Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
File: U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json)
Hash identifier: 25JKLDqZfqKzUOYEcK+m9e/7QYpB5s1c/xGuGulxdsY=
Subject key identifier: 5B:B9:98:B9:8D:67:3A:FD:79:24:FD:A9:29:D4:39:E5:FE:65:59:F9
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Certificate issuer: /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial: 0199FD3498D85C9B537DB3E5F6B6D5CA5384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
Manifest number: 0DB9
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: GZldOEJkrutoTjn3MQnXcf09taM.roa (hash: vlltg4veeHpXkbEneS2WFuhIZv9HwJeSmQM3GzCbD1k=)
2: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: nUQGpHlH5sC5UqQA4cni9L6clXDo2RGXvys53Op9jDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:98:d8:5c:9b:53:7d:b3:e5:f6:b6:d5:ca:53:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=5bb998b98d673afd7924fda929d439e5fe6559f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:e5:9d:c7:db:00:4f:b5:95:4d:7b:43:3f:
ca:ca:8f:46:5c:c9:fa:3f:93:49:3e:8b:9b:dd:94:
e8:94:14:fb:eb:7a:f8:4b:a5:a9:d0:0d:f9:4c:ca:
c4:ca:e4:20:eb:ed:08:b8:0b:22:74:b6:b6:9a:c2:
87:bf:88:2b:fd:87:19:1d:9d:6b:18:4f:0d:4e:71:
c6:a7:4c:e0:98:49:59:33:fc:b6:1c:58:d9:89:d0:
d7:05:da:4e:85:3f:bf:32:e2:72:77:93:f9:ea:82:
b6:ae:4e:fb:ca:c0:15:c5:29:40:8b:82:c7:e6:a3:
69:d2:ed:2e:fd:34:80:69:36:96:cf:84:d6:52:bb:
46:f5:16:2e:d8:7e:2c:2e:d5:f3:40:9e:e5:b1:19:
43:28:2e:c9:15:cf:d2:74:1e:81:c9:9d:16:5b:43:
59:a4:2f:58:a1:ba:64:8d:b5:8b:cd:f8:6d:e0:17:
bf:81:51:a2:cc:00:71:49:ee:65:1a:7b:77:9c:0a:
44:58:ad:12:56:52:f8:e3:3d:10:94:9a:9b:0c:9e:
bf:b5:61:29:8d:1a:d0:29:ca:a4:51:56:4d:12:32:
7b:d4:1e:77:4d:db:51:45:8b:f8:c3:0b:59:21:ae:
ca:05:c6:80:a4:bc:27:bf:81:d8:eb:cb:5a:37:2d:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:98:B9:8D:67:3A:FD:79:24:FD:A9:29:D4:39:E5:FE:65:59:F9
X509v3 Authority Key Identifier:
keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c5:d3:0d:1d:4f:56:73:ce:f1:2b:42:27:48:65:97:ea:6a:
f2:85:ef:be:b4:0f:b1:a7:41:95:2a:b4:64:76:d9:62:54:f0:
ef:ff:b6:2d:d0:b6:7e:c3:46:cd:6a:07:10:7e:2b:a2:1c:e3:
8d:9f:0d:8a:6a:86:88:27:59:e9:93:50:21:74:12:12:9d:29:
01:70:ad:6d:09:d8:dd:ba:d4:0f:c3:0c:ac:cc:cd:58:3a:6a:
0a:fa:82:00:6b:e2:82:5c:e0:80:28:1c:dc:ca:c9:96:67:51:
14:eb:c2:3c:9d:d1:b6:c0:1f:e7:97:11:d7:03:63:87:ac:dc:
cd:d3:c3:bf:80:01:b5:07:53:8f:27:e8:94:b0:9b:ee:aa:d4:
08:5c:98:98:83:83:b9:d9:3a:4d:5a:93:d6:cd:ee:6d:11:d4:
63:da:e0:e7:ab:c5:ad:fa:c9:78:14:75:54:66:2d:ef:ee:bb:
9e:d4:55:16:0c:01:16:7a:db:4c:4e:5f:dc:ae:ef:33:5e:ed:
7c:b4:d1:2a:16:c6:3b:c3:96:80:25:1a:2c:5a:75:5b:bd:14:
c0:e3:3b:62:aa:4b:b0:a9:ce:21:34:d6:03:ba:19:c8:dc:79:
6e:fc:3d:17:99:5c:d3:68:f0:79:53:a7:91:cb:ed:6a:fb:59:
7f:43:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:29 2025 by rpki-client