Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: qWryFUy8x1XrHiPGaiHySmHVLDSSaGHFZp6tSC0ld5E=
Subject key identifier: 9D:D9:32:65:19:D2:43:30:0B:85:17:8E:D3:BD:B4:B9:40:F0:3A:B2
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 019A53083F7E9A00F4B9D1472EA3231585B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 0954
Signing time: Wed 05 Nov 2025 08:00:40 +0000
Manifest this update: Wed 05 Nov 2025 08:00:40 +0000
Manifest next update: Thu 06 Nov 2025 08:00:40 +0000
Files and hashes: 1: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (hash: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: m7sElnDiO91lkf3Ym5MtNxQg8Mx1Fa4kSxdGdIZp0Is=)
3: jMo_zU9oPYD4-ORBa0HOxz6ElxQ.roa (hash: B6xq/IGkR0N1YUdtA/OK7mLlIr8yn5LM2g8dHTL3gUI=)
4: qy2YkDqljayW8L1eKrjgUU5sPyQ.roa (hash: AsWZRC0AXC3FY0BmIha8yHFLeU4GKo6EqdCK1jqHGe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:3f:7e:9a:00:f4:b9:d1:47:2e:a3:23:15:85:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Nov 5 08:00:40 2025 GMT
Not After : Nov 6 08:00:40 2025 GMT
Subject: CN=9dd9326519d243300b85178ed3bdb4b940f03ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4e:00:c8:70:6a:15:53:2d:74:8b:a3:51:87:
95:7c:57:f9:3a:0a:84:34:2c:8e:94:cf:1a:31:f6:
52:f7:7f:de:7f:c4:33:18:07:67:7f:89:fc:b8:e1:
94:97:f2:60:ee:16:fd:20:a0:be:f4:dd:83:0f:90:
fa:bd:c5:32:5e:7f:92:25:65:f1:b3:11:72:08:fe:
d1:10:63:63:89:c9:b8:e8:19:33:1f:0b:9b:7c:3e:
a6:e4:17:2b:ac:e6:28:91:a8:be:32:55:b8:bb:48:
95:22:ee:11:ac:4b:ce:12:bb:bc:ae:14:92:1d:c9:
80:36:3c:68:b6:75:f8:26:ab:21:44:6d:e9:d1:be:
6b:69:0a:fc:e9:48:1e:3e:ce:dc:81:de:29:7a:b9:
1b:27:df:a3:47:7a:8d:91:bf:88:e9:88:5d:58:5b:
79:02:5a:74:b2:90:69:c9:54:ce:5f:97:62:da:d2:
4b:47:02:99:fa:c4:cd:b8:c3:0a:90:c1:8d:07:1d:
e6:b6:f9:d8:74:b1:aa:8b:af:79:54:38:0b:46:f8:
5d:7c:5e:dd:78:30:6a:1b:06:6e:6e:c6:8a:59:55:
7a:bb:2c:87:15:5e:52:79:2f:ed:46:5c:1a:b2:27:
a9:38:48:8f:7e:b7:5b:ff:3d:8a:0d:01:a9:5e:27:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:32:65:19:D2:43:30:0B:85:17:8E:D3:BD:B4:B9:40:F0:3A:B2
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4d:e0:0e:0d:11:e5:ff:83:99:6b:5d:ce:bc:13:7f:61:2e:
65:59:87:b0:dd:3c:b7:15:c6:b5:1c:da:1d:b5:59:ee:de:0b:
b3:36:9c:66:07:c2:8e:ba:94:02:7e:4a:44:da:b8:b8:a9:2c:
4c:df:7d:6c:dd:17:80:4c:37:1b:8b:fd:2c:57:0c:7d:2d:6f:
d9:33:59:0e:02:90:73:29:8c:23:a0:7d:40:c2:50:af:4a:b7:
40:0d:56:32:af:89:ef:65:f5:33:ef:da:fa:e9:0b:b9:1f:07:
de:7a:72:55:c7:e0:2b:64:61:32:2a:30:13:c4:b6:c6:f0:a8:
54:4e:00:2c:04:01:89:71:e6:20:e6:ac:7f:5f:63:a8:cc:f7:
f5:03:b2:04:df:f0:64:ec:b5:2e:7e:71:42:8a:0b:16:a2:5a:
60:ec:03:5c:64:9a:a7:9d:79:b6:da:b1:3d:79:26:79:1a:85:
83:1f:90:3c:79:74:f2:8a:9b:4e:4a:a3:f5:e8:97:63:dc:a8:
d9:82:a0:d6:51:c6:51:cf:0a:6d:a5:3d:04:e1:c1:13:6b:c9:
8f:98:ea:4d:4d:ff:2e:9d:14:13:ba:72:97:7a:ef:38:3e:d1:
3f:b2:8a:09:05:52:6e:57:2a:43:30:20:d8:9d:d5:6d:27:15:
a0:7c:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:30 2025 by rpki-client