Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: F9RQX37/v08h1d21DP3NhW3b0kQqUnVRepr4HriAV3w=
Subject key identifier: 96:66:92:D4:25:FE:1D:99:C5:22:CD:24:63:77:27:FE:CD:69:C6:E6
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 0199FC8F57086196B8ABEEE2B40FE42E837A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: VUYgtcli4THHEZSgr5DyxThH5VGwsTXL70gEkMpwfww=)
2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:57:08:61:96:b8:ab:ee:e2:b4:0f:e4:2e:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=966692d425fe1d99c522cd24637727fecd69c6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:2b:af:0b:bd:5c:88:fd:47:34:ca:56:ce:
e8:54:8f:d3:d3:be:ae:91:6b:ac:eb:7b:f1:89:a6:
af:eb:55:e9:9c:7b:4a:aa:72:7a:3b:bc:9b:27:b4:
6f:69:ff:cf:49:6e:9d:a2:0a:46:6a:55:3f:1e:11:
f1:c3:2b:2f:e4:3e:07:d7:64:3d:ca:08:e2:3c:0d:
0e:f9:48:5c:0b:f3:1b:7e:08:42:0c:84:da:a4:89:
fd:bf:9c:ac:23:f7:e6:0e:b5:15:0b:1e:8f:b0:f7:
ac:f4:a3:26:6f:7f:fc:67:71:16:16:8d:8f:16:f0:
11:b4:a0:75:50:8f:bd:5d:8d:09:52:94:44:70:6b:
c1:65:3d:29:21:94:30:a6:51:7a:bf:a0:2c:08:21:
71:a7:94:04:dc:c0:54:5f:a5:e9:b4:2c:ae:65:f4:
6c:ed:2c:f1:db:76:7c:48:7e:9e:d3:0e:f8:ea:1d:
28:2c:c9:05:20:30:81:ee:b5:72:eb:79:9d:28:f8:
42:b4:d5:f7:24:65:c1:87:e6:07:6c:2b:d5:e9:d1:
41:62:e9:8b:60:61:e0:d8:92:d5:cd:c9:d8:98:4c:
69:65:78:6a:96:93:89:48:95:28:09:8d:c6:23:69:
95:bd:dc:64:96:6d:b4:f8:36:6c:84:ba:61:81:cf:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:66:92:D4:25:FE:1D:99:C5:22:CD:24:63:77:27:FE:CD:69:C6:E6
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:6d:ea:33:11:b1:66:b3:10:5a:12:f7:e5:a8:f4:03:51:61:
d8:25:59:4c:3d:bd:19:af:2d:55:34:ec:60:1b:af:a3:b8:72:
14:09:17:e6:7d:a7:93:1d:b6:e0:7c:60:01:ba:36:b0:e2:56:
e8:c9:42:0a:89:0b:13:aa:ce:45:a7:25:74:1b:4f:0a:f3:81:
23:1a:99:fc:31:43:c1:26:68:25:f3:f5:b1:c0:bf:df:4e:f3:
b5:8e:a3:04:84:af:ff:fb:f4:dc:b6:40:ff:55:ba:2e:22:fc:
c5:b2:74:4f:fd:b7:36:dd:a8:a3:54:e9:44:4a:c7:71:c6:1e:
4a:ef:13:ae:71:aa:1f:c3:ac:a0:80:d3:d6:a8:03:80:cc:7c:
51:e4:ed:94:e5:ea:38:d7:d6:66:9d:15:d9:ee:dc:99:06:d6:
a9:9c:e0:6e:a1:63:8d:55:41:2c:4c:a2:f3:19:1d:89:c9:4a:
c6:61:27:ac:1d:ea:d7:a8:df:c4:31:d1:6c:99:9f:7f:a9:94:
7b:c9:e3:4d:8b:43:0a:bf:d4:ec:20:a4:d3:f0:38:a0:af:48:
19:5c:b5:f4:2f:71:c0:1f:d4:f3:f7:7d:56:81:8b:5a:ca:83:
26:af:3c:7e:51:31:d4:96:d9:f6:c2:ee:b2:84:a3:dd:26:e0:
eb:49:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:50 2025 by rpki-client