Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: RIPLMBOn2+kk4sDl3/xo/BYyKuvhY9GpPGVCmj9NMNs=
Subject key identifier: 66:96:6A:68:C1:74:66:B7:EA:AA:3E:0A:AA:08:82:ED:DF:A3:F8:07
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 019A5006F4E90C1801BE0E49AB19265FF7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 18:00:24 +0000
Manifest this update: Tue 04 Nov 2025 18:00:24 +0000
Manifest next update: Wed 05 Nov 2025 18:00:24 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: EatHw2VwQgz551IdXe64otv1Smw9MUxHRz4wnsrZ+ho=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f4:e9:0c:18:01:be:0e:49:ab:19:26:5f:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Nov 4 18:00:24 2025 GMT
Not After : Nov 5 18:00:24 2025 GMT
Subject: CN=66966a68c17466b7eaaa3e0aaa0882eddfa3f807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:5c:04:50:c6:b0:1a:d7:47:a7:d1:59:73:
3b:58:c9:06:7c:2e:38:88:55:7e:58:49:68:d0:f9:
cd:e2:22:97:8e:44:13:13:47:46:f2:e0:d7:63:57:
53:1a:ea:6d:48:17:b1:3b:c9:80:56:37:bc:4f:bf:
e3:e7:f4:0b:b8:78:f9:8e:cc:22:c7:7a:7e:58:3c:
98:5a:0e:82:ae:ed:ba:4e:89:0a:80:83:ef:d7:00:
75:de:80:30:e1:65:c5:fa:22:4d:2c:0d:98:72:bc:
d8:82:b8:0e:67:54:fb:cc:c4:92:a1:e7:de:a2:20:
06:e9:ec:e8:54:9c:ee:f7:78:2c:7f:49:9b:ee:3b:
62:d2:56:05:99:78:bc:96:3f:36:76:c4:f8:32:a9:
f1:21:b8:d2:72:b7:80:8c:e2:4e:96:2f:eb:fb:fd:
68:dd:4b:fd:7f:3c:bd:14:4c:cf:06:7d:7a:31:e9:
3a:9f:31:ac:a9:f5:b4:c1:bf:45:93:97:d9:e8:94:
1b:e7:44:b1:a0:c5:b4:9b:10:6d:f6:05:4f:40:e2:
2c:64:30:92:3a:a7:34:4d:e8:f3:1e:b3:eb:eb:36:
3f:61:60:d8:cf:c0:4a:dc:e4:c0:04:c0:fa:4b:54:
c0:c7:79:15:57:b9:53:f6:18:13:d3:cb:6a:cf:35:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:6A:68:C1:74:66:B7:EA:AA:3E:0A:AA:08:82:ED:DF:A3:F8:07
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:46:73:9e:c9:1e:6f:65:1c:2f:b5:a9:f4:c0:a5:11:9d:
20:bd:90:90:ae:f1:94:60:9a:b7:30:c5:ce:8d:cd:67:2b:17:
6a:0f:35:ac:6d:18:40:24:2b:f9:b7:92:c6:f7:62:00:00:04:
cb:d1:07:8d:ff:0a:6e:8d:20:1b:78:bb:04:0d:ce:c3:06:6b:
b8:ab:75:cb:e0:e6:58:ff:90:7d:61:5e:22:65:98:99:31:8e:
1a:3f:f1:84:90:8f:f7:c7:d8:83:ad:81:ac:42:f7:83:b5:ee:
38:85:6e:b0:9d:9c:97:ee:05:2f:8c:57:3c:0f:f9:69:0e:23:
86:08:52:b5:02:fe:6f:b2:03:cd:f3:23:76:e7:cd:6d:91:5d:
e1:50:aa:40:24:51:8c:b2:34:9e:2a:1f:b2:8d:e6:2d:35:f8:
18:21:b2:63:a8:db:13:6e:13:c1:0d:04:5f:11:63:75:6d:5d:
81:36:88:1e:6a:b2:75:78:09:2f:1a:a5:46:32:e3:f7:81:6c:
b9:65:5f:d4:74:a7:a7:8a:eb:27:82:7a:cc:dd:58:61:0e:ad:
d2:09:db:df:b1:02:8e:da:f7:50:df:76:8d:20:77:66:88:4b:
20:20:a0:f0:52:d6:4e:a6:77:3b:4a:86:48:72:ee:da:f0:c1:
47:84:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:04 2025 by rpki-client