Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier: WticvSQyTY2YeTD40YKEVLBkQzBij3bKEoFltqQfNZI=
Subject key identifier: 4D:A5:A6:8F:68:5C:D2:5B:DD:4C:4A:F6:51:F2:44:72:CD:4F:22:26
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial: 019A4F990D750AC949F0CE3856846C8DD942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number: 1451
Signing time: Tue 04 Nov 2025 16:00:21 +0000
Manifest this update: Tue 04 Nov 2025 16:00:21 +0000
Manifest next update: Wed 05 Nov 2025 16:00:21 +0000
Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: B3CuLK2Qjwys/LL6EMmaxigUrsuNCkdb7ELCTAUdCHE=)
2: p1W2xtpypFZeS4V60u-1DjDqTds.roa (hash: 34oWoq20u1/mqtBm1kWh1Zu5DKZerBQ57c/ZC8RMnIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:0d:75:0a:c9:49:f0:ce:38:56:84:6c:8d:d9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Validity
Not Before: Nov 4 16:00:21 2025 GMT
Not After : Nov 5 16:00:21 2025 GMT
Subject: CN=4da5a68f685cd25bdd4c4af651f24472cd4f2226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:e5:35:73:9b:3e:43:5e:e0:90:f9:36:0f:
6e:4d:36:e9:e5:55:fc:d5:e7:44:0e:ae:37:23:ec:
20:a2:84:20:4b:d9:33:40:fe:e1:a0:2f:d4:8a:92:
70:46:35:aa:f0:ac:23:64:c6:f5:12:02:18:d7:9c:
f6:b4:d3:bb:39:ce:d9:06:23:9e:6e:2d:e5:cd:c3:
a8:7b:51:c2:c1:52:ce:dc:62:cd:7b:5f:fe:59:85:
35:a6:82:b4:93:f4:8d:b5:b3:cb:a8:ff:f5:26:88:
82:2d:03:e3:d1:93:56:93:58:96:08:ea:af:2a:86:
05:a2:ac:30:db:17:5f:c4:d1:fe:5f:0b:e5:26:3d:
bc:07:d8:48:d8:bc:09:fa:cf:39:5d:f5:45:3f:62:
8c:3c:9c:fe:d7:9b:58:62:f6:d0:7d:9f:31:17:b7:
e9:74:66:de:77:d4:d8:80:36:3b:ba:65:f3:be:88:
bf:f7:7e:90:16:39:c9:ec:a8:f5:af:7b:dd:be:4d:
51:24:29:30:cf:9d:08:ba:03:c0:e8:ad:26:8c:3b:
94:67:3a:5b:13:97:23:d4:25:3e:85:5a:5a:80:cc:
c9:9d:30:51:e2:ed:da:40:a1:4f:f3:33:7b:e4:40:
bd:0a:e0:7a:7a:ce:be:d8:04:ac:6b:fb:f9:5f:d0:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:A6:8F:68:5C:D2:5B:DD:4C:4A:F6:51:F2:44:72:CD:4F:22:26
X509v3 Authority Key Identifier:
keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:24:99:1e:4d:e5:7a:c4:19:5a:79:79:35:0f:85:44:b6:7f:
3d:a1:18:e3:4f:8b:af:26:7a:c5:5d:18:40:23:99:7f:f9:87:
f3:8c:83:a0:7b:12:5a:37:f0:9e:da:49:85:44:d1:00:a7:e3:
37:73:45:59:83:9f:ab:83:1f:46:cc:57:9c:e8:50:fd:80:64:
d9:b7:0a:e0:52:5a:be:9e:a4:5c:33:20:5d:29:b0:fd:10:d8:
11:e2:45:4b:de:d2:4e:61:20:32:c2:5d:33:c1:57:7c:18:ef:
b7:7c:70:4b:41:39:13:77:f1:46:dc:66:9b:e9:77:13:e8:1e:
8b:8c:15:d5:fa:a1:23:e0:58:70:b2:a9:3e:1a:a0:66:e0:ca:
c5:a1:8a:e4:5c:88:a1:90:95:10:43:d0:96:08:9c:de:ce:04:
ef:44:2d:55:5d:dc:62:c3:03:62:36:48:42:19:91:66:8c:0f:
1b:0c:d5:02:48:91:28:bd:45:9c:ef:a0:69:f2:56:7f:8c:ea:
0c:e2:81:44:16:03:59:ae:4d:e1:4d:f0:d8:36:eb:b2:6b:22:
7f:80:48:61:f4:01:e7:aa:ac:67:12:39:65:1a:be:26:f1:29:
82:f3:03:4a:bb:f8:f8:f1:d5:92:5e:1d:24:e4:0e:2c:a4:6b:
c5:b8:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:47 2025 by rpki-client