Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: 1nvkwIolAgiyrAS/MtN5VfBWpY07eeMqTGrPeb9rsJI=
Subject key identifier: 4F:71:28:64:67:55:FC:4C:22:A2:D3:CF:10:91:18:36:D7:D5:03:36
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 0199FAA14C1BAB9B92B309B937796D7ED5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 04:01:38 +0000
Manifest this update: Sun 19 Oct 2025 04:01:38 +0000
Manifest next update: Mon 20 Oct 2025 04:01:38 +0000
Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: 2BGn/0Z9yx5g7JbxosKpwVpRpB5qdTFQS1TZhlp3vxM=)
3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:4c:1b:ab:9b:92:b3:09:b9:37:79:6d:7e:d5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Oct 19 04:01:38 2025 GMT
Not After : Oct 20 04:01:38 2025 GMT
Subject: CN=4f7128646755fc4c22a2d3cf10911836d7d50336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:c2:aa:e9:6e:53:a6:80:97:ec:1b:58:aa:
04:01:10:52:b8:af:a9:8f:c3:54:ac:bc:c6:b4:b6:
8a:10:6a:e3:c0:96:b4:af:f0:3a:4d:01:43:26:13:
15:e2:04:71:9f:23:14:63:22:89:cd:2f:ac:c5:ab:
4f:44:04:d3:d6:09:fa:02:8f:5e:e5:e1:4e:80:e6:
a2:0d:f7:f4:c9:03:02:56:f8:80:2c:6f:d4:a5:89:
26:0c:41:a7:fa:0b:bb:42:91:b3:87:a0:c9:a2:57:
15:ef:6a:0c:1d:46:9e:7f:96:1e:79:e7:68:a2:81:
1c:d3:c5:09:02:ef:a5:46:6c:ba:a7:92:7d:35:9e:
48:dc:97:79:d5:e7:ef:65:0b:1a:19:9d:f3:29:33:
42:10:b2:9e:a0:a2:68:5c:6e:51:8a:f0:31:30:46:
f9:6b:b1:4b:f3:38:e0:2c:d8:72:91:a1:58:3f:6d:
5f:a1:d8:fd:e8:63:60:c0:44:ff:45:33:d6:4e:7a:
38:4c:39:bc:e9:03:4e:76:5d:0e:b1:c2:1f:02:b8:
ee:bb:1e:f4:db:26:a7:c2:ac:42:7c:60:5b:4a:08:
74:ac:9e:f0:98:ce:34:f7:26:5a:8e:bf:17:dd:33:
6d:32:bd:6c:23:b2:7b:e5:a0:58:6b:02:b7:d7:cf:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:71:28:64:67:55:FC:4C:22:A2:D3:CF:10:91:18:36:D7:D5:03:36
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:28:96:e4:db:56:76:d7:92:44:2f:01:84:a0:0c:0c:67:93:
a3:f9:7f:1a:aa:7f:7a:dc:5c:dc:e3:4b:a1:49:3d:b0:c2:72:
c5:3e:6a:b6:1d:9b:3d:1a:d2:eb:15:88:7a:ba:12:fe:28:2f:
92:af:9e:c8:00:3c:93:3d:b7:f6:51:68:48:0e:4c:05:0f:fb:
8c:bd:2c:cd:d7:ba:4e:21:b1:d3:01:e3:1c:28:8d:7e:a6:5a:
b0:96:55:e2:0a:44:95:99:a7:62:02:ad:62:8d:4a:39:31:37:
6a:93:75:dc:a0:8c:87:94:44:ff:6e:b6:1f:d1:06:1e:0f:0c:
f5:08:c9:4f:ce:9a:cb:fb:2e:97:46:f1:a1:ee:a8:ef:e0:de:
d2:1a:ac:79:70:05:0f:d5:85:3f:d5:76:46:b7:e4:e2:81:13:
ab:44:9e:a2:64:fa:1a:82:69:06:a4:58:a0:cd:a1:c2:3f:3d:
75:de:29:46:f6:19:e9:e0:7a:cd:32:06:27:8f:eb:d6:e6:f7:
ab:2a:48:c1:30:25:3a:05:47:2b:19:4a:fe:89:01:d0:9b:1a:
46:56:6d:74:07:50:4e:d6:25:0c:64:78:f9:e8:84:62:4d:bc:
32:fe:3e:46:60:90:33:88:6b:9a:ef:23:c4:47:19:bf:db:f2:
88:b4:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:59 2025 by rpki-client