Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: 8VMCzdHY5Y/SrAJHpuqHYXFZmxLQ7iij3CILegt/1C8=
Subject key identifier: BE:EC:3B:9F:17:AF:B9:36:9D:D7:F4:65:09:E0:E9:FC:CB:EF:23:76
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 0199FC218A823E427BCF30DD47E69967AA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 0927
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (hash: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: rHtlpYv155INYck+LxAohCyvC03WUUEe5jyydpKcOug=)
3: jMo_zU9oPYD4-ORBa0HOxz6ElxQ.roa (hash: B6xq/IGkR0N1YUdtA/OK7mLlIr8yn5LM2g8dHTL3gUI=)
4: qy2YkDqljayW8L1eKrjgUU5sPyQ.roa (hash: AsWZRC0AXC3FY0BmIha8yHFLeU4GKo6EqdCK1jqHGe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8a:82:3e:42:7b:cf:30:dd:47:e6:99:67:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=beec3b9f17afb9369dd7f46509e0e9fccbef2376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:c0:a7:0a:e4:7f:de:d8:43:75:ea:d0:74:
34:b9:a9:53:54:da:7e:6f:0b:97:97:90:20:91:69:
ab:c7:88:a5:73:ee:b2:d7:16:36:94:be:ef:1e:ec:
9e:f3:6a:2e:38:c6:2a:7c:ca:96:22:9a:a1:65:b4:
bc:2b:09:fe:06:a6:40:36:a1:bd:46:c5:c5:aa:80:
41:08:fe:ec:02:d2:f2:c0:74:94:14:16:41:80:dc:
f7:81:8b:19:fa:9b:45:c5:71:fb:a9:30:03:44:49:
5b:0e:94:b5:ee:29:8e:23:2a:4a:e1:7e:b1:d5:98:
72:a0:52:ec:23:98:3c:12:33:8f:d4:6e:a6:b2:ae:
59:c7:db:b6:92:05:1e:73:f9:5c:ad:50:74:c2:42:
06:c9:e7:18:df:f4:12:22:46:a5:cb:a4:20:8f:d6:
23:da:1b:83:05:c6:1a:cb:7e:49:30:8f:ba:33:44:
49:b1:02:31:3f:bc:1b:5c:0d:4d:a3:a4:6e:ba:f0:
8f:9d:a3:f5:a0:94:86:51:c9:08:24:8c:18:72:09:
d0:b1:19:f8:f8:f6:07:98:e4:6e:b2:c8:32:a6:6a:
c9:c9:92:27:9e:2c:33:de:ae:74:79:de:f5:9e:67:
2d:91:f8:f4:e7:3d:e7:8e:fe:95:3a:18:c1:ca:6d:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EC:3B:9F:17:AF:B9:36:9D:D7:F4:65:09:E0:E9:FC:CB:EF:23:76
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:13:e0:3b:79:fb:ce:a0:73:51:b9:98:14:71:34:53:6a:21:
1c:f3:93:1b:24:ba:74:f5:ef:5d:16:bb:d8:a3:27:3d:b4:ef:
04:cc:42:f1:38:5e:dd:b5:89:ed:d7:cf:50:07:7e:b6:1c:62:
b3:7d:c2:54:f2:84:85:48:19:82:7e:74:8a:b4:e1:58:51:17:
73:4c:43:99:4e:4b:1e:b2:f2:0c:41:28:04:bd:b7:8f:0b:23:
d2:7f:13:ee:46:80:72:8d:e5:a8:de:8f:d7:24:de:4f:35:4b:
f6:0a:f0:e1:2c:da:ed:5f:2b:84:1a:0a:84:c9:7e:c0:f1:e2:
a3:3d:0f:88:9d:38:91:44:bb:12:bd:28:8f:95:e2:bd:a9:08:
ad:58:b5:77:6c:f4:7e:b1:06:aa:cb:59:05:39:cd:b7:a4:27:
94:88:14:64:0a:88:35:3b:ae:cf:5a:db:d3:d4:95:a2:47:6a:
43:e6:e3:96:ae:e8:f4:c9:18:6e:6f:a7:7b:0c:76:77:9e:8c:
1c:a0:83:de:17:ce:b5:ea:ff:e3:6f:42:6b:79:d6:5c:73:e8:
8f:32:90:dd:37:95:c0:a3:6f:8a:5c:86:69:1b:99:16:56:68:
3a:70:02:32:08:a8:fe:c0:6c:2f:82:ac:1b:43:ae:4a:e4:4a:
26:f2:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:31 2025 by rpki-client