Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: oTtx7NCfRMIt3WzbinDHOnz16Iv/Et6lvABJS3KBWN8=
Subject key identifier: 3A:4F:1B:63:D5:A5:F2:00:04:97:AB:6C:2F:44:DC:D3:E3:C7:74:C5
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 0199FDD8CFCA3E4588C7F740F19BB47BDA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:08 +0000
Manifest this update: Sun 19 Oct 2025 19:01:08 +0000
Manifest next update: Mon 20 Oct 2025 19:01:08 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: REpQ5a0pLqXspPgg3TWaYZ9L82U+QpbGuHMZhi+c+8U=)
2: dXA2sXCeF-zEI-_J4kU7kczSGDo.roa (hash: yLUH5uzp/Ib7vlJR5HEnjKQN0s3hZM+CwSBPhsePj6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:cf:ca:3e:45:88:c7:f7:40:f1:9b:b4:7b:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Oct 19 19:01:08 2025 GMT
Not After : Oct 20 19:01:08 2025 GMT
Subject: CN=3a4f1b63d5a5f2000497ab6c2f44dcd3e3c774c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:c3:c7:46:a2:7f:99:9e:3a:50:28:e3:e1:
d8:4f:f6:30:83:e4:b9:d7:bf:07:19:56:6a:49:73:
fd:0d:05:10:3c:f1:5d:a9:f0:f5:cb:9e:38:e3:58:
fb:53:7d:e0:c1:cd:da:ec:bf:6e:bf:7d:42:e8:5d:
d1:1a:5e:93:d3:d1:74:d4:98:85:e2:c4:ad:cf:2a:
30:0b:bb:02:ed:e6:ae:ec:1a:45:a3:a1:b5:2a:5b:
09:22:d5:3c:1a:59:dc:68:dd:e0:fb:f6:5c:7e:eb:
5e:33:bd:70:0b:7a:60:c1:18:81:db:43:97:94:15:
3b:a2:d1:c9:41:a9:a9:36:0e:02:23:c9:cd:f2:b8:
13:21:54:9f:21:3a:c5:5b:6f:51:0a:2a:08:20:4d:
0a:26:6a:6c:22:e9:fc:88:3e:36:13:0e:7b:b2:16:
57:72:8d:e7:e6:a5:69:45:36:57:8c:7b:1d:1e:7e:
f6:ba:47:7b:eb:02:12:fc:46:42:35:52:04:91:3c:
ea:ed:f9:2e:b5:21:32:68:2f:a5:7a:8b:51:76:ba:
a3:e1:c8:05:f7:4a:32:f7:2b:e0:86:e4:82:cd:14:
2c:88:45:fb:b1:36:8b:40:fd:95:bf:80:97:d5:4c:
8d:83:92:fa:bf:b1:e7:67:7c:a5:74:d4:bf:af:98:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4F:1B:63:D5:A5:F2:00:04:97:AB:6C:2F:44:DC:D3:E3:C7:74:C5
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:49:d9:70:50:5a:48:8b:b0:45:31:93:16:b6:0f:44:0e:a0:
2c:d3:8c:69:26:f9:48:cc:ce:0e:cf:c2:c9:ec:31:39:6f:24:
c2:5b:89:02:ab:17:57:b3:34:7a:74:c2:77:1f:10:bb:24:f9:
a9:6b:01:cd:3a:51:8a:61:f2:7d:34:3a:ec:6d:05:e2:b1:ee:
3f:82:33:48:5b:0b:26:1d:cb:89:cd:10:fb:1a:ed:fa:38:78:
3b:91:57:58:b0:df:21:28:5c:f5:30:6f:ef:ab:3a:c0:8d:e5:
af:b8:5e:07:b8:2d:de:36:08:e4:a2:36:ff:b5:b2:1f:8a:51:
a0:15:09:58:83:56:26:9c:c1:4d:dd:a5:59:a4:83:a3:70:59:
21:0f:54:51:8b:b7:c8:c2:3d:0b:c9:9e:b5:36:b4:51:47:4b:
ad:07:cb:06:fb:78:55:5c:48:4e:b9:00:07:cc:8d:58:6f:a5:
68:fe:bb:81:7f:44:0d:e9:09:31:01:2e:42:57:ba:66:9e:6c:
05:69:66:f4:7a:c5:dc:44:cf:f8:77:aa:9c:a2:aa:6f:cf:5f:
63:d8:db:d1:aa:85:be:a3:c7:9f:bf:52:5a:e1:0d:84:6e:79:
0a:2a:bf:ef:53:49:f3:af:cc:40:3d:4b:99:14:1f:69:e9:7b:
19:3d:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:10 2025 by rpki-client