Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: IKiE7pvPF8FUJLH0WpF2Q8rZ7iC/1fA/u8bofUCTyho=
Subject key identifier: E1:86:FD:40:C9:10:B1:7F:9A:D5:4B:08:79:0F:DE:E5:33:59:65:ED
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 0199FC21AD9685B0E9166926C5B3885E4EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: AsBzp8XPzxZ1vrjsbd+GpT0bbhSB92nGKu3R5IwKBA4=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ad:96:85:b0:e9:16:69:26:c5:b3:88:5e:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=e186fd40c910b17f9ad54b08790fdee5335965ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:f7:a3:85:5d:82:73:1d:02:08:f1:c1:93:
15:35:a6:57:f1:8b:6b:7a:31:01:2e:c1:ba:15:bc:
42:b5:c8:82:dc:d3:cb:51:96:8f:76:b0:e9:59:74:
49:62:77:38:b7:47:d7:39:61:8c:1f:cc:06:dc:13:
5a:5c:e0:f9:99:27:87:ad:41:6d:e7:b1:04:50:7b:
95:3f:e8:fb:e3:d0:97:b9:6d:c2:60:8d:6e:83:aa:
fe:58:80:ea:97:d4:6e:73:9e:54:b7:01:f5:68:85:
53:34:ed:f7:99:46:a7:f8:32:a5:8e:5a:02:1d:c4:
be:cf:13:c6:b4:d2:97:14:e5:88:c1:47:eb:bf:29:
7b:12:0b:9b:c6:b9:a9:4a:c1:f7:f7:ba:82:f9:50:
fa:49:24:56:ed:3d:c5:7c:7f:60:26:04:59:ed:b0:
38:97:c9:f7:8b:0a:86:59:53:96:eb:e0:a1:5b:5e:
52:52:aa:f2:92:13:7d:e0:3e:28:3b:91:af:bc:bf:
da:ee:52:ee:dd:2f:2b:b8:5d:cc:28:7a:69:4b:67:
53:36:f6:19:c4:57:c3:fe:a3:49:8e:ed:76:93:4b:
8b:e6:17:49:08:2b:37:4e:2f:e5:02:98:be:92:f5:
6b:83:38:c6:84:eb:0e:fd:50:3b:b1:5c:fe:4b:0d:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:FD:40:C9:10:B1:7F:9A:D5:4B:08:79:0F:DE:E5:33:59:65:ED
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7a:44:c9:8a:49:d9:b5:f9:66:93:16:61:12:df:0c:5d:de:
94:86:a8:1d:09:99:5b:88:83:eb:df:6a:d4:ab:63:7b:2e:63:
01:5b:4c:3b:64:3b:0e:2e:3c:e8:78:24:80:e9:06:94:6a:6f:
60:d8:a5:d9:16:0a:83:b4:8c:19:f9:b2:38:de:04:ff:01:6f:
c1:c1:1a:e1:f0:c8:5c:b0:88:9c:e6:cd:b0:72:69:3c:39:07:
16:7c:80:f4:4f:a2:71:c8:ee:db:d2:f1:70:e1:e5:8d:11:b2:
80:a8:4e:5f:46:e6:6a:9b:10:67:a7:b5:f5:22:f5:60:3e:80:
b3:6b:89:83:66:cb:e9:10:f2:82:46:3d:71:13:0f:4b:a8:19:
d2:b5:4b:12:62:4f:2d:f1:84:e7:5b:48:f7:85:89:bd:2b:ec:
d8:57:6c:38:cf:2e:b4:32:9b:47:20:7f:36:e9:c2:3d:0b:83:
11:a0:e5:1f:e8:20:b2:37:bd:5d:88:b4:06:28:11:9b:19:16:
d2:d2:3b:dd:6d:e4:87:e6:d7:75:ac:e9:99:f0:48:9b:d0:dc:
ae:eb:4b:8c:a0:b9:9c:27:dd:51:df:00:d7:18:fa:0c:44:70:
69:a7:10:ab:85:96:e8:c9:a0:88:59:7b:68:74:26:a6:07:19:
5c:d6:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:13 2025 by rpki-client