Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: ey/Ps5dCPspGLDtvRkBD0S+uXTwBLt++Gaj1zznCUJ0=
Subject key identifier: 54:E4:C5:7F:00:4F:AA:0E:39:5C:E2:1F:29:BF:83:9F:F6:C9:21:B6
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019A507480BCAB77BC3773DD8574BCCB9655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0F3C
Signing time: Tue 04 Nov 2025 20:00:03 +0000
Manifest this update: Tue 04 Nov 2025 20:00:03 +0000
Manifest next update: Wed 05 Nov 2025 20:00:03 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: /ua5jITlY/tLB+oMCVHL1Gu3ZRrIsFNvApscglMvOn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:80:bc:ab:77:bc:37:73:dd:85:74:bc:cb:96:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Nov 4 20:00:03 2025 GMT
Not After : Nov 5 20:00:03 2025 GMT
Subject: CN=54e4c57f004faa0e395ce21f29bf839ff6c921b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:81:e2:3e:8b:23:38:48:4f:69:6c:c4:4a:
02:7e:2b:4d:cd:e9:35:59:44:cb:64:c5:0e:db:ba:
43:98:f6:d1:f0:08:44:fb:f3:e3:9c:8f:fc:64:d1:
b7:0a:59:1a:f1:56:c9:bf:92:7b:2b:da:07:fa:1d:
d9:d2:59:13:26:78:39:6c:2f:de:1c:56:42:f2:d0:
9f:d9:aa:46:27:56:1b:b7:c9:41:7f:a0:e8:19:3c:
96:60:1d:27:05:b9:46:e1:88:2f:6b:9a:35:ff:dc:
a4:55:ed:14:bb:39:bb:d3:19:b4:ca:c2:1d:97:9c:
fd:32:87:e7:e5:08:e0:6d:08:7d:96:d4:cc:fe:cf:
cb:51:99:0a:89:59:62:3b:07:ef:fd:ba:8f:e3:8d:
00:76:59:b3:46:e6:93:3a:3d:2c:92:7a:97:15:8b:
38:e3:e9:bf:6a:07:a4:71:d5:3e:fe:4b:f4:ae:b1:
83:9b:a3:82:8e:40:38:07:0a:79:8c:d0:f7:0c:9a:
1f:48:38:4b:49:e6:46:bb:81:37:cb:37:e6:49:16:
1b:f7:49:25:83:7f:6a:42:be:d0:85:aa:b3:8b:7b:
84:b2:d3:e5:ee:f2:1b:44:7c:f3:dc:79:d9:0d:84:
d9:30:b3:9d:16:df:77:95:6a:45:54:53:f0:f0:3b:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E4:C5:7F:00:4F:AA:0E:39:5C:E2:1F:29:BF:83:9F:F6:C9:21:B6
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c5:ce:de:3a:91:ea:0f:ad:2b:7e:38:95:51:34:24:26:5b:
a9:88:f4:0f:17:74:6c:bc:e1:c0:db:8f:4b:4f:26:2f:b8:2d:
73:d3:fd:b1:ef:92:4b:0a:41:87:c3:87:57:e0:4c:ce:ad:38:
f3:58:2b:c0:d2:34:ca:79:c9:02:7c:a4:1a:96:5c:a7:0f:df:
a9:79:ce:02:be:2e:d2:6d:ee:63:6b:23:bd:1d:32:0b:94:a0:
f9:4c:b9:f4:7a:0f:ff:79:f9:49:e6:00:de:d2:8e:93:7e:c0:
8f:e9:c0:23:8f:1d:2f:ac:c0:8f:2d:ac:cf:1e:fa:10:ec:0d:
a6:4d:a0:3f:d4:f2:ac:5d:8e:57:6c:cb:4c:10:7c:98:f1:73:
21:3f:f9:58:bb:2a:5c:15:60:45:74:88:4a:62:9d:c5:bd:f3:
3b:85:21:bd:26:49:d7:69:9f:cc:c1:f6:4e:34:66:4e:67:eb:
b8:d1:f6:74:90:59:7e:10:f7:55:b8:45:4b:4d:de:f7:23:9e:
c5:ab:30:95:55:b8:fc:81:ec:e4:db:94:8f:0e:92:11:8a:51:
09:e7:56:d5:f9:33:7a:a6:e9:70:08:d7:ca:0d:de:46:b3:60:
45:ec:54:a4:da:2f:3e:e8:1e:cb:ae:78:5f:6d:e6:be:fa:44:
03:90:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:29 2025 by rpki-client