Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: 7Df+a8vW7+3X+AdYEySgW0rAE9e56hMCfe+Pz4S0vLw=
Subject key identifier: B3:E0:41:4C:81:81:64:6C:24:25:2E:F0:64:2D:E6:E5:6A:8D:4C:F8
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 019A5187C837132AAC426292EE66E64192D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 01:00:44 +0000
Manifest this update: Wed 05 Nov 2025 01:00:44 +0000
Manifest next update: Thu 06 Nov 2025 01:00:44 +0000
Files and hashes: 1: ECD7apX3eHOOfrh7KlF7PFjYZG4.roa (hash: 71V9g38SO7JBAaQym2ThymDLgJtxxyPJi6oj0bVn0zY=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: +iyV9DyEEKtRcEz6briPucP+FurmhlZIo7VLpnNomjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:c8:37:13:2a:ac:42:62:92:ee:66:e6:41:92:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Nov 5 01:00:44 2025 GMT
Not After : Nov 6 01:00:44 2025 GMT
Subject: CN=b3e0414c8181646c24252ef0642de6e56a8d4cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:04:ea:dc:02:11:eb:db:a6:f4:98:40:93:
ee:c9:b7:88:5b:45:ca:b8:4c:17:64:87:7c:7f:c1:
36:a4:9d:76:7a:76:0f:c5:63:96:3d:f1:0b:f1:b4:
f7:95:5c:55:f6:c0:c7:37:6f:6e:a0:45:fb:0a:a5:
1c:4c:a3:20:c2:b9:a2:59:3b:e6:a5:03:1d:a5:66:
b6:60:79:ff:03:11:18:42:f2:a6:71:37:da:ea:67:
5d:fc:c5:fd:4f:c8:13:da:0a:08:d3:f4:b2:ce:79:
f0:dd:b0:ad:85:e1:2b:19:64:f9:1b:bc:28:d5:00:
18:89:2d:91:ad:02:f7:26:e6:40:a2:ee:38:af:4c:
70:31:41:15:e8:1a:78:e5:2c:2c:fa:da:62:d9:04:
56:cb:2d:be:2b:fe:ae:3f:c9:19:03:6a:5d:33:0f:
8a:ed:1c:4e:72:2e:5d:a5:fb:d9:e9:3b:0e:90:85:
92:76:4f:03:d1:52:b3:ba:20:27:50:af:58:4e:fe:
56:e4:b5:43:41:1f:a7:2c:4a:62:7e:92:7a:5d:91:
31:df:86:5c:ea:d8:48:ff:f8:7d:06:f3:0b:97:40:
75:85:dc:da:fa:ee:a0:29:f3:f1:a5:cb:db:64:65:
74:47:18:6f:05:3a:fd:b7:0d:5f:e1:39:dd:30:08:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:41:4C:81:81:64:6C:24:25:2E:F0:64:2D:E6:E5:6A:8D:4C:F8
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:71:35:bd:58:cc:47:b6:b4:f6:b0:70:c6:ec:3f:b4:62:d8:
b8:f7:74:a0:26:37:65:d6:6b:b5:60:16:20:ab:da:8b:8c:8e:
69:7e:3c:b2:59:f2:3e:2e:5e:7e:a1:95:d4:71:fc:8c:d2:87:
99:32:51:29:57:94:5a:73:c2:54:7f:e1:f3:e2:0b:c2:dc:99:
91:35:b6:af:22:29:10:2a:54:32:01:ca:6d:d9:5d:d6:bb:f4:
8e:0a:ef:3d:61:e3:be:76:91:b3:8e:15:55:ca:53:ed:f6:a5:
a7:10:81:1e:6c:de:73:da:6b:e6:5b:e4:8d:9f:ee:50:1f:af:
64:9d:18:39:ab:30:5f:ca:e5:71:ec:0d:0b:2e:eb:7e:ca:62:
5d:d8:4f:53:37:83:25:e0:b7:8e:e2:28:61:13:2b:24:64:fb:
a3:0e:79:2d:82:4b:bb:c9:13:59:52:21:5e:b8:d9:42:a8:47:
00:2a:3e:e1:b6:fb:ea:4d:8d:36:eb:3b:f1:0f:b7:cd:8b:db:
9d:b8:02:a6:f6:a4:61:2f:dd:38:96:4e:fe:4c:d6:8e:73:a6:
d2:62:ac:ea:2c:e9:ce:e6:da:45:c0:b3:d1:e4:2f:2c:ad:e8:
c2:10:51:c8:f7:4f:98:0a:45:70:5a:81:7a:9e:d1:07:83:7a:
0d:67:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:32 2025 by rpki-client