Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: txtcEa1E0oHsfO4hR0h5giLDiLOgEb+757v19dq9tRY=
Subject key identifier: 10:15:35:E4:0E:DB:90:0D:15:65:EC:83:A9:91:60:84:2F:37:7A:3F
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 0199FE7DC6FAF48CE087F20D375DD37EE1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 1376
Signing time: Sun 19 Oct 2025 22:01:19 +0000
Manifest this update: Sun 19 Oct 2025 22:01:19 +0000
Manifest next update: Mon 20 Oct 2025 22:01:19 +0000
Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=)
2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: ixy3xB7HFGsI1ZZPMOnMYHUaPe6bfePqNmHTZJJ81to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c6:fa:f4:8c:e0:87:f2:0d:37:5d:d3:7e:e1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Oct 19 22:01:19 2025 GMT
Not After : Oct 20 22:01:19 2025 GMT
Subject: CN=101535e40edb900d1565ec83a99160842f377a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:53:fe:2a:1e:e2:74:64:80:f0:d6:26:21:
32:0d:e1:02:a8:a7:27:b7:66:5b:12:eb:14:89:79:
c4:70:08:0a:8b:38:51:6b:25:84:35:f5:06:e0:f2:
55:a2:63:ac:21:59:6f:9c:0d:93:4b:6a:87:70:ba:
6f:2b:73:9a:d9:06:45:2c:07:10:e8:48:ec:2f:18:
94:05:d1:a2:f8:4a:55:42:ab:ed:40:20:ea:f6:7d:
7b:4e:7a:18:ce:51:3b:97:d3:42:95:67:ed:90:96:
d8:05:19:99:5e:e5:74:60:59:0c:da:d7:e8:de:cb:
02:fa:dc:99:b4:c0:cb:49:ca:0b:fe:ab:5d:5d:31:
c3:cf:67:2b:b6:ca:26:34:f1:a9:00:45:51:d6:d5:
df:bb:1d:4b:1a:ed:31:5f:85:4f:55:1b:3a:8e:1d:
df:c6:64:0e:2b:55:95:ab:0d:cc:c1:93:b5:cd:92:
86:20:07:cb:bd:f1:a4:37:6e:cd:09:20:e8:51:8f:
1c:df:ac:8b:1c:ab:21:cc:44:04:8b:8b:5e:cc:71:
ab:8b:bf:89:d6:75:cb:63:99:df:36:c4:bf:a1:70:
8a:77:aa:24:18:d3:94:e8:f1:d7:18:de:59:25:20:
d1:7e:16:c8:1d:95:8a:96:54:b1:1a:67:42:b1:a5:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:15:35:E4:0E:DB:90:0D:15:65:EC:83:A9:91:60:84:2F:37:7A:3F
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c6:12:85:e5:5d:f6:42:76:9c:a8:e7:1d:c5:d2:b0:67:48:
bf:45:5a:d3:14:ed:12:f9:7b:6a:37:e3:7e:86:2d:12:ba:4c:
fe:3c:d4:a5:84:2a:b6:c9:75:d7:b1:56:00:36:1a:bc:ab:ec:
bb:81:98:fe:ef:81:c7:40:43:6b:c1:40:3f:a2:32:05:ee:0c:
0b:2b:5e:b4:b4:16:ed:73:4b:b3:1c:60:11:ff:eb:c5:91:ee:
ab:49:51:6b:6b:f8:d9:d6:95:a7:99:2c:4b:44:7f:f3:43:85:
46:9d:61:1f:b6:65:89:d9:e8:78:24:dc:49:0a:33:51:79:7e:
2f:f2:d8:e1:d9:39:92:1f:93:b7:c5:01:c1:b9:1c:4b:44:c9:
ab:eb:96:e3:69:f6:ae:75:ed:ad:7f:46:02:d2:1f:4b:d9:24:
5d:62:11:8e:d7:cb:83:c7:cc:d9:b6:bf:0d:93:ba:2b:67:af:
df:31:3f:02:59:dd:6e:6f:71:ab:6e:dc:c2:9e:c2:c1:1b:4e:
06:2a:a7:f4:e9:a9:07:50:54:5d:bc:74:39:f2:bc:13:8f:24:
b5:28:ea:47:77:4a:89:b6:b8:a3:a1:50:d0:74:03:83:01:38:
e9:61:ee:2f:ea:05:09:e7:4d:83:13:93:9a:3e:e7:f2:19:bb:
8d:84:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:37:45 2025 by rpki-client