Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: XGwammBk/ykNWVEN0y3R/EFTrWOx/8rCMPxLh9DIh1o=
Subject key identifier: 71:4C:B3:2E:63:5B:0F:0E:88:9A:3F:64:A0:2F:F7:B7:E2:99:15:85
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 0199FBEB25627344311F93678FF1B6380FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 11E0
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: 3QYsxg2gWGESPijtaK/0kC+m8BD49pZDBgoETAk7nl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:25:62:73:44:31:1f:93:67:8f:f1:b6:38:0f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=714cb32e635b0f0e889a3f64a02ff7b7e2991585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:e2:86:70:14:4e:f4:06:5b:eb:24:03:49:
72:2e:ab:45:df:da:d0:e0:76:4d:63:f4:18:a2:68:
be:26:67:03:77:08:8a:d0:fa:97:b9:44:b4:6b:6e:
25:f0:f5:1a:99:2a:a7:42:93:a3:72:38:d4:58:c7:
4e:17:2b:25:f1:56:4b:d0:e2:b9:46:5a:e2:c3:f5:
ed:31:20:2b:09:eb:e9:c9:bc:61:3c:dc:54:2a:38:
dc:c6:42:16:88:b3:a1:ea:1b:f3:80:55:5c:32:b2:
a4:d3:59:f9:9b:89:51:a4:51:4b:ab:4a:8e:86:59:
89:63:c5:dc:02:ff:e2:0d:e1:a1:e1:58:e4:79:72:
8c:a4:8e:9e:87:14:a8:e2:1b:f9:a5:51:db:ae:ac:
7f:55:5e:7b:32:14:e0:c7:e8:48:c0:50:07:1c:84:
04:a2:95:bb:ae:f7:d9:82:98:87:39:2e:6d:10:d3:
41:71:e7:e0:8e:06:a4:77:97:aa:f0:9e:52:01:bb:
91:46:3e:3f:7e:f2:8e:20:bf:5a:b5:bd:ba:ed:d5:
61:93:9c:4b:e9:62:09:68:0f:40:61:5f:03:3d:17:
b7:a5:46:2d:a6:96:01:2a:f1:64:61:52:f3:02:3c:
29:e4:65:5b:8c:dc:20:69:41:62:64:99:61:37:0d:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:B3:2E:63:5B:0F:0E:88:9A:3F:64:A0:2F:F7:B7:E2:99:15:85
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6e:f6:63:d3:04:d2:d4:99:92:57:4d:18:3f:3e:9a:54:8a:
02:47:e9:8b:a8:62:6e:57:a3:40:d9:45:ea:40:30:ad:e7:8d:
c9:be:9d:f1:15:73:8b:a6:cb:e0:8a:d7:7b:87:1b:61:86:0a:
79:94:8d:d8:1b:b7:3c:9e:8b:4c:fc:0f:42:96:66:1e:ea:6a:
3b:b7:56:f2:f5:77:9a:75:a6:eb:92:b8:98:3d:59:68:e0:ed:
b8:83:2d:23:c7:e9:ab:3c:8e:87:63:fd:d0:25:96:62:2d:e2:
5d:7f:77:a7:a3:70:be:71:ed:24:14:5a:33:6d:7a:b6:16:b1:
24:fb:64:32:74:65:ef:a8:35:0c:ef:eb:ff:fb:50:56:2d:a6:
f7:1d:be:79:1c:79:a1:30:99:ca:47:15:f1:27:9b:16:bb:23:
ee:b6:ef:87:00:ff:7f:f0:94:b7:c8:b2:68:73:41:06:b0:5d:
95:b5:72:54:5f:92:1c:f6:6f:3f:e2:b0:54:cc:08:d5:16:5d:
13:28:fa:15:e0:01:d3:7a:04:38:19:86:9f:aa:f9:99:e9:77:
fc:e4:d8:b5:17:2a:7f:29:72:31:94:57:6b:8b:75:74:d5:90:
35:ab:39:32:1e:69:03:ef:ff:4b:ec:e8:b5:59:eb:18:d0:46:
b0:2a:ee:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yVic0QxH5Nnj/G2OA+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4
OTczYjgwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
Eyg3MTRjYjMyZTYzNWIwZjBlODg5YTNmNjRhMDJmZjdiN2UyOTkxNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6rihnAUTvQGW+skA0lyLqtF39rQ
4HZNY/QYomi+JmcDdwiK0PqXuUS0a24l8PUamSqnQpOjcjjUWMdOFysl8VZL0OK5
Rlriw/XtMSArCevpybxhPNxUKjjcxkIWiLOh6hvzgFVcMrKk01n5m4lRpFFLq0qO
hlmJY8XcAv/iDeGh4VjkeXKMpI6ehxSo4hv5pVHbrqx/VV57MhTgx+hIwFAHHIQE
opW7rvfZgpiHOS5tENNBcefgjgakd5eq8J5SAbuRRj4/fvKOIL9atb267dVhk5xL
6WIJaA9AYV8DPRe3pUYtppYBKvFkYVLzAjwp5GVbjNwgaUFiZJlhNw3GRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFMsy5jWw8OiJo/ZKAv97fimRWFMB8GA1UdIwQY
MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt
OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5
LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm72Y9ME
0tSZkldNGD8+mlSKAkfpi6hiblejQNlF6kAwreeNyb6d8RVzi6bL4IrXe4cbYYYK
eZSN2Bu3PJ6LTPwPQpZmHupqO7dW8vV3mnWm65K4mD1ZaODtuIMtI8fpqzyOh2P9
0CWWYi3iXX93p6NwvnHtJBRaM216thaxJPtkMnRl76g1DO/r//tQVi2m9x2+eRx5
oTCZykcV8SebFrsj7rbvhwD/f/CUt8iyaHNBBrBdlbVyVF+SHPZvP+KwVMwI1RZd
Eyj6FeAB03oEOBmGn6r5mel3/OTYtRcqfylyMZRXa4t1dNWQNas5Mh5pA+//S+zo
tVnrGNBGsCrupA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:17 2025 by rpki-client