Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: OLSTEl3/C6q/3s8NV6v1QNYyv0O5VyU2xkNMvr3eN6o=
Subject key identifier: 46:23:A0:AD:E5:E6:2D:FF:C2:AF:7F:A5:AB:F0:AA:83:19:48:3F:6B
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 0199FFC72C66B491B04E13E4004F6F374236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0DA1
Signing time: Mon 20 Oct 2025 04:01:06 +0000
Manifest this update: Mon 20 Oct 2025 04:01:06 +0000
Manifest next update: Tue 21 Oct 2025 04:01:06 +0000
Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=)
2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=)
3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: 7yQ1H0JtmVnN+igiiCBJjeMRaNVSHFykE1fvhhJdcgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:2c:66:b4:91:b0:4e:13:e4:00:4f:6f:37:42:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Oct 20 04:01:06 2025 GMT
Not After : Oct 21 04:01:06 2025 GMT
Subject: CN=4623a0ade5e62dffc2af7fa5abf0aa8319483f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:d3:ce:84:2f:c2:e3:de:3b:44:78:55:d3:
b0:7b:8d:85:c5:f6:c1:9f:af:40:98:ef:99:d0:f3:
65:00:38:86:b9:6f:a1:ca:94:1c:ae:d6:2a:c5:5a:
46:c5:83:70:8e:e1:5f:80:41:ac:79:cc:5a:40:2c:
74:30:c8:75:5b:43:d9:65:00:a3:38:e7:2f:21:af:
33:2d:d6:35:e4:21:2b:20:82:6e:28:eb:e6:fb:79:
34:ba:5c:09:02:75:1f:68:1f:e2:5d:ef:83:b0:5c:
2d:8c:93:b7:a1:38:79:c5:1c:52:e7:12:de:9f:d7:
f6:27:41:24:2c:23:53:46:2f:1e:a4:ab:27:12:de:
39:42:3a:f9:d0:c5:fd:8f:0c:47:29:0b:53:ae:3a:
42:ef:11:9f:b7:da:60:e4:a1:0b:b6:03:13:f5:ec:
fc:ce:6f:b3:f7:d2:13:d9:ca:18:70:ec:09:35:b3:
74:b7:52:02:bc:06:21:51:b7:65:66:86:38:44:e2:
5a:e0:c3:88:29:f7:c1:83:e7:66:f1:f5:bd:5d:b2:
78:49:ff:94:cb:a0:d1:3f:d8:d2:49:c0:fa:57:84:
11:5f:c3:79:b2:6d:e1:00:63:4c:14:0b:17:2a:10:
25:e5:fa:52:c8:4e:1f:89:4c:1a:2a:63:82:e5:80:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:23:A0:AD:E5:E6:2D:FF:C2:AF:7F:A5:AB:F0:AA:83:19:48:3F:6B
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9b:67:7e:55:b4:97:6d:6e:bb:ab:d3:e7:1a:02:dd:93:dc:
47:76:43:ea:2a:33:b5:da:c0:8e:83:8f:ac:e4:80:c9:f3:99:
e5:e5:3a:e0:44:a1:88:50:b6:3c:bf:fb:73:c7:ce:af:44:75:
f7:7e:9d:d5:d2:c6:59:53:1c:df:a4:96:da:57:be:96:ad:b1:
bf:13:0b:38:97:37:6c:48:98:3a:ba:87:ba:95:84:8d:51:db:
b0:95:10:b2:68:d7:56:e4:f6:b3:0a:33:30:61:49:5f:dd:fb:
1f:f8:97:38:be:99:0a:63:b9:8d:72:9d:a9:df:1a:8e:c5:c8:
20:64:5c:1e:f0:f8:3d:05:42:6c:31:94:16:28:3d:1b:db:e2:
26:cd:b4:52:46:be:ca:ca:50:aa:a1:92:d5:43:af:b9:05:10:
3e:49:d1:52:06:da:b9:84:fa:aa:ef:1b:85:29:29:74:51:10:
c0:86:97:ce:6e:34:bf:57:27:6d:2d:60:4d:8f:94:ef:dd:fd:
ae:0b:c9:dc:bc:4e:67:0b:56:9c:e6:1b:91:72:00:e8:13:ee:
d1:a3:7f:9d:17:88:e3:3e:19:db:e8:26:75:da:33:d6:b1:16:
a5:ff:63:4e:4c:c6:62:68:a4:42:04:45:23:d9:20:96:55:c7:
9f:35:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:16 2025 by rpki-client