Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
File: U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json)
Hash identifier: bX9o3mBerAe7GRGufoPWWVtkaAB1MwLGZInvURZ84ls=
Subject key identifier: A7:57:25:59:87:BF:3C:9A:55:C3:3A:F6:3A:A9:AC:31:A5:EE:6D:FD
Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Certificate issuer: /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Certificate serial: 0199FB7CF1DF84C52ADF3C854548B08311B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
Manifest number: 05A3
Signing time: Sun 19 Oct 2025 08:01:33 +0000
Manifest this update: Sun 19 Oct 2025 08:01:33 +0000
Manifest next update: Mon 20 Oct 2025 08:01:33 +0000
Files and hashes: 1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: H3e5WVy/CuLeVTnIAUuW4NDdLCnrTcrRnymv3S/73lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f1:df:84:c5:2a:df:3c:85:45:48:b0:83:11:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Validity
Not Before: Oct 19 08:01:33 2025 GMT
Not After : Oct 20 08:01:33 2025 GMT
Subject: CN=a757255987bf3c9a55c33af63aa9ac31a5ee6dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:e2:39:ce:8d:40:15:2b:6b:ff:45:3e:48:
8f:f1:ac:3e:2b:45:dd:3b:20:03:80:d6:ab:73:a2:
d1:a2:57:4a:62:79:46:8d:f2:49:d7:6e:2c:e3:e8:
fc:ee:bd:36:1a:80:ee:46:81:c2:7c:46:f1:77:c8:
43:3d:0a:f1:fd:73:c8:a9:41:bf:89:2a:dc:c6:61:
e5:57:be:6b:6d:e4:8a:67:d0:46:ad:a8:0b:57:cb:
e5:1e:ce:34:c1:a9:9d:ad:ae:20:49:21:89:b6:33:
ae:0b:63:c1:16:94:51:ba:48:82:4b:7c:df:76:eb:
13:06:f6:14:57:5b:a8:7e:9f:ef:3b:56:9f:b4:d5:
52:b3:1d:49:8e:af:4c:62:9c:d3:0b:54:c5:0f:b8:
d1:57:30:74:ed:0e:96:ba:9d:4c:94:06:c2:5b:82:
47:7b:4d:4b:c2:ac:b9:3e:aa:20:6f:6a:b2:30:fc:
aa:a7:26:c8:62:06:5b:e2:06:98:39:67:84:c5:2a:
f3:72:6e:55:61:be:dc:de:06:a6:5d:09:4b:96:55:
e4:d1:61:c3:0e:e5:ab:a6:9c:27:6b:4e:1f:c5:c3:
57:e2:37:b0:c1:3f:b6:16:8e:d9:e5:03:92:99:ac:
1b:59:07:dd:ab:2f:6f:ba:d4:2d:6b:41:f9:85:d4:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:25:59:87:BF:3C:9A:55:C3:3A:F6:3A:A9:AC:31:A5:EE:6D:FD
X509v3 Authority Key Identifier:
keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:31:9b:75:20:8c:c9:43:96:6f:66:6d:a8:16:97:1b:d0:
d3:31:99:a8:d8:e8:ba:8a:18:0c:53:a4:23:37:30:09:b4:d7:
64:fb:53:e4:78:ee:df:d5:d8:82:ab:ef:89:ab:2c:8d:2c:de:
b4:35:b3:75:d1:ab:7e:c3:46:56:39:f3:bf:4f:cf:82:6c:8c:
4e:f1:75:e0:79:7c:12:cf:0f:e2:4e:16:f2:e5:9f:f4:1e:ab:
14:18:68:9f:42:b9:45:16:37:f1:eb:32:62:c2:fc:34:07:b5:
33:b4:8f:e3:d3:f2:10:63:3e:0c:5d:64:c6:ee:ca:bb:2d:80:
8d:5a:20:43:bd:84:38:53:23:62:66:99:da:b2:bb:b0:71:d3:
20:a9:4e:47:1c:af:d3:16:1b:c5:20:ad:0c:77:a7:04:27:04:
fc:8e:90:f6:8a:ad:ae:27:ab:97:da:cf:f4:b3:68:91:81:45:
8e:00:a9:5b:19:4f:c5:05:b2:16:d3:41:68:70:a2:42:88:04:
84:5c:0c:c2:74:f0:ef:b6:16:dd:f3:f7:73:d0:7f:0e:66:15:
ae:85:22:6d:d7:20:4e:37:97:98:92:43:bb:2b:af:3d:aa:3f:
0d:d1:6a:f0:05:d4:a9:28:ca:32:ac:8c:76:c5:b1:b4:5c:9a:
88:f2:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:12 2025 by rpki-client