Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: 1nR0EswCeBA3fOvRYLFzM5kg113Lk3CdxnERVoapey8=
Subject key identifier: 20:A5:9B:49:BC:02:6D:D4:03:10:34:5C:E2:56:65:FE:2E:90:09:33
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 019A01B5DA60A46F5F29BE679EBCB9AC8ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 13:01:26 +0000
Manifest this update: Mon 20 Oct 2025 13:01:26 +0000
Manifest next update: Tue 21 Oct 2025 13:01:26 +0000
Files and hashes: 1: B4WLDJveFZVT_m8u5hStR6xu-pU.roa (hash: Nm6S6CMIoGZCCHyW+OnF60p//0+/EWirysqpstDuGNc=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: 2Kfz95XhJHYQXoLLGMRoVio7oPibAzIadQSOR7QfHn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:da:60:a4:6f:5f:29:be:67:9e:bc:b9:ac:8a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Oct 20 13:01:26 2025 GMT
Not After : Oct 21 13:01:26 2025 GMT
Subject: CN=20a59b49bc026dd40310345ce25665fe2e900933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:8d:d6:e7:ea:da:c2:99:4c:09:66:c9:80:
4f:c6:27:5d:24:a3:e9:7b:33:e7:9a:69:f2:d9:99:
f8:fc:c1:d9:ae:99:74:b3:b4:35:df:f8:b3:9e:b0:
b5:83:3f:e7:b7:ba:85:f1:51:3e:e5:27:fc:74:fd:
36:8e:fc:4c:f2:3b:c9:5b:a7:0a:eb:c8:8d:b8:cd:
52:d9:bf:ef:f4:02:ba:07:ef:61:cb:16:73:4b:03:
1e:1e:ff:74:9a:b6:59:44:8c:4e:21:db:c5:e6:34:
3b:ea:58:f8:6d:dd:bc:2e:cd:a0:ed:3c:ad:1c:b6:
2c:42:c3:a0:c4:62:57:e5:95:40:fa:66:9e:e3:3a:
34:32:2c:16:9f:c0:c0:f3:a6:fa:73:42:f7:7f:1b:
f2:64:52:c2:e4:fc:9e:aa:5c:f3:a0:4a:da:cf:64:
30:28:e7:ad:4d:ba:e8:eb:2a:9a:49:66:ff:4c:1f:
1a:03:a0:c7:36:ff:61:e0:c1:39:e3:9f:24:94:4a:
b0:87:f6:72:4b:63:0d:24:73:76:59:d1:2a:a5:aa:
dd:e0:d3:dd:cb:f6:9e:53:77:0f:84:8c:a0:70:9c:
b6:cf:48:47:3e:8c:c1:6b:9c:19:66:af:c2:a6:d8:
30:18:e9:60:fd:1d:22:f0:92:16:6e:a6:bf:d4:57:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A5:9B:49:BC:02:6D:D4:03:10:34:5C:E2:56:65:FE:2E:90:09:33
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:8b:9a:ee:1f:7e:e8:93:a3:9c:77:4f:23:1a:08:92:48:
ef:cc:56:fa:63:14:92:5d:77:0c:62:a1:74:bf:d2:a2:f0:a9:
a7:8b:92:79:e5:56:97:f2:5e:88:0a:3b:de:31:2b:96:0e:17:
8e:59:90:af:10:96:27:e4:9e:4e:4d:68:50:23:69:ae:ac:fc:
5e:fb:3a:63:60:64:1b:97:2a:ee:09:dd:13:aa:92:cd:c3:55:
22:13:68:f6:f8:44:ff:cd:6c:4c:1a:0d:8b:19:02:4f:c9:d1:
6d:9a:27:06:8b:69:fe:e9:66:29:f1:48:30:75:91:90:fc:42:
eb:db:61:41:c8:a9:ec:09:e4:85:f0:f9:30:79:d8:db:76:85:
ca:fb:03:db:c9:e4:71:74:75:56:d8:d6:bb:d7:f7:b9:fc:c1:
ef:32:76:8c:ee:d1:db:91:1e:5a:09:d8:72:78:94:cf:05:46:
5e:e1:c3:2e:fd:d1:5f:bb:a4:cc:dd:c7:3d:7c:da:f3:27:88:
6e:eb:8c:d3:06:f6:bb:c9:8b:4d:a3:53:78:ba:7e:a1:5c:5a:
28:06:5d:d6:d8:d4:e5:4b:6a:1c:63:04:09:e3:79:ff:77:5e:
75:23:dc:12:73:8c:6b:4c:2c:ab:bb:c6:b5:92:67:1d:5e:e0:
ea:4b:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:52 2025 by rpki-client