Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: eE3fGrzxG+xYAPmYMqT8NtgAAB3NtIDBOEfG09Vsgak=
Subject key identifier: 77:95:AC:63:60:65:FB:C6:B9:6A:54:FF:E8:F1:E7:67:B2:B4:D5:81
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 019A4F61DC3431C984388F26DC56B78E2405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 15:00:04 +0000
Manifest this update: Tue 04 Nov 2025 15:00:04 +0000
Manifest next update: Wed 05 Nov 2025 15:00:04 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: PdCp15PtSI1+BZoV+CY4EiGMA/qkevf6TSM65TEC+WQ=)
2: fhzBsi8rU0jUB3-KHFWy_MPxr3s.roa (hash: +sQEtymDtkukDBlTZusUXGi5sWkBAEA4spvgFTkKSlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:dc:34:31:c9:84:38:8f:26:dc:56:b7:8e:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: Nov 4 15:00:04 2025 GMT
Not After : Nov 5 15:00:04 2025 GMT
Subject: CN=7795ac636065fbc6b96a54ffe8f1e767b2b4d581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:84:8a:4e:c7:f7:01:50:0c:1e:b7:98:d5:6b:
11:f6:38:35:c2:99:8e:2b:2b:e1:6d:9a:39:88:1d:
bb:85:9e:83:05:3c:1f:c5:a6:bb:54:0e:00:b4:4d:
b5:e0:fb:fb:1c:24:ff:f3:db:fc:c9:c7:3a:14:af:
88:5f:eb:7d:fd:ec:8e:7c:de:35:a6:5f:f2:ec:cc:
f7:43:39:21:1f:50:68:5c:ad:4c:ed:01:0e:27:0b:
c1:a5:31:ee:4d:c8:c7:13:f9:53:41:a1:d2:b6:d4:
18:18:7a:42:9f:f9:7c:07:63:b3:7f:8f:07:24:5c:
96:f8:c2:63:ec:d4:a2:65:0a:6c:85:7a:fa:0d:55:
e0:14:d5:f0:ae:64:e1:98:0c:d1:ed:94:2c:2b:09:
a3:68:90:2b:ab:83:6c:1d:c5:b9:4d:c6:ec:4a:c9:
59:86:5e:6d:69:12:36:67:ad:91:c0:37:dc:ad:0a:
73:79:ff:b4:68:9e:94:15:ab:af:ba:cc:2a:2d:20:
ef:f3:05:9a:5f:17:46:70:8a:7a:2a:9c:c7:41:58:
5b:1f:de:7f:8a:3f:cb:8c:e3:a6:f6:48:5f:7c:d1:
ac:ae:9c:0e:c5:42:d9:c6:f1:d6:50:a3:3d:38:23:
58:65:48:a4:cd:6f:97:da:14:b7:0d:0d:c0:b8:cc:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:AC:63:60:65:FB:C6:B9:6A:54:FF:E8:F1:E7:67:B2:B4:D5:81
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c0:81:f6:10:53:9e:22:53:06:4b:f3:6d:4f:73:23:b9:a7:
89:ec:29:ae:7a:e4:ee:5f:43:7e:5a:e0:83:3a:48:77:a2:5c:
71:5b:5a:49:35:b1:e5:2e:a4:33:5d:b9:b1:61:86:38:8d:d5:
fe:6c:d2:cb:4d:35:3b:97:e6:76:0e:e3:86:27:22:ec:72:32:
07:0e:aa:8f:97:b1:05:24:b2:e7:7b:ed:74:43:d4:e5:f4:e6:
f3:a5:4c:3e:a8:75:d8:1f:93:f9:e1:c2:5b:af:31:37:04:59:
fe:60:e1:40:24:8a:7a:9c:20:60:43:7b:db:9a:38:ad:e8:69:
42:51:fd:f2:ee:69:6d:e0:a7:56:e2:83:98:a1:4e:3c:07:54:
6f:c1:03:0c:4e:4e:bf:1a:46:e1:32:43:81:2e:8a:a0:a2:65:
4f:8d:6c:76:71:1b:30:92:7b:1b:08:f5:e2:5f:3a:49:c0:43:
bc:1a:7b:c6:58:ab:27:d1:57:5a:2d:16:0a:32:b5:8b:1e:ff:
91:04:b0:38:fd:70:83:e7:a3:4a:a0:43:00:a9:6b:95:bb:51:
9e:37:c8:98:a1:fa:cd:06:1c:ea:13:4d:0a:ba:e1:73:76:4e:
41:89:d8:d5:38:2c:d8:28:eb:a3:99:3e:20:f1:d3:70:76:5c:
a6:a8:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:12 2025 by rpki-client