Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: v7GRulzjulHa1w4m15YbvC5yURCJ4mlMNhNsIVkn9OU=
Subject key identifier: 35:32:90:A0:54:A5:9C:F5:D4:39:9B:1C:EB:CA:4C:26:58:0C:18:AA
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 0199FB0EBEE1EEA73402A11D3C3D54CE52F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0E48
Signing time: Sun 19 Oct 2025 06:01:11 +0000
Manifest this update: Sun 19 Oct 2025 06:01:11 +0000
Manifest next update: Mon 20 Oct 2025 06:01:11 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: IfH/Ywnz4nzmpYy43LWXyuxZ1CNY4fhuPZyYb2+H2yc=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:be:e1:ee:a7:34:02:a1:1d:3c:3d:54:ce:52:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Oct 19 06:01:11 2025 GMT
Not After : Oct 20 06:01:11 2025 GMT
Subject: CN=353290a054a59cf5d4399b1cebca4c26580c18aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:9e:e5:ed:00:6b:3c:ef:8a:3b:70:96:c8:
52:50:e5:b9:5f:46:db:c2:7f:00:50:78:7c:33:7e:
2c:ab:8a:95:b6:ad:36:81:9f:02:94:50:21:4f:f5:
7e:19:c7:d8:15:0d:68:25:a8:56:5d:fa:11:3c:52:
70:9c:9b:e9:76:e4:0f:5d:04:3f:e5:f4:ab:5e:21:
d8:f8:4e:88:d3:7c:7d:c9:2c:2d:e5:9c:09:2a:bc:
2f:38:14:37:a1:9d:63:f3:2e:93:af:24:4e:2f:d2:
f7:76:f1:6c:ea:e8:cb:77:f6:1b:fb:8b:e0:bc:f5:
bc:c8:85:3d:c7:05:95:45:98:8b:28:7a:cd:db:0b:
1e:31:ff:72:45:c4:f6:f6:1c:bb:f6:ad:e2:9b:99:
fc:cc:6b:07:05:76:f4:99:46:2a:28:aa:15:73:47:
01:5b:16:61:41:50:33:74:3d:d3:20:7a:2c:5a:df:
08:3b:00:a0:ae:ff:4a:6d:bc:d3:68:59:67:4b:57:
e9:d6:91:28:72:fb:4b:86:c5:6d:fc:1c:f0:be:82:
6e:90:3f:c8:7b:7e:57:08:11:2f:f1:40:3b:8b:7d:
5d:d1:10:c7:ef:e1:4f:92:0b:17:17:5d:da:e9:ab:
1a:f2:46:06:81:ab:c4:48:cb:45:e8:f3:be:f7:53:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:32:90:A0:54:A5:9C:F5:D4:39:9B:1C:EB:CA:4C:26:58:0C:18:AA
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:13:96:a0:ec:93:b5:81:de:46:dc:8e:b3:48:08:f0:9d:4f:
99:1c:07:f9:a6:b9:1c:f8:8b:4b:93:c6:24:54:d7:2b:d2:ea:
20:c8:58:55:4c:79:a3:42:af:45:b7:3f:0e:a0:92:41:31:d8:
04:6d:37:39:b2:4e:05:aa:ed:31:b5:2a:3b:d0:ee:5f:e4:78:
3e:ec:94:b1:65:2f:51:1e:d5:f0:a6:30:15:3b:d3:fa:14:22:
59:29:65:75:ee:2d:c5:56:af:b0:43:22:c6:1d:f6:a1:53:95:
ee:44:f3:3d:bd:c9:e3:44:2b:ad:65:4c:b5:81:50:88:22:5c:
4b:2e:05:02:31:a4:7c:1a:bb:c1:de:8f:2f:8c:b0:70:34:f9:
e1:ea:3d:b1:c2:38:b5:2f:7d:e5:48:0c:80:f8:2d:8c:63:b5:
f8:48:a3:6e:27:a8:6d:a2:62:39:e2:30:77:c7:ef:bc:97:02:
00:d2:e2:29:a2:4f:bb:20:81:bf:48:41:bb:ed:d9:6e:e1:29:
f6:9d:8e:65:81:d0:89:b1:6f:38:94:d0:b4:83:55:cd:76:d7:
54:b1:94:70:f8:e5:d5:e0:e8:5d:2f:4d:af:82:0d:f3:c6:50:
46:3b:97:c0:b2:e3:1e:0b:64:69:2a:c6:20:16:db:09:68:a4:
04:b8:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:36 2025 by rpki-client