Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: KNKrrR7tMtqzQl9jqrLYL1bHPcd8ATLlX7mgYc+uQxk=
Subject key identifier: 24:F0:8B:99:D4:1F:19:3D:DE:0E:9B:A9:F6:0A:F7:95:15:75:D8:D1
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 019A4E8653C16B6D7F4CAEA157DE6D4D50CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0D02
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: 29SLMo34FhaAnpTCRG4-JhzaoEU.roa (hash: 2fi9WOSprxmNRnuIjRed7XskP0Ewr4AfYM3eX1Xq9nE=)
2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: F61grtgtfX4VFe/JcicLflfJCEvr6jTEMtqHyWTKqnI=)
3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=)
4: gC44VWnXdqeRgBq7XFfpWF95Q6M.roa (hash: ZlFvQ0FdcQWc6LDQd+RgeJur3FpyWFSWGQsV0siREzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:53:c1:6b:6d:7f:4c:ae:a1:57:de:6d:4d:50:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=24f08b99d41f193dde0e9ba9f60af7951575d8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:11:fb:22:91:7d:1e:f1:6f:6e:d3:34:b2:
46:74:3b:e7:94:46:00:67:20:62:3c:76:ed:36:3a:
e6:39:c2:1f:8a:0c:b4:37:40:1e:9c:3c:13:c8:b1:
ed:95:4e:6d:00:c9:92:a0:ab:5e:e0:96:cf:0f:f6:
17:54:cb:e1:3e:8e:b6:2a:8a:1c:21:19:ce:72:fa:
bf:b2:3d:ed:df:31:b1:b6:13:c9:b6:97:5f:a8:a1:
05:18:a6:d4:57:b1:50:f3:35:1d:e3:f2:e2:55:70:
25:c2:bb:7c:e5:05:ca:04:78:9f:35:01:de:b7:71:
96:78:5e:f0:83:7d:b9:6f:c8:78:a4:a5:0c:45:5c:
c3:f4:38:df:a1:79:c9:54:9c:4a:01:de:9e:c1:a0:
e1:4f:4f:b1:6a:58:33:8f:cd:1b:93:34:34:37:f3:
2d:95:8f:21:dc:53:b8:50:03:48:c4:1b:77:bd:97:
2d:5d:5e:10:49:18:93:11:ed:ed:f3:ae:92:2e:bd:
27:4c:a4:15:87:27:8b:02:3b:2d:d4:3f:5f:71:05:
00:ca:69:10:2a:7a:e1:f4:0b:d9:41:f5:bf:a5:c1:
63:45:72:5e:27:35:5a:b4:9e:61:71:36:37:6c:d7:
61:2e:77:37:78:aa:7a:4f:fa:d9:7a:2f:88:8d:84:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:8B:99:D4:1F:19:3D:DE:0E:9B:A9:F6:0A:F7:95:15:75:D8:D1
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:1a:fd:cb:d1:c1:6a:fd:c4:89:16:e7:aa:57:d2:39:c1:
2a:7d:34:6f:1b:6a:b3:bd:3e:fb:a7:c8:05:db:a4:bf:12:49:
8b:54:2b:cc:de:0f:10:48:62:16:2f:cf:11:88:1a:bc:53:cd:
ef:f3:fb:49:1b:f5:12:e8:33:68:36:bb:e3:d0:48:e3:0b:5b:
63:99:e3:eb:74:d5:4e:83:9d:04:4e:80:24:0b:e0:83:21:28:
fa:bf:f9:9b:02:64:17:a6:75:85:69:97:c9:74:4a:82:00:c1:
4b:25:1a:c1:e0:f0:d4:74:3f:04:63:6c:10:87:df:67:ab:5a:
1f:d0:57:c1:7d:86:fa:1f:f7:78:2c:46:77:fe:49:aa:2a:16:
a1:66:54:fc:43:25:3c:1e:7e:a1:82:d3:bc:e6:c5:59:64:57:
4e:7d:e7:67:10:cb:9e:0b:23:fa:2e:41:81:17:83:0b:9c:9d:
a9:90:18:e8:5f:56:3d:2e:e7:a3:cc:3e:36:e3:54:53:24:6f:
67:b1:58:84:68:03:e6:fd:47:6e:b5:1c:0a:15:7d:49:6f:2a:
95:44:ce:07:2a:f3:b3:57:2f:fd:8d:00:4c:88:5b:5c:ad:0e:
ae:39:07:51:b3:4e:44:ca:3a:66:69:9e:60:91:70:a1:41:8b:
28:dd:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:26 2025 by rpki-client