Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: r+z6FXk8q237bn6UYWz5RQ1JApkRYiQFaNMKPFAmssU=
Subject key identifier: AE:A1:34:91:FB:AA:5B:92:FD:15:CA:36:46:C3:F7:4B:E6:29:F7:4E
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 019A71B81A49AA87A5902D6FE67E4F577B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0EEB
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: ru18mSMlQn4o8+19ql3eDR0V1XJHLb6uh1CjdngLm6U=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1a:49:aa:87:a5:90:2d:6f:e6:7e:4f:57:7b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=aea13491fbaa5b92fd15ca3646c3f74be629f74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:d8:25:8b:f6:51:3f:72:8f:69:1a:7b:e2:
73:80:22:96:00:6b:c4:6c:0d:36:5e:16:d4:bc:88:
0e:1d:81:3c:b5:84:f6:e0:e6:7e:7b:a8:9a:99:ae:
b5:3a:00:8e:7b:56:5f:b9:28:05:32:af:c5:f9:0f:
cd:e4:b8:2c:90:96:eb:fb:47:79:da:35:b5:9a:76:
ba:b4:39:fe:6d:98:e8:c2:99:b5:09:28:b7:6d:3a:
4f:8f:67:87:15:83:fc:22:70:9e:14:32:98:0c:7b:
19:ed:1e:51:8f:7c:5e:e0:2a:96:e4:97:ac:9a:71:
c9:54:7b:dc:c8:40:27:86:a1:cc:c6:43:a3:ab:1f:
fb:67:45:4b:41:36:aa:5f:1b:c3:0d:6d:cf:79:30:
b9:59:86:c9:86:13:d9:cf:87:83:71:03:54:59:97:
3d:0a:ed:28:76:6a:c2:6f:d5:1e:a4:3a:b9:7d:67:
ae:24:29:4e:96:30:61:82:fb:e5:ed:36:30:b1:82:
7e:97:cd:b0:e2:7c:a3:2b:ab:a7:16:1f:74:4d:1a:
56:53:10:50:9a:65:93:b9:7c:bb:4a:5c:59:39:5f:
8f:87:ba:cc:30:c6:f5:02:e4:e5:1d:1f:2b:e3:eb:
fe:ec:32:8d:55:fd:0f:ed:98:cc:90:1b:e4:b2:d2:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A1:34:91:FB:AA:5B:92:FD:15:CA:36:46:C3:F7:4B:E6:29:F7:4E
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:c7:c9:93:1b:d6:72:b6:aa:f3:3d:c6:9e:e7:14:22:bc:bd:
ba:64:99:a7:58:61:be:fc:83:3e:f0:42:df:34:f2:33:f7:ed:
be:ac:05:85:13:a4:69:ef:4b:9a:cd:4d:22:06:3e:16:a4:9d:
c4:dd:ee:6a:07:19:48:6b:f8:45:6c:fe:37:d1:03:b9:22:2c:
ad:54:94:e8:3e:98:c4:4d:ee:91:e4:cf:4e:28:6a:7e:6c:d0:
0b:28:a7:03:26:05:8f:7c:c2:e8:b7:4c:fe:64:20:34:e8:19:
69:4a:88:ac:ce:3f:37:cf:da:b6:12:74:e5:22:db:d9:39:2a:
fb:68:5b:bf:60:eb:2e:d1:4d:c4:98:f5:78:c8:43:e0:a7:e3:
ce:9d:4a:ec:09:a3:8c:01:0f:5e:7b:f2:67:3d:c5:db:12:62:
cc:6b:f0:1b:13:79:b8:1d:41:d1:ef:a0:d3:ed:ad:0c:8f:77:
46:82:4a:bb:3b:43:b7:41:0a:b8:f3:8b:d9:cc:28:14:34:87:
43:ba:77:3c:68:08:0a:83:e7:c5:99:b7:d1:6c:5d:81:30:95:
2b:0b:a1:e3:bf:1e:06:f3:da:28:07:85:a6:47:4c:82:9a:70:
51:4f:d3:4c:53:7c:27:fb:dd:5a:8e:05:5a:b8:fe:99:27:ce:
1b:cc:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:10 2025 by rpki-client