Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: ++b8m91HzQVmMNtYChYcV6/Ud3WV7ouhVuw2CrsfFaA=
Subject key identifier: 48:D7:54:70:13:4A:2A:AF:91:EF:40:91:79:16:FB:53:99:B6:7E:A9
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 019A0222B69E2BD1263E0A3C91D090902B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 06C8
Signing time: Mon 20 Oct 2025 15:00:20 +0000
Manifest this update: Mon 20 Oct 2025 15:00:20 +0000
Manifest next update: Tue 21 Oct 2025 15:00:20 +0000
Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: 1WndkMLCwJT6unJAOvu3M7AOxvOXteyFhR+RQuZLwXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:b6:9e:2b:d1:26:3e:0a:3c:91:d0:90:90:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Oct 20 15:00:20 2025 GMT
Not After : Oct 21 15:00:20 2025 GMT
Subject: CN=48d75470134a2aaf91ef40917916fb5399b67ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:c9:d9:bb:7d:22:7d:a4:29:d4:d2:13:f8:
46:e6:54:94:10:e0:c7:e2:62:36:39:76:bc:65:99:
05:08:4e:0e:13:1d:28:6f:96:8f:a3:ce:6c:10:0e:
b5:fb:1c:1f:af:ad:1e:0a:bd:60:ba:ed:ec:33:26:
15:d7:69:ca:77:3e:4e:bc:b5:37:58:1e:6a:ee:75:
6f:35:28:1f:25:a8:1c:29:a3:13:60:59:d3:6a:ba:
15:69:d9:5a:9c:16:78:09:21:16:55:05:c9:42:37:
06:77:a9:c4:00:d7:f2:f4:86:d8:3d:91:87:7d:1a:
0d:5d:4c:54:19:1c:e1:0e:2f:b0:a8:1b:47:40:fc:
cd:d7:a3:f8:62:ba:5e:78:a7:8a:84:a4:48:69:57:
0c:65:0f:93:d5:7a:03:a5:99:7e:89:0f:67:b2:9b:
91:8b:a4:5a:19:fa:2c:8f:4b:94:06:51:d1:69:51:
f1:60:80:7d:8b:ea:4b:19:a8:27:28:35:8e:55:55:
c1:ef:62:ed:53:1d:5c:1e:fc:12:03:77:f5:82:52:
dd:a2:c7:33:19:3b:85:fc:e7:bd:59:01:8e:68:45:
49:15:13:a6:50:a9:54:e1:99:2c:58:86:da:58:69:
3f:6c:dc:46:9a:66:81:8e:8e:f9:20:d1:cd:7b:4b:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:54:70:13:4A:2A:AF:91:EF:40:91:79:16:FB:53:99:B6:7E:A9
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:44:a7:df:f2:d3:a4:c7:95:90:5f:5c:4b:f4:2b:d3:14:90:
8d:70:da:28:54:0f:fc:ae:9a:72:e3:10:82:59:50:13:51:18:
79:6b:97:07:f0:92:15:c9:ca:b7:01:30:66:d7:d2:f6:ea:fa:
11:22:be:26:20:fa:d8:cd:df:ec:c8:57:ee:d4:6c:74:72:df:
05:57:8f:37:16:aa:3a:4e:ae:13:45:7d:a6:c3:a7:1a:f4:c3:
9f:f2:98:dd:62:4f:3d:ba:b9:38:0e:3e:84:df:44:20:29:92:
64:97:e4:7e:26:4c:54:d6:20:1d:e5:c5:a0:08:fd:b6:0f:5f:
1c:4e:a1:1d:2e:8f:02:53:45:c1:ad:1b:94:f7:96:c2:c2:b4:
2e:8f:6d:61:16:fa:7a:7b:d6:c9:60:b0:39:26:13:b4:52:33:
7e:a6:4c:66:da:13:73:c4:c3:42:02:65:54:8a:ee:47:04:db:
47:d7:54:fe:73:2a:3f:8c:e4:08:1c:fd:7d:29:b0:37:f8:f1:
c0:83:cd:24:57:6e:4a:7f:5e:9b:29:fa:5d:92:9b:72:3c:9a:
4f:e9:26:d6:52:1d:67:0a:46:4a:ae:4d:14:9d:66:83:4c:90:
2d:d2:53:3e:1a:75:8b:3a:39:66:91:17:14:f4:a5:af:f4:fe:
4f:d8:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:46 2025 by rpki-client