Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: m1dU25x7aGdXlnK0EBUGCQzmEdNUkDv5tN0YEjThba8=
Subject key identifier: 53:B3:DB:0D:E3:FA:20:C0:90:01:99:AA:C9:61:8C:C3:6D:D7:07:35
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 019A006BF691E7355E2CF64258403237E126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 1377
Signing time: Mon 20 Oct 2025 07:01:06 +0000
Manifest this update: Mon 20 Oct 2025 07:01:06 +0000
Manifest next update: Tue 21 Oct 2025 07:01:06 +0000
Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=)
2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: HJuhWphjyWGo0IyQELVOMFUrJhNtC2UoHy5dsPMR+RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:f6:91:e7:35:5e:2c:f6:42:58:40:32:37:e1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Oct 20 07:01:06 2025 GMT
Not After : Oct 21 07:01:06 2025 GMT
Subject: CN=53b3db0de3fa20c0900199aac9618cc36dd70735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:f3:0d:ce:16:f3:0a:d1:c7:89:d6:04:5d:
b1:7a:31:59:eb:4b:2d:a7:14:cf:96:46:45:06:b2:
8f:43:39:64:e6:3e:85:8e:f3:68:ef:74:b3:67:fb:
7b:55:1c:61:62:b8:68:16:3f:13:92:c6:48:1c:a2:
1f:eb:f8:48:00:a7:b4:ef:4b:98:36:66:e0:37:81:
93:cf:4f:83:60:5b:14:24:61:b6:f9:cb:e9:6c:58:
0d:75:10:b3:7f:d5:59:0c:d5:be:52:54:c4:64:7f:
bb:eb:81:7f:fc:53:00:fd:eb:1f:93:27:5d:92:27:
16:c8:eb:9e:1c:f6:64:f5:7a:5d:69:97:e0:6c:e5:
ee:63:66:b5:0e:87:73:a6:15:2b:33:8d:64:3e:60:
01:00:21:15:77:74:e6:0f:b9:bd:e0:58:b0:d5:1f:
fc:47:83:09:7a:00:b3:db:d4:bc:70:5a:37:4e:4d:
d3:c4:45:4a:9c:a4:56:bc:2b:9f:ec:c8:c4:86:ea:
d0:e7:32:bb:51:ad:e2:13:c4:db:20:c6:05:8b:f7:
f5:f0:7e:44:dc:b4:2d:d6:09:e8:84:af:27:47:50:
2e:d9:f9:ca:27:de:5b:79:2c:2b:4d:51:d0:33:3b:
ef:0e:94:be:ac:73:cd:30:27:2a:87:f3:0f:ee:fe:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:DB:0D:E3:FA:20:C0:90:01:99:AA:C9:61:8C:C3:6D:D7:07:35
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:eb:03:71:56:0e:ea:86:0b:39:69:4c:15:11:3a:8d:6d:39:
ee:c2:79:32:bb:15:de:67:74:b9:d1:fc:a5:c1:a4:28:c4:cb:
50:ff:f2:14:9f:02:25:06:ce:d6:52:6e:84:54:6c:b5:d3:6f:
0d:77:27:8c:4f:0e:e8:4c:9a:dd:bc:78:48:a5:c5:51:0d:32:
0c:ee:1c:43:02:35:da:8d:f1:5e:7b:01:f7:44:e9:6a:cb:f8:
a2:6e:27:f6:a6:6f:03:73:08:9b:f5:12:05:48:bb:5f:e3:59:
c3:51:e8:f5:7a:93:3c:a1:7e:aa:c1:33:3f:96:86:0f:54:3d:
dc:64:b7:f7:b6:8a:7e:0c:9b:e8:b5:30:97:44:4f:49:db:63:
44:0f:b3:c8:21:5a:54:f2:71:bf:10:c1:fe:7c:46:d5:88:1e:
2b:81:34:82:d9:60:ad:95:c9:69:0c:55:46:ce:35:88:cf:6b:
10:3a:1c:86:87:8c:3e:e1:e3:5a:6a:9c:c4:34:0e:62:72:31:
4e:4a:e8:c4:62:18:1b:0f:7e:27:8b:0b:4a:45:87:55:f0:19:
c7:cd:68:54:01:8f:12:9d:49:bb:c5:ac:ef:eb:0a:b8:15:e8:
b6:bd:77:d9:8d:bb:b1:54:b2:ec:0b:3b:4b:c7:43:5d:b9:fc:
a3:12:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:11 2025 by rpki-client