Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier: iWpC6/EBcitrfvmhe6sDOPd7nhGh633uF6FXPMNXFZs=
Subject key identifier: 0A:C7:79:2E:30:1D:0D:B9:E8:1F:B7:9C:16:72:4D:76:61:E4:8D:75
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 019A526363CE3C316F7CEED3135051C4D3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number: 16F7
Signing time: Wed 05 Nov 2025 05:00:36 +0000
Manifest this update: Wed 05 Nov 2025 05:00:36 +0000
Manifest next update: Thu 06 Nov 2025 05:00:36 +0000
Files and hashes: 1: SIEblnDTmxDkNQuR8GrQyNScjq8.roa (hash: 994/huZNdlRSyw8MDRW+EKE0ylyI66j7DW5sNtIspOA=)
2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: CX6FsaLFXWOEMb3GGhYEizztbt/UUFMOpxoq/Bil3v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:63:ce:3c:31:6f:7c:ee:d3:13:50:51:c4:d3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Nov 5 05:00:36 2025 GMT
Not After : Nov 6 05:00:36 2025 GMT
Subject: CN=0ac7792e301d0db9e81fb79c16724d7661e48d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:42:fc:1c:86:e1:7e:5c:1f:39:40:4d:54:
e5:9a:69:6c:47:38:60:3f:2f:79:9d:22:4f:85:49:
05:e7:2b:52:dd:1a:05:27:c8:5d:09:21:87:4f:97:
0f:2b:ec:f1:eb:60:03:8b:d3:65:18:10:94:c9:fa:
1b:42:5d:89:f4:9b:8e:4d:5a:50:77:60:57:b6:f8:
87:0b:05:58:b6:2a:22:f3:3b:2b:48:40:64:dd:0c:
f4:5d:05:a1:ff:93:e5:69:b1:ac:c0:32:35:2f:0c:
ae:e9:90:8e:19:76:10:1c:02:db:3a:4d:e6:c8:ee:
26:49:dd:70:7a:11:0f:e3:cf:79:d8:52:39:32:e3:
b0:b7:a1:61:d9:a4:fc:32:e1:d0:cc:37:db:e3:0d:
9f:60:5c:c3:00:4b:65:b7:ae:fc:4a:34:d1:20:0c:
13:46:4b:51:0d:d5:8d:55:4e:bd:74:15:3b:ae:66:
a7:e7:fb:2d:f9:7d:27:83:6b:76:34:dc:91:73:77:
2f:e8:66:ae:64:c8:2b:31:07:ea:02:ae:4e:ec:11:
2c:d3:b0:9c:36:88:cf:b4:b3:e5:ef:70:d4:d8:2c:
d5:1c:ec:93:cc:00:10:b5:a1:dc:09:6f:b2:e3:3c:
ad:9f:8d:7d:a8:9d:2d:f7:1c:91:2e:e8:c2:61:3b:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:79:2E:30:1D:0D:B9:E8:1F:B7:9C:16:72:4D:76:61:E4:8D:75
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ac:53:91:f6:c1:78:be:da:c3:5a:9f:9d:65:3d:49:a7:a3:
73:b2:31:82:82:cb:44:a6:62:76:79:77:b6:7e:0d:8f:cd:07:
e4:27:52:14:8a:90:ed:6b:e2:86:53:1c:82:86:d7:c5:19:8b:
e7:8f:29:88:f0:7d:5c:97:98:bf:c0:50:41:4a:33:64:0d:4f:
20:d6:41:f3:3d:4c:d8:94:73:51:6b:53:05:48:df:47:8f:d9:
77:67:da:ea:f9:3f:7e:cd:b4:56:97:70:98:cd:19:d2:d2:c2:
8a:f7:ac:0c:ce:0e:97:e3:67:95:47:7d:e5:83:7e:dd:f2:51:
6e:14:07:f9:29:97:05:19:26:2c:64:8b:71:de:42:aa:36:9e:
c5:16:07:1a:2e:d6:1c:0a:d7:84:62:8f:77:af:1d:17:d3:4c:
9c:d3:77:bd:59:21:49:ff:c6:90:a8:a6:f8:70:eb:f7:f3:a7:
4e:f2:80:39:cb:2a:09:0b:b5:5d:64:83:77:60:01:e7:39:1c:
a7:e4:5d:ee:41:b5:8a:d5:db:35:db:38:52:fc:3a:2a:0a:ee:
7c:37:84:21:7c:d5:2d:a4:f2:79:b8:23:ab:ec:8a:66:fd:14:
93:c8:b0:e7:2d:9b:ee:fa:b2:0e:f7:66:8e:54:5e:72:94:d6:
7c:f3:ca:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY2POPDFvfO7TE1BRxNPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjhiYWNjMzY1OWRjYjMzODlhYTQ3ZTM2NjRhNWY4Mjg0
ZTAwYWYwHhcNMjUxMTA1MDUwMDM2WhcNMjUxMTA2MDUwMDM2WjAzMTEwLwYDVQQD
EygwYWM3NzkyZTMwMWQwZGI5ZTgxZmI3OWMxNjcyNGQ3NjYxZTQ4ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n5C/ByG4X5cHzlATVTlmmlsRzhg
Py95nSJPhUkF5ytS3RoFJ8hdCSGHT5cPK+zx62ADi9NlGBCUyfobQl2J9JuOTVpQ
d2BXtviHCwVYtioi8zsrSEBk3Qz0XQWh/5PlabGswDI1Lwyu6ZCOGXYQHALbOk3m
yO4mSd1wehEP48952FI5MuOwt6Fh2aT8MuHQzDfb4w2fYFzDAEtlt678SjTRIAwT
RktRDdWNVU69dBU7rman5/st+X0ng2t2NNyRc3cv6GauZMgrMQfqAq5O7BEs07Cc
NojPtLPl73DU2CzVHOyTzAAQtaHcCW+y4zytn419qJ0t9xyRLujCYTuisQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArHeS4wHQ256B+3nBZyTXZh5I11MB8GA1UdIwQY
MBaAFFP4usw2WdyzOJqkfjZkpfgoTgCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQt
MTUxMDdiY2E0NWI1LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQtMTUxMDdiY2E0NWI1
LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6xTkfbB
eL7aw1qfnWU9Saejc7IxgoLLRKZidnl3tn4Nj80H5CdSFIqQ7WvihlMcgobXxRmL
548piPB9XJeYv8BQQUozZA1PINZB8z1M2JRzUWtTBUjfR4/Zd2fa6vk/fs20Vpdw
mM0Z0tLCivesDM4Ol+NnlUd95YN+3fJRbhQH+SmXBRkmLGSLcd5CqjaexRYHGi7W
HArXhGKPd68dF9NMnNN3vVkhSf/GkKim+HDr9/OnTvKAOcsqCQu1XWSDd2AB5zkc
p+Rd7kG1itXbNds4Uvw6KgrufDeEIXzVLaTyebgjq+yKZv0Uk8iw5y2b7vqyDvdm
jlRecpTWfPPK8g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:32:59 2025 by rpki-client