Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: tFOBHhF8oyrURfCZMn3kZo53RFDo41CCYQ53/L3dm0U=
Subject key identifier: C8:5D:36:68:D0:08:6C:5C:D4:24:E2:B4:B9:2A:D3:FA:E8:AE:FA:0F
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 019A4D3D24168A0AE88ADDFD744E49F33516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:43 +0000
Manifest this update: Tue 04 Nov 2025 05:00:43 +0000
Manifest next update: Wed 05 Nov 2025 05:00:43 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: R3nPB/Uas1JXd4zjVZ681e6Vpf5ZdOIIodvX2lsUCsQ=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:24:16:8a:0a:e8:8a:dd:fd:74:4e:49:f3:35:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: Nov 4 05:00:43 2025 GMT
Not After : Nov 5 05:00:43 2025 GMT
Subject: CN=c85d3668d0086c5cd424e2b4b92ad3fae8aefa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:e4:a4:a4:36:fe:3f:0a:52:5a:88:72:39:
3d:d6:d1:fc:f8:42:f7:49:9d:71:c3:23:b4:7b:f1:
c4:e4:be:43:4d:72:76:b9:53:79:c2:c2:c0:f8:33:
7e:bc:20:38:08:d3:9d:42:a1:3d:78:e5:d9:88:4d:
26:0d:10:0d:48:50:33:e8:d6:3d:96:1b:17:0d:df:
a5:e6:a5:82:e8:e0:a7:90:55:dd:9a:74:ed:28:04:
21:29:67:f0:ab:1e:30:72:4f:5e:76:a8:85:46:1b:
cf:1e:47:5c:ad:ae:53:f4:cd:ac:e9:71:61:4b:9f:
cc:6f:d6:c7:ad:50:0b:30:96:72:30:c1:af:a2:38:
ee:95:35:cf:de:a9:5e:98:f1:32:62:a8:27:3a:4d:
dc:46:be:97:34:f8:e1:b7:cb:77:00:21:99:77:33:
d6:48:1e:bb:b4:e3:bc:53:42:12:64:a3:3b:72:0f:
f9:d1:e2:b4:8a:78:70:8f:75:22:4c:59:dd:6e:c0:
e9:c3:cd:a9:63:47:c6:55:b0:6d:5b:9c:63:a3:40:
5a:99:57:c8:36:fb:f9:8a:16:58:e2:2e:e0:2c:8a:
bf:1d:2b:74:a2:06:e7:7c:cf:61:91:44:e7:b5:31:
79:5c:7c:c5:cb:d8:6f:14:12:e7:5f:a2:59:6b:34:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:36:68:D0:08:6C:5C:D4:24:E2:B4:B9:2A:D3:FA:E8:AE:FA:0F
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c0:a9:78:62:ac:e8:51:9a:f1:f0:c3:12:bd:4a:30:a7:52:
47:45:c2:7e:6f:75:11:42:7e:98:26:d1:bc:25:19:2a:21:d8:
8c:14:fe:e7:20:ff:7b:0a:48:69:89:ac:5b:ab:07:5c:49:c0:
da:90:d0:1a:fe:09:23:50:ef:65:4a:8d:77:68:3c:d4:11:bc:
67:69:41:f3:5f:0c:29:49:e1:20:c9:9d:b5:7a:ce:ec:fb:1b:
1a:43:29:08:b5:ab:b1:2a:1f:65:72:cd:41:21:cb:49:c9:b2:
78:ee:d6:1e:38:30:54:f8:84:4a:1d:12:a9:80:c7:66:ef:4f:
ef:04:6a:d1:d3:d6:e3:e6:f2:79:39:e9:ca:1d:d7:2a:c2:73:
25:ed:c4:16:7a:76:64:06:29:e0:61:4d:70:f6:dc:5c:9a:e0:
2d:94:f2:cb:55:44:29:c9:bb:59:79:97:41:92:71:62:87:07:
75:4a:f2:30:4b:8f:82:42:f9:07:fc:53:e1:b7:95:35:64:10:
b9:f9:83:0e:2d:ea:45:d5:6a:2c:cb:27:74:eb:7a:e5:a0:c3:
4b:d5:f2:ac:3f:64:0f:bf:ce:9f:f5:31:5b:1e:6a:fa:5b:97:
34:17:a2:41:b0:cc:9f:24:c0:37:45:3c:12:77:8b:1f:62:5f:
b6:82:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:42 2025 by rpki-client