WYEKXhWarkIaMX3EUO00ulkHiOE.roa (hash: U2QqWXZG6O8oPXfv5PztqHfihktp5N8jfu2uMFAxqk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d1:8d:3d:d2:85:2e:58:a0:c1:f5:37:93:1a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Oct 20 04:01:49 2025 GMT
Not After : Oct 21 04:01:49 2025 GMT
Subject: CN=cb3009ba01133c194375d577ab0a72f7df8cf7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:3b:76:c7:0a:f5:42:88:2d:a2:ea:c1:93:
15:c1:3a:b9:87:b1:e0:89:7a:2d:3e:e8:cf:c7:d4:
04:47:f2:21:c9:d3:65:ce:e5:39:24:d0:bf:92:fd:
2a:21:41:d7:b7:93:c1:b0:0d:68:2b:f9:02:72:1d:
6f:23:05:69:cd:47:88:9c:e1:3a:6f:8d:79:24:b8:
96:78:f4:f5:9d:df:3f:e2:83:80:ce:36:84:85:f8:
2f:b6:ee:66:ff:8a:03:fd:14:1b:f6:55:b9:b4:56:
fb:21:9d:24:91:30:49:08:af:0f:57:2e:4d:73:39:
cc:c9:ab:0e:94:5d:18:02:8b:ec:00:91:c9:6c:c9:
4b:35:79:52:79:ac:fa:5c:48:7f:f1:5e:3b:2e:3b:
f4:58:ac:47:16:8d:46:71:ff:89:e4:18:d3:88:c0:
32:b5:fc:72:c3:81:68:cd:9e:82:e7:c0:c2:03:16:
e2:02:9f:c1:2a:91:1d:b0:ef:b4:eb:0d:e9:10:3d:
b4:90:1b:f7:9b:95:7f:71:2b:3a:54:35:37:45:2d:
d6:2c:02:1a:7c:e4:58:c7:58:5a:ba:92:27:98:a5:
f9:3c:b9:44:3c:c7:86:43:77:b6:a9:22:77:07:eb:
f8:c3:3b:97:8b:5d:79:82:2a:c1:48:36:be:b3:44:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:09:BA:01:13:3C:19:43:75:D5:77:AB:0A:72:F7:DF:8C:F7:F2
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0e:01:19:7d:73:7b:39:1b:ec:6e:48:3f:5c:0b:a8:5e:52:
b0:1b:15:e3:37:56:a1:b6:89:ba:69:34:f9:26:05:12:86:06:
8c:17:ad:eb:9c:32:57:40:db:75:2d:96:4a:b9:0b:b7:11:eb:
2a:23:2b:28:e9:fc:71:c0:7c:5c:6a:ff:c6:01:d0:9a:93:ed:
db:72:b6:29:cd:2f:ab:e6:5a:27:d4:7a:8f:9e:da:c0:0a:d7:
46:44:bb:0d:3e:96:c9:58:a7:7b:5f:e5:31:df:19:98:dd:e8:
5b:0a:4e:50:3a:33:a6:d2:38:0c:6a:be:be:cb:6c:42:3e:b7:
a5:a3:7c:da:bc:f6:82:a6:e0:40:be:3a:7e:ed:75:50:2a:f6:
de:78:d0:11:d7:25:8e:cc:7f:e2:f6:d3:a8:6c:ff:7e:53:63:
a0:fc:cf:7b:8a:cd:af:1c:5a:5f:b6:c9:1e:52:bd:37:b7:69:
bc:6b:c0:25:ab:29:00:2c:7a:85:5c:11:96:45:3c:cb:5f:f1:
39:4d:2b:6a:b5:2f:4d:0b:b4:3b:08:97:b9:e6:84:18:b4:c8:
cd:42:05:95:52:c3:fb:93:7e:5f:1b:00:a1:c1:b2:9e:c5:75:
02:30:8b:1a:80:2a:52:e6:c2:ab:83:6e:74:ec:53:9a:5a:ed:
bd:63:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:46 2025 by rpki-client