Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: HBmuIbnY8qB+DQfHYAqOjIcmI0Qnmwiw8fge/XAJCyQ=
Subject key identifier: 35:8E:17:23:D7:04:F5:D8:78:7D:7A:22:2F:29:C3:28:2E:6D:E2:9C
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019A4DE17E98EDF059D9BF7767B4F74AA7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:14 +0000
Manifest this update: Tue 04 Nov 2025 08:00:14 +0000
Manifest next update: Wed 05 Nov 2025 08:00:14 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: Sg84DeafW7x1pOYaINavJw1c863ikFxVoqczl8uRk4w=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7e:98:ed:f0:59:d9:bf:77:67:b4:f7:4a:a7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Nov 4 08:00:14 2025 GMT
Not After : Nov 5 08:00:14 2025 GMT
Subject: CN=358e1723d704f5d8787d7a222f29c3282e6de29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:27:e6:1a:c5:5f:70:31:84:cf:dd:2c:e8:
16:58:e1:34:f8:9c:f4:17:0d:b5:8c:c8:99:b2:53:
c8:4e:32:c1:62:1e:7b:5d:e4:bf:3c:49:53:4f:55:
c8:96:89:3d:7c:08:e6:e7:b6:42:a2:ed:15:2a:78:
f3:4c:8d:61:a0:03:23:c4:98:59:17:cb:6e:f7:0e:
7a:c0:a0:80:a3:75:64:65:78:1c:46:8d:e9:8e:09:
48:42:33:d8:67:1c:af:db:a6:a3:94:4c:5e:d6:1e:
ed:32:22:04:74:6a:07:c5:eb:02:d5:4f:c7:ae:1e:
42:11:8f:83:e9:33:5d:65:32:92:06:5d:2a:5e:20:
04:b2:aa:79:e5:03:51:bd:b8:63:17:d8:98:ec:11:
f8:c2:6f:70:c1:2a:9b:c2:59:63:23:fb:5c:2d:71:
8a:3f:92:6c:dd:d9:7c:79:8f:52:c6:a9:4a:59:11:
23:39:b6:d2:1a:79:b9:2f:3c:4d:fb:f6:f0:56:68:
e4:db:7c:f4:00:69:1b:ac:2c:5a:2c:99:a1:d2:e0:
d1:33:ab:fa:2e:a3:94:24:36:d9:1d:e5:a3:20:22:
22:ac:29:ce:5b:55:4b:8e:eb:1a:91:cf:65:a8:d9:
82:e1:c4:68:1b:cd:28:ff:91:26:76:3d:f6:22:b3:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:17:23:D7:04:F5:D8:78:7D:7A:22:2F:29:C3:28:2E:6D:E2:9C
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:de:2f:8e:75:b2:91:f4:06:5b:84:06:ec:dd:32:06:2a:
d3:a3:0f:6c:20:4b:72:b1:a2:68:2b:64:8d:14:32:9b:6c:9f:
eb:d1:d5:1c:e6:db:a1:bd:27:e8:81:66:50:33:7a:b2:0e:3d:
09:9c:93:7c:e4:a6:51:37:a9:83:ca:09:c1:a1:36:57:08:1e:
b3:20:e0:4f:c7:8b:91:8a:69:99:a4:00:e8:b3:89:dc:90:60:
8e:00:ee:1b:df:a4:e6:98:64:de:1a:9f:b6:03:5b:43:5c:23:
63:32:b9:de:4d:c7:f9:24:1d:b9:ed:45:72:00:d6:94:7f:75:
97:ac:a6:15:b5:17:cd:cf:2a:6b:7a:42:ac:46:dd:1b:f8:96:
9f:4b:77:66:88:97:f7:c4:db:19:11:a7:3a:15:27:03:83:12:
08:98:94:a5:b5:78:47:c3:30:56:e5:11:a7:25:14:97:d9:c3:
b2:ca:39:3a:0e:bf:23:75:f7:3a:ac:b3:74:c5:65:12:c1:ef:
08:6f:a4:4b:9a:0b:b5:13:b7:93:b5:bf:4e:e5:9a:5a:c4:64:
5b:3f:1f:ad:f9:62:a7:ef:98:fd:7b:26:6c:0e:3f:f3:19:48:
84:ab:b2:35:88:a1:ea:2a:ee:3a:6a:d7:bf:49:b7:b9:12:84:
23:7e:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:02 2025 by rpki-client