Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: S/D/Df5dlPADiaJkLM6fxpZJJ1p26QaG68XfmifpUNo=
Subject key identifier: F9:0D:92:49:67:36:59:10:9C:F5:C0:03:D8:1C:5C:D8:62:9D:AA:6A
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 0199FC583411DCC51679A20E8F43677A7F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 10DF
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: eXar47I/K+c2SqaO9P6mrLJy0HdNBpAfRtKcemuAclo=)
2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:34:11:dc:c5:16:79:a2:0e:8f:43:67:7a:7f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=f90d9249673659109cf5c003d81c5cd8629daa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:98:60:4b:b1:56:3c:c4:76:a0:50:7b:34:
52:fb:49:3e:10:48:b6:60:75:78:05:2d:80:3b:77:
ff:9e:6e:a5:52:7a:ff:bc:49:1a:db:96:33:53:b8:
44:34:bb:87:a3:a6:3e:83:ee:fd:5c:08:50:9f:cf:
59:41:5c:ee:b7:54:70:bd:6a:03:23:23:ea:28:99:
2c:80:ed:a6:8d:0c:8a:c4:74:a6:12:60:a1:65:f4:
95:26:75:ba:f1:80:22:4d:5a:06:89:c6:82:d2:77:
44:7f:11:01:dc:08:67:2d:65:a7:bf:40:e4:65:4c:
db:ec:56:ed:ac:4e:83:75:b7:95:a0:af:42:59:ca:
01:0d:07:d4:dd:75:33:77:21:61:23:b9:2e:3a:ce:
35:13:fd:b8:fa:33:4d:ab:92:da:4b:b6:00:c8:20:
32:3e:2d:3b:59:03:47:cd:71:8d:9f:1f:35:79:9b:
4e:88:2d:fc:8d:e7:34:7a:48:8d:9a:99:d9:00:b8:
93:a1:aa:89:c9:44:15:e1:e0:56:cb:7b:76:c8:e0:
06:03:7f:a2:d4:c6:ee:85:1e:86:74:66:bf:63:0e:
fb:49:18:02:8e:88:7a:e5:bd:ac:3d:5b:7f:7d:5e:
e5:6d:d0:e7:5d:3c:0b:c2:b1:33:3f:9a:6b:e8:ff:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:92:49:67:36:59:10:9C:F5:C0:03:D8:1C:5C:D8:62:9D:AA:6A
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:03:4b:35:11:33:8a:78:ee:26:62:68:76:76:c6:0a:da:
09:11:59:a1:a9:04:c0:14:22:ad:e5:f9:1a:e0:ea:5d:09:ee:
db:47:8c:5e:0e:fe:2f:8b:ad:cf:5a:c6:1b:51:1b:45:33:db:
91:54:86:d2:6b:3c:8d:43:4e:e7:d1:1d:59:64:62:4b:a3:cb:
09:fb:57:d2:c1:e7:d8:dc:d9:b1:c8:f9:99:75:61:eb:31:4e:
77:8b:98:72:25:59:02:f9:a7:e9:b8:2f:5c:6e:45:1b:50:70:
83:9a:31:a6:ab:90:c9:87:ce:98:df:46:17:e6:74:f7:47:8c:
52:a6:37:78:cf:69:fb:6c:39:03:bb:51:76:b0:94:58:fa:05:
b3:f0:88:a0:bd:9f:b0:94:b6:54:af:90:b2:ae:c3:7e:53:e2:
04:b8:82:23:99:45:a2:d7:73:ff:ec:ea:3b:6f:0a:0c:68:7d:
4e:87:da:3e:72:6f:4a:94:10:13:93:f2:cb:b2:05:0e:4e:35:
6c:fd:c5:30:0a:29:b5:8b:7c:33:20:07:16:73:07:d7:ad:a8:
a4:62:1c:c8:61:00:77:85:10:86:d1:7c:55:01:81:02:e0:55:
1b:14:94:b6:3c:98:59:e6:0c:5f:1a:61:a5:8d:a3:01:d7:32:
78:b7:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:52 2025 by rpki-client