Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: avS3HiAV8tYF60cpdX8k+0fOV12K5jbmgdQ89aKIl2c=
Subject key identifier: 7D:29:16:39:9E:13:8D:02:6A:BD:27:3A:74:31:2A:60:34:E0:66:98
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019A7301B400EDDE6FDDD84AF8CB2126E506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 16F2
Signing time: Tue 11 Nov 2025 13:01:22 +0000
Manifest this update: Tue 11 Nov 2025 13:01:22 +0000
Manifest next update: Wed 12 Nov 2025 13:01:22 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: PHzj5XTeQzjDExW7vMAikQpt8ziRIkLnUqa2VPk0wP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b4:00:ed:de:6f:dd:d8:4a:f8:cb:21:26:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Nov 11 13:01:22 2025 GMT
Not After : Nov 12 13:01:22 2025 GMT
Subject: CN=7d2916399e138d026abd273a74312a6034e06698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:00:4d:e3:93:e1:fd:01:43:cb:69:e8:7c:
2b:81:72:8c:9c:a4:b8:ca:cb:57:64:72:85:cb:b9:
1c:20:47:c8:ab:cc:92:19:3a:13:92:93:c4:cb:b0:
67:12:f7:ca:86:86:08:87:13:f8:78:8d:7f:b6:7b:
b1:b0:80:b3:6f:b7:40:be:26:aa:28:ad:d3:d5:f7:
f0:d7:ca:92:4c:42:aa:11:f6:3d:3f:5e:e7:79:4e:
d9:75:6a:84:33:47:6e:f0:08:4c:d6:f6:93:c5:09:
e7:f7:ac:59:22:1d:ec:d0:b2:0c:3c:f7:92:ea:7c:
e7:34:be:35:39:bf:10:c8:0a:d1:fa:f1:b7:53:db:
f0:56:96:ca:b4:80:51:9b:b3:bc:8c:da:3d:fd:93:
92:14:f4:45:e1:a8:ab:69:e7:35:af:65:8d:c2:0c:
6d:93:8c:93:98:c1:93:d5:fb:9e:2f:f5:d9:a1:61:
34:e9:1a:e5:7c:d9:3a:cf:54:76:5b:d2:b1:c7:35:
04:29:33:2d:97:3b:98:56:5d:b5:96:b0:d8:d6:64:
3c:ae:89:34:23:40:ca:05:9b:14:f6:d0:97:5d:48:
45:28:40:e8:5c:7f:5f:c1:48:a0:8a:e2:86:fa:66:
23:97:cc:e9:a0:4e:b1:62:fe:62:7f:49:49:9c:65:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:29:16:39:9E:13:8D:02:6A:BD:27:3A:74:31:2A:60:34:E0:66:98
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ee:36:6b:50:1d:47:05:3b:c6:dd:a9:28:6a:e9:6f:e6:cc:
c9:e7:31:78:20:f3:06:e5:8e:5f:5d:06:91:ee:4d:bc:f4:76:
46:ce:4a:0c:f1:13:4d:6c:1a:25:df:1d:42:32:6c:5b:51:11:
df:12:4d:99:73:10:d5:dd:cb:66:b3:38:83:f5:a9:e1:73:13:
6b:f6:9d:a8:34:cc:c4:4b:91:e7:41:1c:27:b7:91:2a:19:f3:
7e:2e:61:01:e7:8c:9d:b1:7b:40:9b:58:51:f8:41:57:bf:06:
74:f8:fc:60:3e:ae:78:56:cf:13:43:cb:e4:83:3c:cb:da:05:
0b:03:97:df:ac:40:77:35:0b:7b:28:31:e2:4b:ca:73:73:b8:
05:97:7e:93:fe:79:95:09:03:be:2c:67:bd:b3:26:f9:52:ad:
4d:81:9d:5d:29:7c:e7:e6:c9:2a:59:e8:0e:e9:1e:b9:0e:4e:
23:c5:df:38:cc:b2:73:46:b0:dd:22:d9:e4:6c:43:0f:6c:bd:
1b:9c:24:aa:84:0b:eb:2b:c1:4b:2f:4e:a9:c1:51:da:c5:26:
75:28:ab:84:12:d8:2d:28:6d:3c:b7:d1:b7:a9:0b:36:c4:06:
61:4c:18:fa:69:1c:7e:a0:68:dc:ce:63:3e:e6:f9:5c:76:90:
4b:33:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:51 2025 by rpki-client