Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: H+YjC2FVKCegg4wlbquLCAkV1T0VoimNjSNTrk6JPHk=
Subject key identifier: D8:24:FB:8F:95:81:E8:40:75:9B:7B:7E:D1:7A:15:A5:3E:5A:B5:8C
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 0199FC5869096AB9C6A669E8346964B197AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 13EF
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: Hik6emC1OK9bv0nTkBF4Myf3aq7cYj9IutAWk6Gj+Gc=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:69:09:6a:b9:c6:a6:69:e8:34:69:64:b1:97:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=d824fb8f9581e840759b7b7ed17a15a53e5ab58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:a1:bd:d4:ac:a8:6f:2e:d9:b7:a6:41:51:
ec:35:a8:36:47:80:64:0e:43:64:5a:6f:6d:60:ff:
54:8a:b2:d6:60:fb:c8:a1:cb:24:68:1d:ca:29:76:
cd:ce:a4:e7:bb:e2:61:d8:4c:dd:2e:06:bb:ad:0f:
4b:8c:6b:3d:ac:6d:b0:c6:8a:3d:53:d3:0c:e2:a9:
42:f4:73:b5:34:12:18:a7:b9:72:40:fb:c8:fb:4f:
69:b5:9e:d5:fe:cb:b4:d9:6d:23:ad:49:f6:4a:8f:
7d:e8:c9:36:69:8f:0c:6d:2d:27:1a:a3:a6:68:37:
71:83:7b:4f:94:5b:a7:eb:39:7b:e2:ef:d3:d6:56:
9a:83:a1:b2:51:e1:c5:f5:7b:d2:e0:11:2a:6f:4f:
46:70:7b:da:f8:87:8d:4e:57:44:59:54:13:a0:8e:
63:85:e1:2a:bd:b9:6d:cc:cf:fd:3a:e5:84:3e:26:
78:69:1f:d3:63:7e:10:ec:de:10:38:be:71:c3:fc:
c5:b7:a0:49:9d:be:97:99:ff:c4:65:1a:4c:f0:0c:
a2:2b:5d:4b:27:24:12:13:7e:ec:d5:3f:f3:8a:f0:
5c:19:69:b9:87:16:81:8e:d4:1d:5e:9d:f6:06:4c:
f0:b7:57:d2:10:95:5d:75:a1:e4:73:a0:37:b2:1f:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:24:FB:8F:95:81:E8:40:75:9B:7B:7E:D1:7A:15:A5:3E:5A:B5:8C
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:94:e1:df:90:f5:b4:e3:91:e8:b7:c7:e2:7f:bb:be:58:30:
fb:fd:95:e0:3f:c7:3a:a9:4d:d0:dd:70:2c:47:82:13:05:c4:
b3:57:0a:6d:b4:50:05:b4:b8:e1:76:c6:26:c0:f9:69:5d:2c:
28:df:aa:06:31:4b:8b:00:af:39:41:d1:06:88:e1:59:8f:56:
35:43:32:49:35:e3:d9:1f:e3:05:e8:61:b1:62:b6:2d:83:80:
9f:87:43:81:0a:17:2b:27:89:88:63:bc:06:cd:74:66:62:99:
5c:26:46:8d:c1:56:89:05:ce:22:95:28:df:5a:47:df:c9:fb:
ad:ca:d8:32:69:47:3a:2b:d7:18:d6:8e:26:de:21:6f:79:b4:
87:d0:a7:11:b6:42:ab:01:ee:ba:1a:52:79:29:25:50:65:49:
b9:b3:b9:01:f0:cd:dc:a3:5f:a2:25:de:18:66:af:06:f2:6f:
70:e7:8c:29:af:4b:43:d2:44:e1:fa:fa:c0:8e:de:cc:1d:69:
d4:2a:13:12:df:ea:ef:5d:05:88:d5:5f:eb:da:d7:d7:68:7d:
4e:ed:d2:f6:c7:ee:8d:d4:76:36:59:c3:93:82:6f:e2:56:26:
83:cb:aa:33:83:61:a0:f7:9c:25:a9:07:98:79:67:ec:29:55:
dd:e5:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:59 2025 by rpki-client