Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier: gGczsvb5MY6zzUKOrYSburtezq259tXDRet/QGwRfI0=
Subject key identifier: F0:6C:6C:00:CD:A6:8B:70:8A:64:B7:07:34:D6:81:52:D5:C1:31:69
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 0199FB45A63CE4FACE14C90C0DDD664D52A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: WolV1Wtd312vXrreWGt3f1xaoh3JdvIgEibK0ZZxDGw=)
2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=)
3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a6:3c:e4:fa:ce:14:c9:0c:0d:dd:66:4d:52:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=f06c6c00cda68b708a64b70734d68152d5c13169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:62:65:48:a8:91:d3:52:26:9f:72:c8:d7:
72:42:92:7b:96:8d:b0:b8:ee:79:8a:de:7b:a3:d0:
c4:01:4f:5c:a3:f3:4c:af:35:3c:43:81:f7:dd:73:
36:4d:37:d2:b3:80:64:5d:5e:06:d0:05:61:b3:cc:
0e:58:7c:c2:85:d7:4c:ad:3b:33:82:cb:6e:7d:ef:
0c:24:76:3d:bd:f9:3d:ea:20:8f:b2:95:b8:69:00:
ca:12:f5:6d:92:cd:14:24:1b:5d:ac:83:79:be:90:
c3:6b:7b:4c:eb:00:6e:1d:85:e5:f6:9a:86:d0:1c:
ea:9c:b7:9b:35:b2:f5:a9:ac:84:93:05:11:53:08:
f8:87:f6:f3:b8:61:b3:df:21:9f:27:29:29:1d:d9:
a7:aa:d7:73:14:61:50:05:b3:51:b9:31:2b:ba:4c:
d0:37:cd:ad:58:90:a6:1e:39:ee:a8:6d:ac:8b:92:
4c:8a:31:fa:5f:26:ba:43:45:59:de:01:84:0a:d3:
06:6e:62:9e:20:6b:d6:cb:72:6f:d6:f6:0f:92:5d:
13:5d:56:02:05:0e:3f:94:b2:25:75:05:6b:a8:17:
99:bf:1f:65:10:7a:bc:73:52:5a:c5:34:04:ec:72:
df:6d:8f:85:5b:4c:6a:76:95:ed:2d:18:11:a4:a8:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:6C:00:CD:A6:8B:70:8A:64:B7:07:34:D6:81:52:D5:C1:31:69
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f6:81:70:43:72:c2:f4:c2:f5:ca:35:12:53:1d:23:7c:16:
fd:22:01:a4:dd:4e:a1:b8:2b:d0:ca:5a:85:47:ec:1a:7a:f2:
e2:31:f2:d3:44:37:20:4b:a7:cc:00:45:73:85:57:75:27:36:
8f:b2:aa:41:1f:a8:5c:97:e8:53:8c:05:9f:c8:08:7f:95:d0:
bf:af:5d:c0:bc:4b:ba:5a:dc:70:15:ba:17:a4:af:e3:43:ae:
87:a5:01:23:87:53:cf:74:53:35:bf:99:5d:60:2e:42:ca:ba:
17:a8:f5:7b:fa:a9:c3:07:37:c7:ce:10:c1:7f:db:62:71:d8:
54:fe:1a:48:ad:54:4e:73:c7:6f:2e:af:0b:af:d9:ac:9f:28:
76:87:28:19:f3:de:a3:93:ec:77:e7:71:62:1e:c3:c9:ce:34:
a6:f6:2b:9e:fb:69:bf:8c:b9:68:f1:86:2d:cc:85:86:9d:20:
48:e9:b3:60:a0:5a:02:6d:bf:f6:28:b7:87:54:7c:79:24:17:
89:b4:13:c5:cb:f0:f6:0e:5a:6f:18:4a:e9:de:0a:d5:3d:ab:
a3:5f:1a:05:89:21:ed:b0:af:d0:e5:84:81:49:5c:54:0c:e5:
6c:82:d4:27:8a:4b:a6:c0:7c:c4:93:2e:37:b1:2c:35:08:ef:
19:10:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:27 2025 by rpki-client