Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: /fbhvwyELUuv5JYlYM7TJvqwz5iV1au9YuVOZqcLjeI=
Subject key identifier: B9:D7:F7:EB:2E:E3:E9:D4:17:80:55:16:BB:03:79:98:51:4C:BF:B3
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 019A0035A1D5FA9CF2460BE856239D3C9805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 06C7
Signing time: Mon 20 Oct 2025 06:01:46 +0000
Manifest this update: Mon 20 Oct 2025 06:01:46 +0000
Manifest next update: Tue 21 Oct 2025 06:01:46 +0000
Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: KRWvWXZ7UN84hjONMyOFPd/oxAVWaKFNFMw1N0/jQQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:a1:d5:fa:9c:f2:46:0b:e8:56:23:9d:3c:98:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Oct 20 06:01:46 2025 GMT
Not After : Oct 21 06:01:46 2025 GMT
Subject: CN=b9d7f7eb2ee3e9d417805516bb037998514cbfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:3c:52:b2:34:ed:ad:35:34:b2:8a:c1:34:
40:0d:ac:9a:40:ae:8a:07:e7:7b:08:52:a1:4d:0c:
fe:a7:9b:8f:df:58:33:d4:3a:4b:5e:48:a7:66:ec:
6b:82:f2:ff:40:2e:67:c3:67:e2:da:65:fe:71:48:
52:e3:32:da:b7:4b:ea:d8:71:48:9f:e1:9e:35:af:
0d:c8:d0:18:7a:1a:ff:01:17:33:10:12:82:1a:a2:
4f:7b:62:11:76:28:6c:b2:c2:bd:d9:bf:78:27:7c:
fb:32:c2:92:14:73:bd:3c:78:6f:29:6a:a5:e3:4c:
ab:be:3e:38:03:48:a2:f3:bf:5c:ff:67:37:e8:c5:
9c:90:6d:8a:2d:6c:71:58:9e:8a:bf:92:65:bf:08:
d5:84:c3:6a:8d:40:4a:92:6f:1e:72:07:31:b4:67:
90:ce:f1:c9:06:9f:6b:d7:c9:3e:b9:49:29:ec:70:
3f:93:f0:65:c3:93:be:56:94:7e:35:68:f1:c8:83:
a4:8e:5c:23:68:3f:5c:84:79:b8:4e:39:0b:8c:7e:
69:49:5e:fb:fc:9d:36:d1:93:99:54:62:42:bb:94:
ff:27:84:b3:e1:2b:d8:81:d7:18:49:75:e5:67:7d:
c1:f0:9f:34:0e:bb:41:26:fa:73:96:67:5c:1a:30:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:F7:EB:2E:E3:E9:D4:17:80:55:16:BB:03:79:98:51:4C:BF:B3
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:39:84:27:be:40:0e:12:bf:df:cc:57:6e:61:93:bc:ef:fd:
96:ef:7a:01:02:ea:28:69:84:42:9d:fb:a9:56:84:df:12:a4:
0e:47:f4:20:85:05:77:b9:71:62:87:b3:6b:49:30:b7:42:29:
81:d1:2f:c3:e8:1a:7a:36:14:9c:a9:34:01:50:47:8b:ec:8d:
99:5b:39:67:86:c5:0e:d0:48:93:a9:ee:5a:db:38:d6:9d:d0:
b5:bc:c3:09:e7:ad:e0:d5:76:a1:b6:b4:8f:bc:bf:bf:08:82:
cc:c4:de:17:70:f0:97:e2:f8:37:07:49:01:27:42:9c:9b:62:
6e:30:09:75:12:fa:20:00:be:ea:21:c3:15:52:cb:52:b7:1c:
67:71:d8:79:ed:57:2a:f5:17:c3:5c:e4:5c:57:b1:62:e0:59:
66:03:10:4d:19:64:97:c8:07:7c:4f:9b:3a:b8:90:38:78:e8:
2a:70:c0:fe:a0:e6:52:83:15:19:a8:30:0f:1b:c2:fa:b7:04:
99:e9:73:77:3a:d0:15:dc:e8:2b:c9:1e:a5:58:0a:ff:d1:54:
93:ef:76:85:45:a4:bd:bd:e2:6d:f7:39:6e:22:6e:1d:6b:f9:
68:fc:1a:d4:04:f8:b0:96:1f:35:75:c5:ef:51:df:e7:fb:cf:
13:7c:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:13 2025 by rpki-client