Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: F+ObRoc4J94z6wfs/Ht6GEWleS2yg5nX4OfofZv3yX0=
Subject key identifier: 8D:02:7D:FD:1D:A7:C4:7B:E6:75:FD:39:8D:AE:00:77:2E:50:27:41
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 019A4E4FCD3CC51F5E90A668B023FCAA352E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 1021
Signing time: Tue 04 Nov 2025 10:00:43 +0000
Manifest this update: Tue 04 Nov 2025 10:00:43 +0000
Manifest next update: Wed 05 Nov 2025 10:00:43 +0000
Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: /tcv9F/xMXdWSlYsEKrgdSlu0kQOVmYpVvkF4MCxvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cd:3c:c5:1f:5e:90:a6:68:b0:23:fc:aa:35:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Nov 4 10:00:43 2025 GMT
Not After : Nov 5 10:00:43 2025 GMT
Subject: CN=8d027dfd1da7c47be675fd398dae00772e502741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:c4:d8:56:0e:8c:90:c6:6c:92:8f:21:a0:
f4:7f:d4:00:15:f4:a2:93:5e:52:8a:be:ca:da:c2:
b3:2b:3e:d2:f7:e4:af:98:bc:ef:ec:78:68:de:dd:
88:5f:32:d3:54:06:90:ed:a2:e3:29:8b:35:bf:09:
66:91:a6:63:5e:a3:fb:31:4b:a8:f8:3f:84:b3:98:
7e:be:61:bb:8c:2e:ca:cf:9f:85:0f:08:69:86:fd:
55:87:60:02:db:51:87:7f:e9:97:5c:ea:28:fb:8a:
27:83:1d:d1:4e:3f:6f:69:17:29:d9:78:f9:4d:f7:
dc:c3:2b:7a:48:34:39:ea:f9:7f:65:2b:5d:49:53:
59:2e:5d:3b:47:7f:4c:ad:76:a2:d9:82:ec:2b:90:
69:20:d7:7d:0f:3f:ad:6c:5c:bd:23:d4:7a:9f:81:
65:b0:eb:8e:52:c1:ec:54:a3:91:22:7f:63:20:93:
43:b0:de:f1:7d:69:4f:bf:4d:8a:a0:3f:d1:0d:8c:
e8:20:b0:a4:6b:3f:5a:c5:60:6e:96:90:14:50:6a:
ac:7a:cf:85:1a:66:3b:21:c9:6b:06:17:e2:38:fd:
97:3f:d6:80:68:68:c8:c4:38:fa:b3:d4:c5:07:9e:
82:2d:df:60:36:58:70:d9:b0:cf:ac:af:f9:69:0c:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:7D:FD:1D:A7:C4:7B:E6:75:FD:39:8D:AE:00:77:2E:50:27:41
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:03:d2:34:6d:46:ba:7f:34:71:c4:f1:03:d3:11:90:de:
fa:02:02:f0:b5:97:aa:98:4f:1c:37:bb:1b:1f:5a:19:f7:73:
82:1a:8d:34:41:8c:0f:ff:3f:e6:9d:44:40:24:e7:f2:31:f6:
0f:b2:94:89:e2:6b:f2:b4:84:a0:d8:8c:44:76:51:2b:13:0a:
fe:78:68:b3:9b:5f:34:34:55:20:19:b4:44:6b:f4:ac:95:aa:
9d:62:03:b5:56:bc:9d:20:57:af:ca:c1:05:fa:e9:a0:7d:aa:
7c:34:2a:80:8c:80:62:7f:47:17:80:bf:ab:3c:bc:70:11:f5:
1e:0f:77:bc:d9:6c:32:55:47:ba:b2:5c:dc:07:d3:3a:48:63:
cc:f7:83:20:95:20:e6:a3:83:f7:6b:a3:3d:01:db:f9:a1:80:
ed:46:a7:cf:9a:b9:33:d8:2b:d1:2e:45:9b:e1:ad:8d:00:4b:
06:87:9b:ab:98:d3:c2:55:46:a8:29:c7:33:cb:34:c6:d1:8f:
cc:9d:6e:bf:fc:74:c5:12:e7:f0:6c:b8:bc:b4:f9:55:51:a1:
d9:6c:a0:d3:fe:42:9e:67:90:e1:85:eb:d9:1a:71:60:ed:e9:
9d:03:59:d3:f2:6a:80:dc:6f:93:86:d1:fe:af:4e:37:41:29:
26:e5:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:03:34 2025 by rpki-client