Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json)
Hash identifier: res5+8725qCe0NkEdtMoze/nudsMPAGM7hnMC7Rzc/Q=
Subject key identifier: 76:BC:DB:56:42:E7:AE:31:0F:D6:64:85:E5:F0:3D:B9:D4:75:34:14
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 019A50E262AB957F243F6DC96BCCD11E22E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
Manifest number: 08A2
Signing time: Tue 04 Nov 2025 22:00:04 +0000
Manifest this update: Tue 04 Nov 2025 22:00:04 +0000
Manifest next update: Wed 05 Nov 2025 22:00:04 +0000
Files and hashes: 1: PrynGxhd3fBYSysYytSLlNvgiPU.roa (hash: c1xBK/MstkcP/5fvaGRoD60yvfbDsZTSPuvQcmy7U14=)
2: Py8NBn2wKQtg0zHbcBysEwIXqks.roa (hash: NTVpJIiHXmRF3xsTXgz/x/FsM7sCsul7uRQRW+IaP6E=)
3: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: K9pE6DLdYBhxVL8IHFcUI2J/4hoAMM2Rx9qR6+UOR1Y=)
4: WYEKXhWarkIaMX3EUO00ulkHiOE.roa (hash: U2QqWXZG6O8oPXfv5PztqHfihktp5N8jfu2uMFAxqk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:62:ab:95:7f:24:3f:6d:c9:6b:cc:d1:1e:22:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Nov 4 22:00:04 2025 GMT
Not After : Nov 5 22:00:04 2025 GMT
Subject: CN=76bcdb5642e7ae310fd66485e5f03db9d4753414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:87:00:0d:72:b3:fc:5e:6a:67:8a:6e:82:
5c:44:9e:54:46:30:02:37:74:52:22:d8:eb:73:47:
41:74:66:93:bb:19:f9:ce:88:af:29:c2:40:1e:bf:
e0:a1:f9:aa:a9:2d:14:8d:ab:6e:0d:b1:f8:05:e2:
d8:99:6d:d9:10:d4:47:23:16:b1:cc:c0:f5:3e:84:
e1:b8:cb:e2:f1:70:bd:43:26:6b:ab:1d:be:10:0f:
0e:75:20:53:bc:70:a8:62:7f:98:de:cd:98:7b:2d:
52:83:d8:4e:9b:74:0f:a3:4d:35:fb:61:8e:f6:c0:
e3:69:63:f7:4b:c9:cb:b1:83:75:6e:90:ad:f5:37:
f2:e6:11:75:6d:ee:84:7b:76:9d:69:39:bc:7e:38:
bb:90:c2:91:a0:9d:22:c9:6b:07:f7:8a:ad:95:0a:
49:cd:d2:8e:c5:a2:f2:98:2a:af:94:86:01:51:83:
a8:35:ec:d3:00:f6:f2:10:32:f7:b6:fd:2b:d5:b4:
23:c4:e9:e2:84:5a:d8:c2:ee:e6:b9:91:3c:a6:cf:
59:7e:c7:0b:c4:68:f6:6d:fd:6a:10:e8:1d:51:91:
bc:b0:1d:45:59:3a:c2:c2:4b:a7:3e:2f:b8:1a:94:
d7:93:e3:52:00:9e:ff:25:64:33:5c:43:cc:c2:80:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BC:DB:56:42:E7:AE:31:0F:D6:64:85:E5:F0:3D:B9:D4:75:34:14
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0e:82:7a:cf:0b:e9:05:d4:16:38:bb:96:19:6e:5a:65:87:
fc:53:b3:7a:b5:70:3b:a2:44:92:ba:6c:b3:ee:d4:52:ce:11:
80:aa:41:9f:1e:0a:fd:16:7a:a3:65:a2:41:99:37:b7:6b:7a:
4b:df:5f:29:3f:22:be:af:6d:d5:c9:bc:8e:5a:86:f9:34:77:
8f:d8:af:13:e5:e5:f9:a4:c4:1d:7f:39:52:e2:e5:ea:7b:34:
7b:78:40:4f:3f:6a:45:2e:fa:02:a4:ef:da:4b:a7:4e:51:e4:
25:f1:29:5e:74:8e:47:82:86:5f:db:86:b6:44:71:63:73:8d:
05:4c:b8:51:c8:1d:90:fa:f6:2c:71:95:24:6e:77:4d:3c:3c:
75:16:8e:10:76:a5:10:1e:96:97:70:4d:19:b1:02:dd:86:db:
e2:bd:d1:e4:3e:11:c0:0f:3f:bf:20:be:2f:25:cb:0f:f4:84:
b1:06:74:07:b6:9b:3d:c8:92:0b:ac:13:71:4a:e7:0e:85:cb:
57:20:51:da:ed:95:99:a0:ef:fb:c8:9d:d7:de:fe:3b:41:3c:
b8:b0:a9:9d:6b:cf:ea:81:f6:4c:56:68:7b:72:b3:2d:be:e8:
98:ba:ab:c5:e5:b3:54:13:b1:e9:8a:9f:9f:18:6e:78:fd:2f:
0c:46:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:51 2025 by rpki-client