Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: AkoEPEokCij6Y+rAxrRO5FyahOHem8NunVPZvDhBcVU=
Subject key identifier: 72:04:0A:C8:6B:2B:3F:F4:65:75:DC:88:35:2A:EC:BB:55:88:28:10
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 0199FC213B51D88E410D9B7493C7053F245B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 03C6
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: tEjiBjyJbuF6mX/ydBHtJJNzy+vUq0x0hDKGkg/2gD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3b:51:d8:8e:41:0d:9b:74:93:c7:05:3f:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=72040ac86b2b3ff46575dc88352aecbb55882810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:55:17:7b:a2:a6:ba:4b:90:f2:b1:42:a8:
e0:02:16:5d:74:b1:04:c7:01:b9:c4:6f:c1:50:5e:
c3:3f:15:bf:1f:0f:0d:1b:f7:9b:4f:ec:84:4b:f1:
fa:5d:85:2e:14:c8:ff:e9:6a:74:c5:1a:be:83:ef:
4b:e7:99:1b:5a:47:87:e3:37:0b:46:82:dd:96:b2:
3d:c0:b6:94:22:b5:7d:9b:d1:4b:12:64:ed:4d:37:
81:33:bc:da:9c:b7:8b:10:97:cb:ea:73:d3:ce:7b:
33:e9:08:d7:e6:2c:73:41:22:bb:42:49:d0:ab:26:
42:f9:61:a8:34:25:4d:40:48:b4:71:2f:33:e8:e7:
7e:e9:13:5f:85:54:ed:2a:1b:69:cf:2e:9c:4f:0d:
29:6d:10:b4:81:b2:8f:62:b6:07:10:ba:e7:90:3d:
cc:1b:83:9e:dd:f1:1b:0f:ff:16:12:c8:9d:f4:dc:
18:ce:7d:7c:e1:be:7f:58:36:14:be:17:21:58:2c:
19:3b:c6:0b:89:c9:61:5d:89:9c:ec:2d:ef:d7:aa:
60:f2:13:cc:38:ec:c1:b2:99:fe:d0:17:b6:b9:cc:
96:c3:cf:78:c4:35:c8:0d:3d:60:b1:4d:b7:0d:24:
4a:17:5e:d6:3f:09:17:95:a0:67:3c:56:69:a7:09:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:04:0A:C8:6B:2B:3F:F4:65:75:DC:88:35:2A:EC:BB:55:88:28:10
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0d:51:a2:f4:29:bd:b5:ae:18:85:c5:ac:b6:bd:ff:6f:4e:
57:93:af:b6:60:4b:47:50:ec:a7:9b:94:fd:d7:eb:37:b8:88:
d0:c8:65:31:49:be:b7:3e:ad:53:62:62:84:c8:d7:2b:d5:b3:
e1:9d:49:6d:1e:3f:32:f3:94:5b:2f:7b:c4:f9:f2:b3:4b:22:
8e:56:1b:2e:a5:6c:d5:0e:ea:59:8a:c7:ba:51:70:22:0b:e3:
f1:c7:51:7f:1f:9f:16:b1:bb:8e:ee:a2:9e:e8:d3:9f:7a:c9:
c6:a4:9b:8f:ee:be:1c:a9:f3:56:90:7f:6e:1e:35:a7:8b:cf:
80:ee:89:db:ca:f6:7a:b9:cd:ce:0e:a3:e4:0d:9a:d8:e6:e0:
67:aa:93:8a:6c:e6:5f:ae:ac:6d:5a:d5:ef:3d:d8:81:af:ce:
08:5f:f1:11:3f:26:15:c5:e5:1b:f9:0a:bf:c4:31:de:01:c9:
17:76:68:8c:3b:97:7e:cd:3c:ae:94:6a:56:b7:ce:da:26:40:
7c:5a:15:99:95:ae:eb:95:ba:88:4c:63:4a:30:9a:45:e8:6a:
44:3d:31:da:04:fa:db:dc:7f:6f:e6:98:f7:1d:ba:62:57:01:
ba:a5:5a:0e:f8:56:d7:8b:2f:a8:ec:ea:c3:e3:33:5e:a4:cf:
67:10:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:56 2025 by rpki-client