Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier: YU6yXG6MQ9WcWAECwvvCGJOP6CunMVGOlcolrRpFYC0=
Subject key identifier: 80:3D:85:5D:04:AB:B5:99:28:48:FB:BB:52:06:C7:AF:D4:A1:31:DB
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 019A4E8689D3AD5C6E9FCC7E7ECD1A3E680E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number: 06EA
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: Z9CjrrCX4gk/R1BxZ2y+KIDq81VkTSIXeWyyHTtmqKw=)
2: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (hash: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:89:d3:ad:5c:6e:9f:cc:7e:7e:cd:1a:3e:68:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=803d855d04abb5992848fbbb5206c7afd4a131db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:16:56:c3:27:73:b5:42:ea:a4:f8:fc:0e:
65:6c:7d:72:45:5d:15:59:b7:84:a4:5d:15:06:f8:
52:21:eb:6b:ae:c9:df:08:c5:b1:82:ff:94:dd:5b:
f8:50:29:24:9b:13:96:18:83:2a:50:d5:bc:18:28:
18:fd:97:5e:d5:ca:2d:09:4c:15:e7:a7:13:92:53:
a0:09:f8:77:ee:e7:70:d8:03:8c:74:96:2d:40:cc:
3a:1e:20:70:07:d1:12:17:ef:b6:68:67:72:a0:00:
2d:0f:29:ec:d2:09:a8:0a:53:e2:33:1d:fa:85:b9:
b6:8f:03:3d:76:df:ef:87:a3:cd:6a:c1:d3:48:db:
7c:6f:8b:37:6c:2c:cd:52:28:d1:35:d8:3e:88:b1:
fc:76:73:73:b0:7b:a3:bf:24:1e:59:fd:bd:88:50:
8a:4b:ea:60:33:97:7a:e6:65:17:e0:c7:db:89:c4:
b6:e0:64:a8:c3:51:3f:5b:ba:44:77:f8:e9:e0:6b:
81:69:0f:79:23:23:3d:bb:2a:e3:09:74:22:02:28:
39:fe:09:12:41:14:1e:ab:42:6c:89:7b:ef:cd:a7:
77:5f:8f:4d:84:4d:0e:c6:a2:55:3b:fb:6b:e4:7e:
2d:d1:cd:ef:b6:44:9d:8e:7d:a6:27:2f:a0:2c:04:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:85:5D:04:AB:B5:99:28:48:FB:BB:52:06:C7:AF:D4:A1:31:DB
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:af:44:3b:e8:1d:59:9d:65:64:02:bf:fb:1b:9f:9a:26:7e:
09:35:95:12:cb:7e:cf:3d:a7:5e:5f:47:b8:4e:31:25:3e:a4:
1e:d9:46:ca:11:d6:7a:93:89:b2:83:15:01:2b:a4:55:b4:f3:
0e:cc:f7:43:5b:5c:cd:6e:f9:48:84:05:d3:ef:76:cc:19:1b:
5f:08:41:c8:d6:31:5c:de:b0:c5:96:ef:4e:98:00:d6:81:70:
bb:97:7c:23:fa:f0:6f:20:22:7c:4c:21:bb:59:da:ff:6d:73:
31:7b:63:cb:3a:71:5d:7c:2a:5e:1c:4b:d6:3f:f2:05:a7:a2:
20:f9:60:14:48:07:08:88:98:d7:22:26:b4:8d:69:07:d9:8f:
56:da:60:11:be:51:a6:ef:38:b8:72:a1:b7:67:98:4f:39:71:
55:9d:11:5a:1b:de:d1:7e:34:36:8e:3a:2a:96:e3:b5:b3:71:
bc:6f:a4:7c:55:1b:2b:bc:f7:62:26:94:02:fc:14:a5:0a:a8:
46:d9:28:2a:da:7d:f8:36:e0:bd:39:ca:9b:5d:47:75:2f:19:
de:c3:c5:27:8e:1c:a6:b7:db:fe:d9:33:dd:94:d8:55:b3:dd:
75:57:b8:4b:10:ed:8d:f7:ad:e9:cb:cd:74:df:61:a6:9b:03:
21:f6:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:43 2025 by rpki-client