Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft
File: U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft (raw, json)
Hash identifier: C4ddRT2uIDT7kPu9XxZ6PEWGSJoE03vh3dVq8e/Xoto=
Subject key identifier: 87:C5:28:EC:EC:6C:70:C5:E2:70:23:62:58:93:A3:8A:63:BB:9B:B7
Authority key identifier: 53:65:D0:3F:D8:52:26:74:EB:17:AC:76:72:94:CD:11:F7:29:39:D1
Certificate issuer: /CN=5365d03fd8522674eb17ac767294cd11f72939d1
Certificate serial: 0199FA6A8E4E0A2AEEEF4E406F8E69BFCCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft
Manifest number: 25
Signing time: Sun 19 Oct 2025 03:01:51 +0000
Manifest this update: Sun 19 Oct 2025 03:01:51 +0000
Manifest next update: Mon 20 Oct 2025 03:01:51 +0000
Files and hashes: 1: U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl (hash: 4Rdeje5EMHjaj/jyJ5jTvCL2JZ4vPaPd9TQN4DV/i04=)
2: tfiH7BWA2nR2OChCX9UjtDlYY3Q.roa (hash: Nf7Xdo8U+iMEgw4lw6H1GywUDmKoW0FTEplT8uPlZJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:8e:4e:0a:2a:ee:ef:4e:40:6f:8e:69:bf:cc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5365d03fd8522674eb17ac767294cd11f72939d1
Validity
Not Before: Oct 19 03:01:51 2025 GMT
Not After : Oct 20 03:01:51 2025 GMT
Subject: CN=87c528ecec6c70c5e27023625893a38a63bb9bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:67:bb:2f:cb:28:76:4a:42:a9:3a:31:0e:
40:bd:31:ae:ce:a9:53:84:77:ff:5a:be:fc:c7:3e:
7e:e8:e8:80:92:b3:39:d7:8a:fa:63:bb:96:45:79:
1d:50:d4:5a:28:64:d9:2b:86:50:37:f8:a1:85:2d:
dc:c7:d1:48:9d:b4:27:0b:1a:0c:67:27:06:5b:2b:
14:a4:53:2e:47:e6:70:10:c4:fa:ed:f1:8e:4b:a7:
3a:50:fc:15:0d:46:b9:ea:aa:bb:55:db:e2:b4:e2:
1f:34:78:e0:53:a3:c4:34:fc:e1:ef:09:7f:85:ec:
4e:00:6d:26:3c:9a:2b:0d:b5:ed:26:74:fc:42:f2:
6a:18:44:32:c3:c0:36:52:42:6a:24:cc:e5:8d:01:
09:a0:73:3c:a3:94:0d:04:ec:d2:30:ab:43:46:96:
cd:fd:40:89:d1:a5:4c:53:5c:5e:1a:69:79:e3:90:
c0:2b:fe:33:6a:64:7e:b6:a9:fa:c1:ab:01:bf:eb:
17:7b:cc:2e:84:40:1d:39:c8:a3:dc:2b:80:ab:a7:
4f:ff:86:a3:f4:90:e3:5a:b1:8f:8e:7a:73:d4:bf:
c1:98:ca:d1:ae:75:f0:da:78:cc:ea:05:5a:ee:d9:
ae:aa:a9:24:3b:1c:d6:13:ab:20:13:3d:59:da:67:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:28:EC:EC:6C:70:C5:E2:70:23:62:58:93:A3:8A:63:BB:9B:B7
X509v3 Authority Key Identifier:
keyid:53:65:D0:3F:D8:52:26:74:EB:17:AC:76:72:94:CD:11:F7:29:39:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c0:6a:2e:44:3b:cd:bf:a7:5c:5f:b9:84:05:dd:ad:6a:84:
6f:0f:fb:13:d0:76:b7:9d:17:f8:94:88:ec:ca:72:36:f9:c0:
b1:5a:b8:5c:88:ab:aa:05:2e:b5:9f:0f:28:73:57:af:46:7a:
76:e4:b9:87:a9:a2:9e:e4:f1:ea:6f:c5:7d:ce:07:1d:35:53:
cf:d0:bb:81:ee:be:08:8b:cc:4b:97:9b:12:38:a8:81:ca:c1:
19:b1:19:41:7a:8d:67:0b:84:81:09:50:3e:86:fb:0f:87:9d:
8d:60:c1:04:f3:f1:f0:2b:62:8a:f7:ae:0d:7f:75:f0:f5:3c:
e5:2f:1f:a3:b9:f6:b7:bd:c3:83:7a:45:bc:96:b5:0b:9f:17:
21:6f:e3:8e:db:90:89:d4:31:cb:57:1d:f8:ea:6b:b6:44:fa:
e4:49:a2:31:85:ee:11:b6:21:40:56:4e:aa:6d:8b:68:b7:ad:
1a:da:62:2a:60:ab:99:28:75:58:ba:56:c3:65:26:ce:55:21:
55:ae:8a:5d:8b:c3:af:59:6f:85:01:b0:f4:57:88:2a:18:99:
9d:82:42:5b:dd:64:95:e0:29:6b:2c:0b:72:ca:ad:fa:c5:38:
d9:1e:3e:3e:41:1a:1d:52:16:0e:45:ae:8d:ab:8b:3a:16:6b:
cb:f6:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:54 2025 by rpki-client