Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File: UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier: SABY/Ko0y+KIl0PeqJ7eh85F3yEfZwdbSpd8LrIVyXg=
Subject key identifier: 6D:3F:C2:C3:C1:50:1C:6B:D0:CF:11:3B:AC:3D:4F:86:BB:C8:62:E8
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer: /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial: 019A71EE8817D46290158980E2616082C009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number: 1702
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: AAThffiDifS1//fz1xyUVh813aeKSp3tP/+ah2C3NC0=)
2: kBzABSrJTYuMHuIB-cAWqOKOwxo.roa (hash: Xo9goahQUE24SfaWYUzhm7qDfthcz3m4/YrZsayav+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:88:17:d4:62:90:15:89:80:e2:61:60:82:c0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=6d3fc2c3c1501c6bd0cf113bac3d4f86bbc862e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:5a:d8:69:f6:f9:16:c8:27:9b:af:21:76:
07:e1:a5:49:b0:6b:c1:78:2a:f9:0d:b6:89:e6:be:
6b:0a:1f:c3:fa:3d:09:d0:36:d7:fa:0a:cc:24:9c:
f5:f8:b6:73:6c:91:22:47:d2:0b:eb:fb:9c:02:35:
a1:0f:19:9e:31:43:d2:c8:e4:40:b3:55:be:39:7e:
31:75:96:88:67:9a:10:ff:a2:a9:b5:d1:c1:5e:96:
4e:e0:de:e9:96:39:a6:04:9c:06:24:5a:65:96:78:
70:26:44:8e:60:a7:7d:85:6c:7d:3d:b9:71:98:90:
c5:85:b5:78:69:e6:58:02:a2:ba:ed:4f:aa:cb:79:
e9:9b:f2:73:1a:28:1c:5c:6f:41:33:04:8f:34:40:
29:05:11:a1:2d:b1:01:97:b5:7a:10:ac:e2:1a:f6:
8e:7b:b4:6a:b3:4b:82:10:a1:c5:89:77:41:3f:f7:
37:ec:34:bc:34:5b:5a:01:21:b2:40:f1:f7:84:ca:
09:05:f8:31:b5:39:af:82:ac:51:96:a3:cd:73:d0:
3f:55:1f:bd:40:1f:56:3d:f7:ef:b8:ef:aa:21:ce:
b3:85:ba:47:ef:f8:22:fc:64:9b:7a:3e:4a:a2:75:
da:2c:45:26:68:48:ef:1b:fe:cb:41:5c:22:b2:83:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3F:C2:C3:C1:50:1C:6B:D0:CF:11:3B:AC:3D:4F:86:BB:C8:62:E8
X509v3 Authority Key Identifier:
keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:af:74:f1:15:63:33:78:3d:b1:81:17:66:08:11:12:2e:b5:
37:3d:80:f2:39:c7:e1:a7:13:6a:c1:c2:58:66:01:8e:26:97:
c7:2a:40:61:bb:41:38:b3:9d:55:6e:17:4a:b0:f7:a1:c8:c1:
31:97:1d:07:32:6f:f9:ae:0c:08:d9:0e:76:55:df:c2:c8:94:
0e:14:8a:27:90:15:48:a8:fa:95:26:61:3f:50:13:74:4a:97:
f3:84:7c:19:54:72:c5:47:a9:4d:69:af:e0:e3:55:04:24:8f:
76:a1:24:15:d6:7d:75:c7:27:a3:13:4d:9e:04:20:bd:d0:5e:
00:48:a4:6f:87:8a:c1:3d:60:00:ca:0f:69:c5:61:fb:3b:1b:
08:ef:6e:20:3a:fa:c2:d6:1e:22:6c:ed:bd:ad:fe:04:20:85:
66:12:8e:d5:22:7f:44:b9:40:62:42:68:53:4d:2b:79:f9:57:
38:dc:00:78:a7:dc:4f:38:ed:83:61:fa:bd:95:f4:3d:37:66:
13:a2:e2:06:5f:ef:5f:b9:fc:5e:7f:38:57:79:b2:8a:f8:d5:
1c:25:ec:0c:39:be:58:ba:65:07:74:92:63:ff:6f:02:a5:5e:
0c:ae:33:ce:36:78:b8:5b:2f:bd:a1:46:47:9a:84:2a:c2:58:
bc:49:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:20 2025 by rpki-client