Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier: IJDjT/GTEjNKvXH1PvBf+o9Up7oy+g2joRowy4T4sok=
Subject key identifier: C0:E5:20:11:9E:3E:AA:7C:A2:CA:46:82:8C:E7:86:B6:7C:F8:77:28
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 019A72CA51A8275A6B7D79968FE5F89CD4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=)
2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: Sko4lQuuymBCouNF+vgrWdyiB4meayNZL+LClfSG7/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:51:a8:27:5a:6b:7d:79:96:8f:e5:f8:9c:d4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=c0e520119e3eaa7ca2ca46828ce786b67cf87728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:a8:8d:bf:f2:02:96:a8:f3:a0:40:1f:63:
0a:10:88:3c:ab:07:14:2c:42:c5:16:fb:74:5c:0e:
46:e0:93:cb:d7:75:fc:1c:46:33:2b:07:e4:83:a3:
31:8b:03:94:47:ae:94:ec:b9:25:ec:d0:2d:cf:3d:
19:90:cc:50:77:ce:1e:2c:de:a1:38:be:68:b9:d8:
fb:81:04:7b:45:e6:20:f0:4e:45:a8:f2:2c:af:80:
3d:35:d3:9b:e4:a6:29:9e:c3:88:19:6c:3c:5d:ee:
e4:3a:71:6d:e9:b5:74:b4:72:8f:b4:33:73:cf:36:
75:86:64:cb:70:c1:3a:d5:09:e2:a7:89:ad:89:cd:
d2:63:92:86:50:a1:e9:4b:5e:cf:0e:f7:01:d7:f2:
c8:8b:9c:35:cf:48:43:d4:cf:28:01:a1:4f:2e:f4:
e4:1c:ff:25:17:6e:af:6b:79:cf:97:44:76:2b:02:
cf:f3:af:6b:e3:43:12:0e:61:a1:df:de:51:d2:8f:
3c:fd:8f:b6:d7:de:29:43:07:48:68:9f:5f:fa:51:
65:55:47:84:21:8b:b1:53:10:b9:3f:56:62:e5:f9:
9c:92:15:6d:70:f3:06:68:d6:9f:3d:66:a5:d7:27:
80:4a:75:1e:da:5f:81:97:d7:34:d2:1e:c7:7e:63:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:20:11:9E:3E:AA:7C:A2:CA:46:82:8C:E7:86:B6:7C:F8:77:28
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d7:c5:38:78:88:92:90:70:8e:59:b4:75:32:84:b2:46:db:
62:fb:02:28:c5:99:05:4d:82:97:99:9a:8a:63:57:73:09:1f:
8c:63:9a:1c:ae:80:b9:be:9b:51:85:2f:1d:54:9c:a9:51:dd:
6c:eb:d1:8a:d0:22:1f:d7:98:53:1b:c1:6d:2c:54:30:29:58:
bf:49:d8:c8:78:e4:92:6a:cf:03:b4:74:72:9a:1e:50:1c:86:
f6:2a:59:1d:0f:63:02:4c:49:b1:0f:c7:df:46:70:26:e6:fd:
6d:ae:ed:a9:6c:49:06:62:59:fc:f4:9b:86:c3:85:ff:2e:fd:
94:ed:40:62:3f:8e:de:4e:e9:5e:cf:57:b1:46:d4:0c:33:e5:
39:56:e5:c6:d0:bd:65:58:45:a4:c0:8a:b0:40:3e:49:7c:50:
62:03:79:29:9c:89:c3:5c:19:62:b8:f4:07:bf:83:58:75:5c:
d3:1c:4a:ed:03:85:47:35:82:e0:72:f6:e7:23:a8:27:af:0f:
b4:ad:e4:24:70:f9:fc:6a:f6:9b:06:72:35:90:ef:dd:3c:a9:
34:77:61:a7:04:17:5e:73:56:63:f5:a1:2f:a0:bf:f0:6f:ca:
1b:4f:2a:17:20:ce:90:34:a3:0c:fd:1f:93:20:f4:19:0a:e6:
e7:0b:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:39 2025 by rpki-client