Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: vde8zZgaGDaY8PmrezeZjX2Ueu6ujwrQTiXJhZQtRHE=
Subject key identifier: B8:25:91:07:43:3E:CF:FE:04:EA:09:AA:8C:A8:C7:82:42:45:5A:C1
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 0199FC58289B41FFEEDB3FCE1A964365CB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 0E7E
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: nryIGlK4TmKmlGndmSIsm8P1mXsED7tkVHKr8Bvy8Kc=)
2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:28:9b:41:ff:ee:db:3f:ce:1a:96:43:65:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=b8259107433ecffe04ea09aa8ca8c78242455ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:39:41:70:4a:e0:ce:fd:17:4c:5b:03:81:
80:12:6d:30:c5:99:98:df:23:52:fc:5c:64:f6:f1:
66:9c:6b:ba:74:e6:96:e6:b7:68:aa:80:46:ff:99:
cc:2f:4f:f6:5e:2c:db:9d:45:b0:6e:4f:e4:27:3c:
a0:8a:83:e3:3f:c4:2e:64:fe:4f:8d:ca:10:58:18:
27:34:ea:3e:f4:f9:77:eb:44:45:66:39:50:cf:9c:
60:e4:b0:e1:2c:56:65:0f:ef:00:61:47:b9:34:07:
cf:76:c3:86:6a:99:c2:84:c4:dd:79:2f:31:c9:32:
0b:1b:c0:f5:16:d6:52:03:e3:e2:78:19:68:c4:27:
a2:ce:b2:47:82:9e:a0:8a:5a:a5:a4:b5:0e:45:ae:
16:03:23:ca:d6:50:44:5e:76:e1:d2:fa:77:37:4d:
2a:8b:ea:41:67:ff:3f:3c:e5:30:3e:b1:68:cb:16:
4c:95:16:4a:b3:ab:a0:e4:fc:95:fa:1f:a7:fb:db:
ee:30:49:d0:d6:44:a6:37:78:a1:23:b8:1a:e0:b4:
d8:d0:c7:fe:13:21:cf:27:47:cc:a9:dd:98:6d:db:
35:6e:9b:13:08:d5:e7:4c:87:04:3d:55:0d:5c:48:
b1:c4:cc:cc:78:93:27:36:64:ed:21:19:db:ab:9f:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:91:07:43:3E:CF:FE:04:EA:09:AA:8C:A8:C7:82:42:45:5A:C1
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:bf:d6:b3:3f:10:35:eb:d9:c1:4a:37:81:90:d0:aa:b2:
30:49:94:5e:8c:83:c7:de:bb:54:4b:39:a6:3d:10:24:77:57:
ea:1c:63:be:28:e7:bd:bd:4d:73:81:71:32:b0:2a:8b:9b:16:
07:98:ae:ec:a3:ad:3d:41:82:f2:09:3c:00:21:68:54:4f:3b:
b0:9f:d7:c5:22:f8:62:65:c0:89:67:b1:3a:6d:d6:6d:e6:40:
80:c3:7a:67:31:47:8a:c2:d6:48:d9:48:e9:a7:b9:1f:51:9a:
8d:ec:7a:c3:8d:6a:5b:a8:b9:9f:6a:3d:06:ca:fc:9e:ae:1c:
83:b0:c7:d8:fb:f6:d6:b9:85:82:35:0b:06:b8:86:ee:e7:e4:
3c:90:43:b0:4d:a8:71:90:7e:65:6c:85:14:a9:8f:aa:15:11:
a0:35:20:c2:b8:a1:82:01:18:e4:66:0e:78:bc:ad:a6:f4:22:
8b:97:62:fa:4e:68:96:b9:41:eb:ec:8b:d5:f8:87:d8:67:48:
3d:0d:7d:05:48:b0:0e:d5:2b:56:a9:e1:c6:67:c0:3b:73:3f:
96:fd:61:59:d1:a9:ea:33:5d:6b:69:58:f3:0e:29:a1:42:45:
63:ec:64:75:b5:2b:6e:96:86:98:c5:26:ba:c9:71:4a:2e:27:
2f:2f:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:44 2025 by rpki-client