Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: U6UkrogNNe883ZgahwTla9AKYStg2GhT/ttxGUA1X+I=
Subject key identifier: 32:C2:D1:BF:38:47:C6:DB:CA:10:AD:D2:3E:3D:F7:BC:50:D8:06:3D
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 0199FF598CD5D443731D6577177E1AD6B536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 1431
Signing time: Mon 20 Oct 2025 02:01:22 +0000
Manifest this update: Mon 20 Oct 2025 02:01:22 +0000
Manifest next update: Tue 21 Oct 2025 02:01:22 +0000
Files and hashes: 1: Mym9d5dVDoOmCDQV51AwB-FfpCc.roa (hash: w5OUNkmnrUSeDRW2ANklyuAzFVL6KyBf5AcPHxY8618=)
2: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: N+JAUwGbgr55wgxh/2ox2irdv14Y7+9BVOfm6gvZgj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:8c:d5:d4:43:73:1d:65:77:17:7e:1a:d6:b5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Oct 20 02:01:22 2025 GMT
Not After : Oct 21 02:01:22 2025 GMT
Subject: CN=32c2d1bf3847c6dbca10add23e3df7bc50d8063d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:23:75:6f:1f:79:b9:c2:de:52:24:2e:5e:
65:4b:10:92:10:3b:59:d8:01:fb:5f:ac:5f:2b:bb:
84:ee:12:0d:b0:a0:d3:b6:60:26:24:76:95:11:47:
78:ef:02:ba:4a:e3:60:16:c8:ad:e6:91:d6:38:cd:
f3:6b:c1:8b:45:8b:0f:47:e3:31:1a:7c:a0:b8:a6:
b1:56:3b:53:29:07:da:77:45:80:47:f8:f3:57:2a:
da:6b:a2:07:70:2c:97:a4:5c:9d:7b:0a:68:bc:3e:
36:10:d3:2b:e8:ae:b2:3e:23:59:eb:57:a2:d4:93:
de:5d:93:69:6d:b8:9a:3a:b2:f1:37:2e:19:1c:6e:
1d:f3:4b:42:92:5d:bf:0d:ca:f3:fe:fa:0b:33:bd:
c3:b7:d3:b5:05:d0:3a:29:f0:54:7f:20:e2:e7:84:
8f:ee:eb:c8:d0:da:e1:f1:98:ed:4b:67:cf:8b:2b:
33:0f:21:fe:46:77:18:34:3c:2d:89:ce:09:4e:a8:
61:4a:f1:fe:b8:74:ee:f5:6b:e5:90:94:4c:5a:33:
13:e7:4e:36:69:5e:0f:77:f2:80:2e:b8:86:1e:f3:
a1:0e:3f:43:4a:3c:a7:67:59:fa:d9:cb:82:32:43:
99:1b:bd:54:d9:dd:35:ab:a4:a3:be:dc:09:47:fb:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:D1:BF:38:47:C6:DB:CA:10:AD:D2:3E:3D:F7:BC:50:D8:06:3D
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d4:27:71:d5:54:bf:45:f4:76:ca:ae:5d:44:b2:f1:c7:e1:
f2:82:bf:d6:7f:11:2e:2d:74:bc:fa:ba:92:d9:1e:13:ff:8b:
ae:86:48:6c:87:eb:e9:38:34:59:c2:06:6f:0f:6b:84:56:88:
f7:f3:cd:96:84:57:d5:42:06:4c:c1:dd:b6:7c:44:d1:41:c0:
4d:9a:36:db:24:cf:6e:53:38:fd:9a:c1:ec:13:62:73:c1:2e:
87:7c:5a:65:a4:c3:b5:99:60:e6:e9:eb:bd:01:b4:0a:17:40:
e6:6f:fd:6a:7e:3c:b1:3a:72:12:e5:5d:54:5a:d1:20:ef:01:
e9:24:bb:a7:d0:17:6c:90:26:86:c9:d5:81:b5:4d:32:9e:3b:
18:1b:3b:73:29:5e:cd:b9:a5:35:d3:2f:17:51:9a:90:f4:fc:
27:76:4e:cf:2b:ee:5d:ab:94:cb:fb:38:93:51:c1:d0:8f:4c:
c2:2e:23:41:fa:ed:e3:8d:c2:b0:74:45:57:94:ca:48:4f:f0:
bd:f5:37:cd:63:c6:a8:05:81:07:6e:b3:23:32:70:f8:95:de:
31:dd:be:98:12:18:4e:70:fb:f7:a3:13:8d:03:43:40:97:4a:
97:d0:92:02:b8:f8:a9:c4:19:64:50:e7:aa:9e:11:40:0f:a3:
0a:3d:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:51 2025 by rpki-client