Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: 0QhQb5N0lrO02DQeEx2CvQSHrI+QodlaFFivz906PSM=
Subject key identifier: 18:94:DD:88:39:77:69:BB:90:3B:84:ED:AC:8E:EB:0E:FC:E6:49:0D
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 019A4F62A92CD9CC96FC9B533495604B60D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 110A
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: eoPJ29X1J+r+JbTXN16/3CBEWHqo2karoMtyzij7PRA=)
2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a9:2c:d9:cc:96:fc:9b:53:34:95:60:4b:60:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=1894dd88397769bb903b84edac8eeb0efce6490d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:11:8f:c0:f1:5a:cb:e6:00:f5:f7:01:94:
48:ef:76:2d:27:6e:de:65:16:94:1a:f0:a2:b0:b4:
6e:8e:16:12:51:f0:ae:5c:4d:b0:00:be:5b:b8:75:
7a:43:0b:f7:81:67:cf:0c:0f:06:dc:c6:43:cb:ce:
63:67:ef:f9:1f:a6:bd:9a:19:b3:4c:c5:ea:53:b4:
b3:95:07:8d:54:71:9a:b0:5f:98:4a:28:ae:da:1d:
67:01:9b:4b:5a:f6:13:df:42:f1:b4:0f:c5:54:d6:
f6:cf:bd:96:69:eb:a3:78:a6:b4:aa:bd:de:5b:0f:
75:22:20:39:da:e1:4b:4d:01:5e:9b:93:8b:57:71:
c0:b7:43:95:17:81:18:4d:8a:32:69:b7:cc:05:03:
8a:1f:c2:44:9e:cf:01:b2:a0:30:6f:84:21:56:2f:
0d:71:6c:cb:40:9e:cb:a3:91:99:a5:12:e3:9d:61:
3c:61:5a:e2:d4:dd:f3:cc:2c:b8:2f:3e:2a:83:c8:
7c:17:de:db:16:99:13:69:02:69:75:a9:7f:f2:f2:
9b:8b:b0:95:f2:91:56:ee:45:04:82:9e:86:6e:87:
42:41:54:3a:f2:91:d3:3f:db:60:5a:69:26:23:d6:
1e:d2:35:e9:58:15:60:e3:f9:df:be:0d:93:30:a9:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:94:DD:88:39:77:69:BB:90:3B:84:ED:AC:8E:EB:0E:FC:E6:49:0D
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0c:7b:3f:51:70:9a:46:bc:00:71:cc:ce:26:e6:bd:2b:5c:
41:1b:b2:cf:bb:0f:66:1e:fe:35:13:8d:91:e8:91:db:84:94:
9a:03:45:20:06:2f:d5:5c:86:bc:d7:d4:4e:ef:4d:7c:ef:83:
26:2d:8d:96:d9:d1:b4:ed:0a:f4:b3:ae:c0:a6:e1:c4:a8:2a:
45:2e:61:a2:a3:e7:46:b1:bb:93:21:2a:fb:8b:0c:c7:76:62:
b9:a6:94:d6:2a:5a:60:1f:67:27:3c:50:04:8d:ef:52:e0:7a:
25:ab:51:78:f0:62:ad:71:01:62:43:39:3d:1f:1e:8a:40:68:
28:06:f6:a0:32:ff:eb:fe:cc:32:be:ac:35:02:f9:e0:c0:32:
1f:54:3c:a5:08:19:58:5d:d4:be:9e:cb:6a:b1:6c:c0:2d:94:
94:1a:54:20:93:ae:c6:a9:8f:c3:85:35:e9:d4:df:a1:03:46:
f2:57:d2:a2:16:3c:ca:e5:b2:e9:11:10:b9:97:48:2b:99:fe:
d0:57:d3:db:24:76:86:e6:91:16:d4:3b:2e:5c:55:44:33:50:
0a:c8:cc:ca:16:f1:d9:8f:83:19:bf:1f:f7:40:ad:0c:c4:eb:
75:b5:60:da:9a:65:b6:ff:da:21:6f:94:1a:f0:db:d3:13:4b:
e9:76:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:24 2025 by rpki-client