Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier: TXW0S52Ra/AqrTnz8iXchrT00S+iUjHEDWu4WhtkoG4=
Subject key identifier: A8:6E:70:27:8F:96:61:A3:0A:53:91:C8:37:C8:F7:90:3A:11:0D:70
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial: 0199FC8F8686E7F6F7D7398CF7A4EC242289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number: 1426
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: w+9/TR8BAlUi008za2mw/9TeDXSpF7umxGZNDdDgY78=)
2: p1W2xtpypFZeS4V60u-1DjDqTds.roa (hash: 34oWoq20u1/mqtBm1kWh1Zu5DKZerBQ57c/ZC8RMnIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:86:86:e7:f6:f7:d7:39:8c:f7:a4:ec:24:22:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=a86e70278f9661a30a5391c837c8f7903a110d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:95:b9:73:1d:ee:01:73:6a:51:dd:54:dd:
24:ca:e9:00:a7:5d:02:6a:4f:39:e2:02:00:fa:7a:
5b:d9:26:25:ed:28:df:c0:79:32:59:10:d7:86:43:
a5:30:61:99:67:9f:9e:e8:4d:a2:77:8c:be:9b:26:
02:2d:0a:78:5f:a6:b5:27:ba:f1:ea:7e:65:92:44:
bc:07:9f:b3:4c:2a:f6:bd:fa:50:b9:ee:6f:74:ca:
d1:90:b4:fa:86:c1:8f:73:74:0c:39:23:ba:65:e8:
c5:e5:2f:6a:9c:bc:58:00:57:bb:72:e3:27:d3:bc:
7a:63:76:ff:06:46:87:51:b2:24:ad:81:35:a6:e1:
a4:0c:ef:0c:58:94:07:96:b9:23:68:7e:10:f7:09:
72:6c:0f:9f:47:ee:54:37:03:fe:3d:95:00:6e:5f:
8c:a1:db:3d:7b:a4:6b:c9:64:dd:0e:76:40:17:18:
63:0a:ec:6e:d9:a1:b1:cd:92:11:7b:bb:c2:2d:89:
b5:64:f0:9f:f1:d4:9c:e7:9a:96:6b:a5:f6:53:16:
c4:d3:e8:d5:04:41:11:f3:9a:65:f6:79:ff:29:42:
f6:b8:94:bb:f4:6e:0c:b8:d0:7f:b3:57:e2:d3:19:
f4:52:e1:36:2c:2a:3b:58:74:b0:45:1d:da:ad:5f:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:70:27:8F:96:61:A3:0A:53:91:C8:37:C8:F7:90:3A:11:0D:70
X509v3 Authority Key Identifier:
keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a6:ea:50:dd:94:78:00:9b:99:fb:27:28:55:39:9b:eb:ba:
03:3c:75:66:aa:86:10:a5:3f:87:70:bf:a7:a5:16:d0:74:4e:
64:da:99:6f:75:a5:ce:85:6c:12:f9:bf:a7:17:9c:c9:ba:e4:
a8:b7:72:f3:6b:00:a7:79:6b:60:3b:9b:d6:ab:9d:6e:1f:6c:
19:59:33:cf:3e:f4:93:14:03:d1:e6:af:e2:f6:5c:f7:03:96:
26:ca:47:b1:55:50:b5:90:30:28:0b:b8:15:de:cc:cf:ea:f0:
83:2b:89:52:0f:1b:08:47:78:75:21:52:ee:94:de:e3:d2:7c:
3c:6f:f9:4d:84:60:47:2c:ec:a5:4d:77:95:06:8b:cd:8d:2f:
3b:0b:17:b4:12:c1:9b:f1:da:32:0b:77:9a:60:3c:50:5e:b2:
bc:e2:98:7d:55:6a:72:90:01:6c:58:6b:3c:7b:f3:6c:41:89:
de:d4:1e:f2:51:4d:c0:37:da:83:be:fd:e0:c2:3f:d3:b6:30:
23:d8:8f:7c:e6:c9:18:22:a6:cc:59:3b:0a:e8:45:24:92:2a:
68:80:49:d0:f6:de:e6:9a:98:d4:1e:08:53:97:36:ca:87:f9:
8f:bc:57:75:fb:cb:f1:58:31:06:7c:06:a9:c8:3b:16:8a:aa:
c6:26:9a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:54 2025 by rpki-client