Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier: iK6TN6MNXz5eB5NB4D7J5iPq0/+0pibj6VtTsmaDoU8=
Subject key identifier: 97:AB:00:D8:2F:2E:BF:FF:FA:13:3C:37:4D:5E:4D:9B:FD:47:AA:C7
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 019A4E18BAF11A0F736A115BC03042332067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number: 0B6C
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=)
2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: 4p2CFv1o9vLNAELf2pW6NquOAb/jOpxtMGPhoByVhlE=)
3: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=)
4: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=)
5: kfd0B7YUXjP5BkiSga_I2bFGDjE.roa (hash: BHoHm0FgI/hNJZj/ps+lj0bhjSOg0FxpXV30jd+oQxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ba:f1:1a:0f:73:6a:11:5b:c0:30:42:33:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=97ab00d82f2ebffffa133c374d5e4d9bfd47aac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:38:20:e6:ec:a8:b8:b5:08:04:05:8d:09:
47:ed:12:c3:c2:5b:7d:be:2e:ff:b2:af:cb:91:07:
c9:a9:93:ac:e9:be:29:39:e5:a6:5c:fe:4b:89:4f:
7a:94:01:d1:62:97:12:ec:ba:ab:b0:b3:29:98:f8:
74:f7:72:c9:24:58:9d:9f:33:4b:db:14:0c:20:67:
16:2e:20:c0:44:17:27:26:28:97:f3:d2:19:8a:92:
92:ca:ac:a4:f4:78:20:12:e9:de:d0:74:8a:1d:d3:
41:04:69:02:70:cf:cc:1b:cf:6f:ab:f7:55:47:bd:
28:7e:7b:ca:a4:71:7f:6c:b9:43:85:62:e2:67:3d:
7a:6f:86:03:8a:8a:d6:5b:4f:b6:2c:d3:fd:15:f0:
55:3b:91:41:98:4a:c3:9b:c1:cc:5c:64:4c:d9:57:
2f:92:59:6d:24:39:70:68:57:21:ef:9c:48:c2:b6:
72:53:cf:6a:da:2c:8b:0d:a0:7b:dc:eb:64:83:ed:
7c:8f:d3:1a:e1:ef:e6:c3:78:b9:4c:9c:73:c0:c8:
31:1d:ff:d6:89:0f:1d:25:7b:56:48:ea:17:ce:51:
c3:79:8b:78:ca:af:97:01:ff:ae:06:ed:4d:c3:f9:
00:af:c5:7c:55:d4:f7:47:96:1a:fb:b2:3c:ae:c6:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:00:D8:2F:2E:BF:FF:FA:13:3C:37:4D:5E:4D:9B:FD:47:AA:C7
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4a:5f:3c:1e:39:eb:e8:18:23:ef:39:1e:d2:d5:60:28:f7:
84:fc:05:3d:fa:0c:a8:c1:d2:26:6f:a1:bf:52:23:db:cc:f8:
98:75:d5:23:42:9b:0c:77:bc:66:56:9e:4e:aa:41:e9:cb:a2:
10:6f:8e:91:f2:f2:07:0a:57:07:71:68:fe:89:f3:31:63:91:
7b:9d:78:8d:45:0c:56:d4:77:95:d1:48:6a:d4:c6:20:40:75:
1a:bd:ca:13:fc:86:b5:82:e7:cc:d2:a4:f5:83:7b:29:44:6d:
48:b1:e5:f0:ec:5e:0b:f8:94:15:c5:27:6c:19:fc:9e:d9:96:
ad:0c:fc:e6:0d:0a:28:53:a6:57:49:87:e4:89:be:a0:39:03:
60:2d:a3:e8:49:de:9e:22:d9:03:d7:cc:3f:15:33:b5:0b:e4:
1b:bb:17:58:7f:58:7d:2e:9b:87:de:e7:f0:05:94:e8:99:62:
bd:8e:5b:78:65:1b:13:f5:aa:24:80:1f:7f:2e:d9:9b:20:36:
53:76:7d:7b:f4:b9:16:e0:08:d8:28:b0:41:82:ed:fb:38:5f:
9b:68:c3:46:d3:54:9b:c3:d9:bb:75:22:c7:50:8d:84:6a:cd:
b7:09:86:47:f2:a6:81:eb:31:57:35:60:c8:f2:9c:b7:9c:ca:
5d:56:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:12 2025 by rpki-client