Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: Q+P829DrnkL/8gz/Yi/6GRm1y4Gk39zqacqBFVA7SQg=
Subject key identifier: E3:6A:3C:65:8E:5B:21:59:75:8F:C1:3A:42:CF:31:8B:86:8D:6D:D5
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 019A4E4FA098F99177FFC0CC9B36C2A9D00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:32 +0000
Manifest this update: Tue 04 Nov 2025 10:00:32 +0000
Manifest next update: Wed 05 Nov 2025 10:00:32 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: RbbO7eWZU4x6jU6uMdMn6CdCC5VbpvC/EHLbdkmCS0M=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a0:98:f9:91:77:ff:c0:cc:9b:36:c2:a9:d0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Nov 4 10:00:32 2025 GMT
Not After : Nov 5 10:00:32 2025 GMT
Subject: CN=e36a3c658e5b2159758fc13a42cf318b868d6dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:db:28:3c:16:fc:29:f7:20:22:e0:5b:9c:
fe:ea:66:87:8d:b5:5e:71:00:ec:e7:62:d7:e0:e6:
c3:cf:b0:bf:14:0d:9f:e4:ed:12:64:23:26:4a:6a:
73:bd:b2:2c:b6:30:71:36:ee:36:40:01:31:4b:06:
7c:b5:f1:3c:99:40:c8:bf:a6:c2:9b:41:05:a5:d1:
33:42:cc:98:26:5c:69:93:2f:de:00:84:4a:d4:02:
57:55:3e:c7:5d:ff:14:6c:fa:46:b7:2d:ea:06:b8:
3e:b1:a6:a7:98:c4:27:d2:2b:cc:c3:7a:f5:72:e9:
85:3d:5f:02:98:11:36:39:9d:cd:f2:a3:fa:20:1a:
b6:f9:b7:3e:42:d4:1c:8e:8e:2e:32:af:1e:1c:a9:
98:b3:e7:25:f8:b5:26:59:b6:f1:61:5b:98:f0:88:
3b:6d:c4:55:ef:60:af:c4:19:a8:09:6a:14:0b:83:
48:44:b3:fd:64:b6:54:d3:b3:01:8a:6f:b5:b7:05:
1b:38:75:35:89:ac:74:3d:6a:f8:e0:da:fe:da:b5:
ed:43:58:4d:aa:e7:b0:2f:f4:a3:f8:be:59:d0:b1:
c7:4b:8f:3b:4e:06:27:c0:f2:1f:70:51:08:f8:b7:
a6:38:3c:d7:c1:e7:55:40:15:21:6b:7a:46:56:59:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:3C:65:8E:5B:21:59:75:8F:C1:3A:42:CF:31:8B:86:8D:6D:D5
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:76:06:04:18:ca:0a:c0:fb:ad:dc:49:88:e1:e1:98:0b:9b:
75:b3:5e:8c:5f:3b:a9:29:44:57:9e:ba:51:9f:fd:84:d5:64:
c1:ab:8f:de:9b:55:fb:ec:02:fc:5b:79:2d:cf:4d:d6:6e:b7:
e9:63:7b:b5:3a:62:a7:de:10:aa:d3:f9:c8:04:64:38:2f:5b:
a4:db:d2:83:40:a0:05:75:ac:5b:e3:13:2f:4c:89:6a:c1:3d:
2a:1b:5a:8e:30:79:d3:e6:e9:90:60:75:2b:d4:39:b2:c0:19:
df:68:af:34:47:4d:a7:49:4a:26:58:71:85:8e:32:e2:87:bb:
4c:e4:d9:4d:cd:eb:9d:91:37:d5:eb:6b:87:e4:d8:d4:ec:43:
51:a8:93:88:c3:72:52:65:ca:fd:ba:74:f1:d2:d5:92:73:e5:
28:24:47:b5:88:65:33:a9:ff:73:41:48:77:9c:3a:18:1e:3e:
49:f4:52:ea:5a:38:15:69:2d:ea:56:f5:01:19:af:43:27:98:
72:c6:5b:82:53:20:bf:a2:5e:a6:42:c6:7d:c7:1c:3e:47:22:
02:76:48:1a:04:e6:5b:05:6a:d6:c1:ec:14:e8:67:6b:f2:9c:
f2:9d:21:05:2b:67:62:e3:10:89:d9:03:34:6f:cf:ca:70:d5:
ea:b1:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:40 2025 by rpki-client