Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
File: U_R6clx2jU3nj7MbtA_hbroZ8g0.mft (raw, json)
Hash identifier: 5jwghLPDfpFQB2X9s1i81eum40lJiZWtrhlqu5z4UAk=
Subject key identifier: 38:63:A7:90:AF:DE:70:5B:79:37:B5:85:1B:59:4B:D4:82:C8:D8:18
Authority key identifier: 53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
Certificate issuer: /CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Certificate serial: 0199FC584D19AB15BA44CA94AA02E55A4D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
Manifest number: 0A06
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: Iy0rHic_3PT8I4SllQOcj0rP21I.roa (hash: 1k4b/DPKi2PAqgzyxoLR8dS4rCq9uyypxDCl+6BFsrg=)
2: U_R6clx2jU3nj7MbtA_hbroZ8g0.crl (hash: E0JW2xqqe+f5qjm3qMv2yZ1Dwcs8QkaeQw03DcdQsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4d:19:ab:15:ba:44:ca:94:aa:02:e5:5a:4d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f47a725c768d4de78fb31bb40fe16eba19f20d
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=3863a790afde705b7937b5851b594bd482c8d818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:ec:57:4d:98:4e:f9:56:8b:ee:98:48:c8:
5e:99:f9:80:7c:80:a8:57:7c:2c:0a:0c:64:93:ee:
c1:7f:b3:44:65:bf:9b:f5:28:da:8f:14:06:a8:65:
36:08:8a:5f:de:ab:3e:00:8f:7b:c2:a6:69:a1:39:
bf:15:b7:d2:1e:9f:b4:f8:21:39:cd:cc:57:13:e4:
7a:fc:da:fc:9c:b2:60:f5:41:d9:94:af:ab:c9:34:
89:d7:44:fc:48:e5:f5:bb:64:7e:8a:e3:d1:21:cb:
41:9e:86:34:b4:e6:f4:b3:78:29:57:f2:75:2d:eb:
53:e1:50:95:a2:bd:7f:7a:26:f0:69:43:56:cd:a0:
6a:d7:05:e8:f8:0a:d3:c1:77:f1:b8:e1:9d:04:30:
6d:b1:cb:bc:b6:31:06:d5:11:a2:aa:e1:08:c0:13:
dc:92:7a:6d:44:ec:ab:95:2a:8e:5d:d5:8c:2e:87:
b1:5f:7e:d8:18:39:af:8b:2b:70:0e:3b:06:6d:a9:
cb:6b:17:55:b5:3f:fe:49:48:49:24:69:1b:e2:49:
58:8b:5d:62:d1:21:bd:7d:ec:7f:78:cd:82:68:61:
98:f7:16:92:a9:f9:a6:88:56:8a:6e:52:b8:07:e9:
09:dd:90:38:48:26:e1:a8:0e:3a:35:9d:f4:19:7b:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:A7:90:AF:DE:70:5B:79:37:B5:85:1B:59:4B:D4:82:C8:D8:18
X509v3 Authority Key Identifier:
keyid:53:F4:7A:72:5C:76:8D:4D:E7:8F:B3:1B:B4:0F:E1:6E:BA:19:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_R6clx2jU3nj7MbtA_hbroZ8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6401f3-6df0-4038-b0bc-574713845dbc/1/U_R6clx2jU3nj7MbtA_hbroZ8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4f:7f:c7:84:e3:ff:a6:6f:0b:8a:e2:eb:9e:65:a3:62:86:
73:7d:5e:5d:74:40:61:8f:78:7b:92:82:47:87:d5:b3:c4:a0:
47:ac:2e:06:19:a7:7c:85:32:01:14:c2:28:45:53:a8:7a:57:
4e:15:40:16:c2:00:04:b2:f1:fb:f2:ff:a9:6b:30:0b:0d:7e:
b3:ae:92:d7:1b:ba:e5:45:5b:fd:17:3f:2b:9b:93:fc:06:1f:
1f:25:86:2a:7b:4d:0b:28:d7:72:53:4f:41:d8:26:ba:65:13:
64:96:90:40:67:74:ad:b7:f9:95:15:38:ba:c7:48:d8:41:7a:
9f:f2:4f:ad:4d:a2:e2:22:e7:b5:e1:98:6d:ff:cb:2d:70:eb:
79:69:f0:8c:ee:a4:00:3f:76:50:9a:20:bb:02:0c:f3:74:2f:
47:66:ec:07:2a:35:0f:91:f6:0c:c2:2b:3c:cf:a3:de:86:62:
71:61:e3:98:99:05:18:46:8d:34:89:55:0d:ea:b8:62:d0:50:
0b:42:17:8b:a0:29:6d:8d:71:47:fb:a0:ee:2c:be:f2:e2:43:
dd:48:4f:fd:17:98:fd:c4:59:74:ab:0a:c2:05:4b:9e:50:d2:
90:1d:09:cc:e7:16:a5:71:d5:6d:92:a4:98:d2:0c:c3:ac:63:
9c:40:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:30 2025 by rpki-client