Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier: rabfG3vDG5CIht1YuPljSFDTDFY4fVXikZ1R4LJjoGU=
Subject key identifier: 32:97:1C:24:79:F6:39:36:2A:B2:31:46:7C:4E:5D:9D:CC:C2:3A:B6
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 0199FD3469A279B9F84F8B24DD4B0A357A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number: 0791
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: WHlNcktpbvYprLb7EWDQXfH+Xy+6/WuL2agIAc0VcaQ=)
2: gB1MwA1mtIVkiFQ2EqzsfbYOK18.roa (hash: xnYJIQNoCXwxomDZp5xDNLGopiNTka87rzFXVihnDvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:69:a2:79:b9:f8:4f:8b:24:dd:4b:0a:35:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=32971c2479f639362ab231467c4e5d9dccc23ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:1b:88:e0:ac:41:59:64:b4:67:46:88:e5:
fa:a9:0a:c7:d8:89:f3:d0:f7:2e:43:ee:2a:4f:dd:
22:6b:37:54:56:20:e0:df:f2:f6:d2:0a:3e:21:fe:
0a:05:68:6a:03:fe:b1:03:39:79:61:ad:04:38:76:
2a:5f:6a:e8:92:40:c3:69:92:89:85:d9:61:8e:63:
12:e1:ac:52:d2:66:bd:b8:b4:9d:d3:60:61:46:a7:
f7:7e:4d:90:57:71:47:7c:89:78:e5:7f:64:32:9d:
3e:0b:62:67:53:5e:2e:e1:5f:d6:65:53:fd:7a:68:
4b:48:21:97:7d:96:05:51:d4:a8:c7:46:de:e7:6b:
8a:3c:de:1d:e5:ee:9d:39:f0:76:b5:d3:0b:b1:ec:
9a:ec:f2:d9:20:60:55:a9:25:61:e5:0f:00:1b:09:
98:85:1c:62:2c:21:63:8f:e7:3a:98:90:0e:38:b4:
48:cf:9d:87:8f:d0:e7:3e:28:28:6a:9f:85:48:80:
4c:cf:07:61:b3:6c:b1:bf:75:3d:0d:dd:d6:64:eb:
f8:9b:59:65:7d:63:dc:fe:2c:ab:7d:55:d0:cc:4b:
cd:78:9f:7a:4e:af:c0:6c:fe:3d:5b:14:ad:7b:9f:
6c:00:e7:6e:be:1f:e2:01:7d:3f:c3:8d:7c:f4:07:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:97:1C:24:79:F6:39:36:2A:B2:31:46:7C:4E:5D:9D:CC:C2:3A:B6
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:75:af:df:09:f6:a5:93:f2:96:a7:f1:8a:de:f1:a8:6a:ca:
2e:8a:8a:51:00:21:af:0e:73:f2:0e:1a:16:80:c2:45:49:52:
39:84:86:93:2a:8b:5e:16:01:c7:ae:58:ca:f5:96:d9:aa:d0:
07:96:1b:33:74:7a:35:ba:dc:7c:3a:9b:c8:8c:6c:df:b5:41:
f0:87:c7:c6:bd:7d:90:6d:83:3f:72:50:17:dd:34:63:03:16:
10:54:2f:5b:65:e4:dc:cd:8a:50:d5:88:55:3d:b7:aa:45:e2:
7d:2b:aa:c0:0c:d4:5e:da:e4:88:db:99:fd:6e:a0:3e:f2:0a:
ff:01:9a:e4:29:fd:39:a9:c6:0b:cb:8d:79:6b:c1:cd:81:af:
cf:c4:79:0c:65:ae:41:f2:9b:4c:be:dc:dd:9c:2d:31:e9:b5:
79:6d:0c:f2:29:29:86:0b:bb:6b:c4:6d:61:2e:88:d2:95:3a:
50:5b:cd:cb:7c:a9:c7:aa:23:1d:f9:51:cf:24:42:d2:a8:18:
e0:42:36:ad:88:a0:c4:3b:3c:3a:2f:58:32:f4:7b:08:d4:40:
77:33:82:a4:8b:a9:19:20:de:6b:4c:ac:26:c9:dc:b0:3c:b8:
bc:01:80:cf:d1:35:2e:80:dd:d2:0a:4c:b3:f7:52:c2:74:04:
c5:b2:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:58 2025 by rpki-client