Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: gMUcecy5fh/1/8zL9cgwiJWSa3gizns5F3khA6neY0s=
Subject key identifier: 3A:FB:95:AB:15:67:75:04:C2:F3:8B:7E:5F:E4:76:7B:51:4B:63:BE
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 0199FB7CB17F316F2E5C8456857518FCD344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0F10
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: hH221z36mDKLpzKHDSHJh1JHxM4TJAQAlUs1A0F849M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b1:7f:31:6f:2e:5c:84:56:85:75:18:fc:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=3afb95ab15677504c2f38b7e5fe4767b514b63be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:46:d5:ec:1c:10:e9:9f:ea:93:6b:bf:a6:66:
cb:d8:7d:72:bb:5a:ee:e7:3c:37:90:b3:74:fa:21:
8a:8b:27:96:bb:d1:89:73:16:06:05:eb:62:02:48:
5f:31:2a:a7:f6:5a:9f:83:f9:c4:2d:f1:b1:1f:0e:
11:c2:ba:ab:d4:6d:a9:3f:c0:74:e0:24:93:e7:32:
cf:ea:3c:31:66:86:4c:db:42:60:c1:98:a4:f3:7b:
e9:66:54:ac:e0:35:dc:59:40:07:d7:88:6c:93:d5:
9c:e2:10:10:65:52:97:f0:63:9e:7c:7e:c9:4b:e5:
49:d6:9d:89:d5:df:75:2c:2a:33:0e:df:0f:3b:20:
c4:50:dc:99:52:1d:bc:70:e5:ea:aa:05:63:fc:80:
b5:9f:47:8a:56:e3:8a:0d:5f:dc:64:08:59:26:03:
7c:f7:49:20:04:f3:9f:ef:f6:dd:05:59:b6:52:8c:
04:b6:a3:82:ea:7a:db:e1:2b:9e:2c:ee:d6:d1:c4:
7f:66:02:7e:e7:96:8c:e9:54:eb:7a:e3:cd:37:7c:
f2:66:68:da:3e:e5:4c:b4:34:4e:fd:d2:f7:1b:08:
d0:6b:cb:e7:46:87:ff:70:a2:43:b1:46:41:89:29:
3d:9e:c5:48:6e:2b:cc:fe:72:1d:90:2f:d5:04:0f:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:95:AB:15:67:75:04:C2:F3:8B:7E:5F:E4:76:7B:51:4B:63:BE
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fa:56:dd:3d:3d:fc:69:0e:80:05:83:57:88:ee:32:d7:2b:
83:39:04:8c:9d:42:66:58:1f:00:7d:61:b7:8e:86:0d:26:cb:
9f:64:60:c2:59:84:06:b8:78:57:91:41:e0:18:f7:32:09:5d:
25:be:ba:26:2c:24:77:b9:b0:af:7c:0d:88:01:8c:78:74:2d:
43:b5:d7:58:86:3a:2b:14:03:ad:a5:99:3c:c0:f1:aa:aa:ad:
c6:42:ac:65:7d:d6:d7:70:8e:f3:ed:7b:09:16:85:43:ba:a9:
a4:ae:3b:84:25:59:6f:d6:d2:52:7e:1c:7f:63:76:c4:01:16:
86:4c:cd:b0:d2:a9:3a:2c:81:b8:f4:61:c0:3f:ed:1a:c5:52:
24:70:30:3a:39:61:49:78:39:b8:7c:6c:3d:3a:37:04:c2:a4:
ce:f6:1c:98:b1:58:07:c1:6d:66:1a:0d:8b:d3:6e:ae:c7:3e:
bc:81:9d:11:9b:24:6d:77:88:d0:4f:8b:33:8f:53:bf:b1:c9:
ca:74:59:44:0e:92:76:2a:c9:88:c4:3c:f8:49:11:fe:3c:8f:
3f:6a:68:a7:d4:0e:8c:6a:ae:ac:cb:1c:e0:fe:fd:7b:d6:cb:
50:96:c9:77:d8:62:13:c8:18:cd:87:cc:4b:b0:be:34:85:ab:
bd:58:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:28 2025 by rpki-client