Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: BBZuwGViE9eS0YjIxvY7MxjQ4DeF0MtShF91tYx5RNg=
Subject key identifier: B9:36:99:68:74:38:34:02:9E:5C:3E:08:DA:90:55:01:53:49:1E:1F
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019A4EF5860DC01B4CC6ECED4C0ED2CC0F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0DCA
Signing time: Tue 04 Nov 2025 13:01:44 +0000
Manifest this update: Tue 04 Nov 2025 13:01:44 +0000
Manifest next update: Wed 05 Nov 2025 13:01:44 +0000
Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=)
2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=)
3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: 5rD4jJQv9y22kCZBrvJc63osX/ZCMQfNzGMDEiW2Mgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:86:0d:c0:1b:4c:c6:ec:ed:4c:0e:d2:cc:0f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Nov 4 13:01:44 2025 GMT
Not After : Nov 5 13:01:44 2025 GMT
Subject: CN=b9369968743834029e5c3e08da90550153491e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:16:db:55:6b:0a:d9:4a:6b:95:78:56:5f:
8e:f3:5d:d2:a5:e5:5a:af:bc:cd:1c:81:92:5b:a2:
05:49:73:bd:e2:5b:24:76:f8:86:1d:68:63:04:15:
65:1b:b5:aa:c4:66:4a:21:8d:11:f3:4c:f2:4c:d4:
3b:dc:c8:44:24:c5:91:9e:48:35:10:17:e9:82:60:
fa:e4:b0:be:87:0c:07:02:e6:e1:e1:f0:3d:39:4a:
2e:a3:6b:96:8e:e5:fa:c9:46:79:cf:af:84:76:49:
9b:2f:40:cb:85:f9:9c:ca:0d:b3:e1:b9:a8:e4:08:
72:bf:3e:c5:a7:26:03:4f:c0:36:35:3d:87:fe:d6:
35:c8:e3:54:cd:c8:08:03:90:ce:87:60:91:e6:21:
97:15:f3:c3:0b:23:7c:e5:7b:c9:1c:75:67:47:dc:
34:9c:82:58:f9:c3:72:d9:d9:db:dd:5f:58:e4:08:
84:78:39:66:b8:2e:5d:9f:6e:c6:ce:26:ec:a4:0f:
ab:d9:66:da:12:3b:29:a5:39:85:bf:2a:41:d8:d7:
7d:a7:33:f8:0b:29:90:d9:2d:89:90:b9:62:4e:1a:
5d:c5:20:68:23:01:42:26:02:83:6e:1e:2c:86:58:
62:f3:dd:82:5b:82:94:31:fc:de:b1:14:44:58:97:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:99:68:74:38:34:02:9E:5C:3E:08:DA:90:55:01:53:49:1E:1F
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:62:e5:d1:51:87:30:6a:52:58:c4:d8:53:6a:97:f3:3c:bf:
a6:c9:34:a6:7d:89:7f:11:94:8b:04:74:ff:83:27:29:fe:13:
6b:d3:83:ff:c8:e6:45:d0:f8:24:e2:e4:b3:8d:8e:2a:1a:7b:
81:32:e6:da:0c:ba:c2:08:59:72:9a:49:5c:8d:5e:40:29:c4:
d1:a8:a0:cc:57:05:dd:86:6e:83:f0:0c:42:87:5f:7d:78:d5:
4a:51:2c:56:08:74:5e:15:6a:ec:d7:7e:45:4f:fa:e5:60:88:
b6:0a:69:6c:72:68:4c:b7:3c:9d:dd:e5:2f:6c:72:0f:46:b6:
b5:71:6b:46:0c:80:f2:e3:6d:67:cf:38:dc:05:4b:06:bb:ec:
88:6f:d6:ee:e8:ce:c5:e9:a1:32:9d:88:0c:7b:2c:1c:67:a7:
ea:a4:ca:6b:3b:32:2f:af:39:57:79:7c:3c:28:0f:8e:55:94:
b0:3c:f7:9a:34:8f:ee:e8:aa:1f:17:fb:9e:83:96:9d:6d:21:
aa:a2:b2:7b:1e:f6:fe:90:cb:55:d3:fd:ed:04:62:00:fc:94:
c0:c1:e3:e3:65:fc:24:93:44:33:30:60:ad:5d:22:8b:ed:e2:
82:37:ee:18:56:83:56:25:77:75:8a:6c:40:e8:52:21:07:7c:
21:02:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:48 2025 by rpki-client