Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: h9shz5HUWh1MESFnT53T/c6wTYxAS2Ms0bMK3J16HPI=
Subject key identifier: FF:DF:A4:7F:3A:7A:1F:4B:55:33:AA:B8:A0:C1:D8:BB:17:F8:6E:EE
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019A5119D0747D81C5FB5A381D61C706357B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 03F2
Signing time: Tue 04 Nov 2025 23:00:37 +0000
Manifest this update: Tue 04 Nov 2025 23:00:37 +0000
Manifest next update: Wed 05 Nov 2025 23:00:37 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: MQLd4VhPcThNycAhGOK0Yp8fIB1Zr5agPBX/H8Uc5rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:d0:74:7d:81:c5:fb:5a:38:1d:61:c7:06:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Nov 4 23:00:37 2025 GMT
Not After : Nov 5 23:00:37 2025 GMT
Subject: CN=ffdfa47f3a7a1f4b5533aab8a0c1d8bb17f86eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:9f:7c:d1:dd:f5:97:73:32:93:3c:65:21:
4f:fc:26:3d:6d:13:25:30:45:2c:7f:92:4b:53:79:
4c:e6:b3:f4:f3:e3:2f:c2:72:ec:e0:56:a6:c3:1c:
b1:74:f9:dc:40:cd:b3:de:87:50:07:74:08:e8:52:
24:3c:cc:e5:ec:a4:8f:33:2f:71:69:1b:ad:b3:ab:
46:50:7f:2d:ed:f0:48:e3:96:a7:49:f7:6b:bd:ec:
09:46:0c:15:90:08:3d:91:3a:44:5f:cd:d7:d4:2d:
e8:6b:f2:75:a1:b4:b4:20:9d:fd:15:ca:88:9d:92:
07:75:52:c2:c8:03:79:51:99:be:f2:c3:2f:3f:72:
f4:f8:c3:9f:e6:1d:82:c5:ea:d7:1d:49:53:c3:04:
87:57:33:21:ea:d7:c1:05:17:c7:cc:85:cb:9c:d4:
81:93:f4:65:d3:51:db:47:97:fa:66:3c:de:14:22:
69:65:b2:94:96:50:09:bd:3a:82:ce:30:dc:d3:c6:
c6:81:2f:c8:07:2c:ef:02:39:db:ae:09:67:0a:d6:
a1:a9:01:8d:48:bd:d3:7c:51:0d:50:89:90:96:2e:
4e:3b:91:96:2a:36:28:1d:f7:cf:e4:3b:d3:26:03:
0b:d6:ba:1a:f3:5f:55:33:87:ac:d4:cf:fe:ff:1b:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DF:A4:7F:3A:7A:1F:4B:55:33:AA:B8:A0:C1:D8:BB:17:F8:6E:EE
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ae:b3:1d:7e:54:ab:e1:38:05:33:06:79:3a:64:c6:4f:76:
81:56:b9:57:69:9f:ad:48:01:b4:e4:20:9c:00:16:cb:6f:34:
35:11:01:18:55:00:bd:4f:90:77:0d:b0:d7:7f:08:90:78:ec:
3e:b7:11:95:ea:21:33:7e:d2:66:9c:56:70:1f:67:48:12:dd:
b0:bb:93:a2:33:63:33:3b:ba:a4:4f:69:68:da:53:00:60:d1:
f8:1c:aa:62:ca:a9:30:79:44:d6:5c:19:d0:dd:a8:e8:e7:0f:
03:dc:8b:69:4f:dc:64:9c:ed:bd:5c:89:93:bb:ea:87:7a:19:
2f:f0:06:23:0a:32:01:1f:fb:e1:be:cf:17:43:63:5f:a5:64:
7f:e5:8f:42:42:5b:bb:b0:6d:0e:b9:94:22:44:ac:f2:ef:6e:
cb:d1:67:e5:5d:06:cb:ea:7a:78:eb:b2:0f:99:f0:38:c1:1f:
f2:f9:9f:59:3d:6f:c6:ae:4b:6e:08:8c:e1:57:9b:e0:e2:d9:
42:00:d8:be:08:41:1d:3c:82:45:9b:76:d0:e1:58:4a:73:cf:
7f:66:70:84:70:8d:82:4c:ad:29:a0:ea:a7:c1:0b:82:96:68:
8a:13:2b:5c:5c:04:4c:23:d5:cc:f8:18:42:4a:57:dc:c2:b7:
14:4a:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:58:52 2025 by rpki-client