Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: /1ANkDSRk9gWkjtqmATdXGN4kYnKPHYe+D9mVpafSvQ=
Subject key identifier: 58:3C:D5:40:42:58:24:C2:55:1E:1B:5E:6D:55:1A:31:D3:F9:18:E8
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019A4EF4ADC814235457405F015ABF80946D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 120B
Signing time: Tue 04 Nov 2025 13:00:49 +0000
Manifest this update: Tue 04 Nov 2025 13:00:49 +0000
Manifest next update: Wed 05 Nov 2025 13:00:49 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: lJ5AObIyPWZevizKYpU1rzD6znMs/JRtYv2JInAovHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ad:c8:14:23:54:57:40:5f:01:5a:bf:80:94:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Nov 4 13:00:49 2025 GMT
Not After : Nov 5 13:00:49 2025 GMT
Subject: CN=583cd540425824c2551e1b5e6d551a31d3f918e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:bf:69:c2:bb:10:d9:e5:8a:b8:6f:09:52:
f8:58:05:87:ff:14:52:9f:8e:45:bd:99:19:60:d5:
a5:7e:d4:a6:29:fd:d7:aa:ab:f6:f9:8f:d3:52:c2:
03:f2:6e:ca:c4:22:58:2b:d4:78:a5:4c:73:4b:e4:
9a:b0:53:ca:cf:c0:04:24:12:74:fe:ed:f5:23:b2:
a0:3f:11:9c:26:76:40:01:81:fa:14:aa:29:aa:8b:
d9:73:d6:5e:4c:5f:83:68:c9:fe:3d:0b:58:be:14:
ec:11:47:d8:dc:71:b9:12:74:f6:ab:c1:e3:2f:1b:
a8:08:fe:a3:8b:8f:e1:82:19:af:99:61:dc:6f:9c:
a2:cb:f1:36:02:d6:57:36:0a:e3:c2:e9:24:d7:e4:
96:a9:62:d6:95:04:13:9f:60:db:ba:ea:37:da:00:
5a:9b:70:ae:df:3e:c7:e3:62:40:70:db:fb:ab:a4:
30:51:d5:da:87:43:29:d3:fc:b9:e9:6b:d0:b7:b6:
50:20:77:aa:e4:04:21:51:d2:0f:c7:f5:04:69:a5:
53:1f:be:5c:44:4e:59:de:d9:f9:c6:3f:45:e8:aa:
a6:79:98:41:ef:c7:26:6a:ab:41:30:75:ce:a4:e3:
c0:84:c2:9b:50:e5:6e:8c:ae:b6:db:fc:f1:63:cb:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3C:D5:40:42:58:24:C2:55:1E:1B:5E:6D:55:1A:31:D3:F9:18:E8
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7b:55:db:79:81:54:2a:b8:2c:72:49:98:40:c4:bc:14:98:
bb:99:f6:29:f4:a8:2b:1f:de:ad:25:83:d5:32:44:0d:7e:07:
bf:42:1e:d8:e6:c6:1e:02:7d:af:6b:00:6e:38:bd:50:4e:94:
eb:14:34:82:9f:d3:fe:8c:89:78:13:93:31:5a:f3:06:17:f5:
7d:2f:0b:a5:52:bf:15:71:9e:ba:09:47:af:ec:53:fd:f9:02:
05:be:ba:4a:91:91:c7:f4:cf:62:95:c3:15:73:6f:2b:6d:8f:
7a:d4:d5:62:3a:e6:4c:7e:41:45:97:28:12:63:73:da:cd:05:
f3:7a:46:05:01:92:c1:ca:bf:b6:21:6c:63:ce:a2:b1:b9:b4:
7b:9d:9c:c8:a7:d0:8c:65:59:cf:50:cd:03:0b:d2:f9:97:de:
13:ab:bb:6a:f1:c9:dc:64:6d:d8:40:87:db:24:8e:e3:8d:b2:
0f:39:d4:90:cf:0f:6e:3d:de:d7:95:4a:7f:88:04:42:a4:c1:
ca:a6:6e:d2:59:b2:da:b5:e4:81:9f:dd:a0:8f:c9:85:16:f8:
cd:43:bd:bc:c1:a4:9f:26:c0:59:a0:cc:52:2e:51:b5:41:e4:
b7:bd:12:c1:fc:3b:c0:06:5c:9a:55:f3:c8:ed:51:ac:89:e7:
7e:7a:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:19 2025 by rpki-client