Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier: tfvLOIOcQcjEXpYAHzjbTTuu836m3fjpY2UdFcSjjns=
Subject key identifier: 3E:C6:E2:DA:D1:9A:E9:01:A2:CD:53:36:C7:9E:46:51:09:08:F3:B4
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 0199FBEBFBD68E51CDC5797BA4FE041FB3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number: 089D
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: WK5EQfthWlQY83uDKFJALfNHCe4wD5KfKmbtRc3VR7U=)
2: Wz-CuiJfUzqRsGkKMc_PANgseeQ.roa (hash: Hz/DB1yX6TNALaQj3H9UXpc/xUp4S9JB/h6qum3wSrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fb:d6:8e:51:cd:c5:79:7b:a4:fe:04:1f:b3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=3ec6e2dad19ae901a2cd5336c79e46510908f3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:85:78:3d:9b:bd:7d:70:6a:91:7d:43:36:
86:28:98:e5:d8:6b:9d:d7:9b:86:5e:23:9a:75:78:
c4:1a:cc:7b:8d:d6:22:a3:da:14:6a:ef:77:40:3b:
e1:5b:19:a7:6b:4a:cd:61:d8:2a:31:97:fb:40:db:
d0:c2:37:5c:fe:08:24:68:db:46:c0:6a:b6:b4:60:
95:7c:92:ff:3b:dc:80:33:ce:ad:9f:50:1a:a1:7c:
58:3b:bb:a8:08:4c:de:68:38:d5:6c:1c:4d:4b:4b:
78:84:3a:89:13:6d:8c:7e:4b:8d:06:73:ba:e7:f3:
c4:59:b8:d3:cb:8a:ca:26:41:67:04:a0:c2:b2:b7:
fe:0f:cd:e5:3d:cd:04:72:ef:30:06:94:7f:63:2c:
a3:0c:5c:92:5f:ac:82:19:44:b5:71:df:69:a7:22:
8b:e8:dc:45:43:9c:03:64:0b:d8:ab:4d:d3:5b:6b:
7f:d1:b5:86:49:19:91:9a:a7:90:39:ab:d9:d7:00:
71:8d:66:54:29:3d:87:98:0f:2d:cd:19:81:78:44:
e8:33:22:2d:66:4d:b4:36:61:7b:c9:7c:d8:e8:5a:
c0:59:9c:af:d4:21:62:6f:90:c3:bc:fc:6f:e6:45:
fc:59:c1:14:4e:07:a2:a7:9b:0f:7b:ad:e0:b7:1b:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:E2:DA:D1:9A:E9:01:A2:CD:53:36:C7:9E:46:51:09:08:F3:B4
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9e:0f:7d:1f:6f:98:03:cd:da:b7:5d:87:ff:c0:3e:d0:6e:
0d:58:8e:3f:c7:26:ac:82:8c:90:47:ea:8f:5a:f4:f5:c2:3d:
da:da:f1:d3:9b:46:6e:85:e1:3a:c1:bd:06:53:3d:96:1c:fa:
b5:bc:fd:2b:12:0f:43:94:43:dd:4c:2b:1a:89:63:e0:78:8b:
36:26:99:c9:5d:4a:6b:50:eb:1b:16:69:f6:36:61:d5:d3:bf:
f7:99:1e:a5:a7:d0:64:98:0d:c8:86:7c:3a:0b:d9:92:16:e7:
9b:4f:bc:d3:a4:b5:e6:ec:31:25:a3:0f:f7:bc:e1:8c:38:fa:
1c:8f:61:89:61:d1:63:50:66:6a:57:fb:0b:86:28:fc:3b:d3:
7e:f3:34:f5:70:09:fc:72:bd:d2:ab:d2:ee:53:f2:94:5f:3d:
b1:27:25:b5:f0:53:02:63:a3:df:cd:17:29:88:98:1e:67:90:
5d:ae:19:7e:1b:11:ec:de:49:e4:35:5f:a4:22:eb:10:ed:43:
69:10:b5:40:e7:78:dc:16:8a:87:dd:86:b9:8b:81:3b:07:37:
93:f0:1d:48:9a:04:2d:36:e2:8d:b0:d1:03:09:c1:3f:c6:a1:
a1:b9:3a:58:9a:91:1a:0e:e8:63:58:63:a6:74:1d:61:2e:22:
e0:70:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:02 2025 by rpki-client