Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: EzgRWB139J57tC2QLqYMHUy0ZpwH4OAya7UHrkZ4aH0=
Subject key identifier: 52:C8:50:D3:6C:6E:3B:C1:55:42:E8:ED:CD:CB:7E:11:A6:2C:63:C8
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 0199FC217C6F3380B5A1D22F9BCB6B178409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 03C8
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: maQmZWBo7v78SlFc4wtj24aGeTdcd1vOoyPr9Gb3tC8=)
2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7c:6f:33:80:b5:a1:d2:2f:9b:cb:6b:17:84:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=52c850d36c6e3bc15542e8edcdcb7e11a62c63c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:b0:e9:8d:59:d2:6f:62:73:c1:a4:de:b8:
03:66:bb:e5:1b:10:3a:82:52:d3:61:4b:d6:e0:de:
20:cd:cf:8f:28:59:85:d2:c7:c0:89:ce:c8:1f:cf:
36:56:55:b0:96:f4:9f:0e:1d:cf:04:9b:89:9e:9f:
f2:42:45:06:c8:79:35:61:31:f9:a5:99:63:e3:c1:
80:20:5b:a3:27:2c:bb:f7:86:29:44:a4:17:fa:bc:
07:f9:e4:00:11:8f:d0:87:08:f9:58:17:48:03:66:
ba:c2:29:ee:98:11:92:62:b9:d2:eb:15:2e:0a:1d:
4c:16:63:41:4c:90:32:28:05:b9:2f:04:53:cb:a4:
45:c1:f7:a1:4d:5a:97:37:02:d8:2d:da:e7:8b:9b:
ea:c2:eb:7b:0c:06:15:9a:c1:94:4d:4d:07:40:96:
6b:e3:67:54:ef:f6:b2:5c:99:f7:a8:d0:1f:5d:0d:
c6:f1:31:17:36:3c:89:3a:c8:11:97:32:1f:93:6c:
36:24:b4:ed:14:3b:4a:8a:99:c3:a9:98:9f:6a:fd:
a1:01:5f:b9:2f:7d:fd:e7:25:ab:79:9e:2b:01:67:
53:95:6b:af:d5:c7:54:9c:c2:fc:dd:96:34:b1:8d:
ab:ac:61:69:54:2e:c9:5d:56:76:e9:23:d2:17:fe:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C8:50:D3:6C:6E:3B:C1:55:42:E8:ED:CD:CB:7E:11:A6:2C:63:C8
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5b:c1:33:70:a5:fd:66:dc:22:7d:49:19:5c:22:24:37:47:
f6:f8:3c:3f:8e:68:e2:94:24:bf:fe:d0:72:9d:e1:6d:c1:bc:
ed:6f:e6:be:96:6e:4f:e7:bf:9a:b1:9a:1f:57:6a:d3:be:99:
08:06:b4:5f:57:8a:54:bd:6a:c1:01:a8:16:de:61:39:8f:b0:
11:33:0b:c7:f2:2b:3a:31:b3:6f:9a:12:66:07:33:2e:71:9a:
17:6b:65:fe:57:69:63:b5:6f:72:b5:08:58:5d:9b:d6:0a:57:
f9:cf:6d:b3:1f:cd:cb:3a:a9:1c:ae:a9:85:b2:1d:8c:01:84:
24:10:9d:6a:ac:8c:a0:15:0a:ed:62:25:84:d1:67:94:e3:69:
b9:b2:46:86:b8:f4:b3:8d:5c:06:10:ca:c3:8b:60:6f:b1:e1:
dc:17:11:17:e1:b6:87:9a:16:eb:6b:41:84:6b:bc:26:e9:72:
46:44:6c:1d:d8:c6:4e:53:2e:bc:d7:b5:0f:ae:d4:3c:2d:7b:
c7:41:08:02:2a:7f:5a:aa:76:09:15:f2:78:77:93:75:af:24:
c6:2c:4d:44:6c:96:37:af:94:6b:10:84:3f:3c:7c:99:fa:85:
1f:44:c1:ee:c0:cc:41:90:de:0a:c4:bc:ae:66:a8:eb:56:42:
a0:02:68:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:20 2025 by rpki-client