Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: xQ8bUHBSLr99As16jqCjEtOwot1vj9qpoyACMgQq1JA=
Subject key identifier: DD:27:70:1F:D9:E8:8A:D8:21:EC:86:90:12:00:B9:AC:95:85:93:1A
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 019A300DF4E592C2A3BA853F82F88D95A148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 1447
Signing time: Wed 29 Oct 2025 13:00:12 +0000
Manifest this update: Wed 29 Oct 2025 13:00:12 +0000
Manifest next update: Thu 30 Oct 2025 13:00:12 +0000
Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: fVXI+mgMSAwJXypVQmpKm38YljmAvRMV47UJ0jwgcoQ=)
2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0d:f4:e5:92:c2:a3:ba:85:3f:82:f8:8d:95:a1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Oct 29 13:00:12 2025 GMT
Not After : Oct 30 13:00:12 2025 GMT
Subject: CN=dd27701fd9e88ad821ec86901200b9ac9585931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:a2:ce:cd:8f:21:a6:ae:cb:98:e9:73:ef:
5f:27:51:09:25:a3:ef:3e:9c:63:b3:53:ff:d8:29:
aa:e3:7d:c5:44:e5:58:17:07:b0:4a:70:23:58:96:
29:d5:e0:ee:64:ae:f3:63:18:02:a2:db:45:23:61:
63:83:b6:75:70:b4:cf:75:06:e4:b2:c0:69:2e:c6:
5b:34:02:e9:3d:1a:d0:bc:d9:07:24:20:12:1d:4b:
b8:dc:96:9d:20:ac:65:f6:0e:89:fb:cb:20:2f:ba:
e4:ae:d7:40:5c:08:f6:f1:a2:66:32:db:b6:bf:fa:
4a:e7:7c:a6:63:bf:47:4f:a0:3e:b9:00:16:aa:a2:
ad:b1:26:02:d1:59:ec:18:36:54:9b:2d:ca:e5:bd:
37:fe:3b:bc:3c:e5:82:5b:4b:d6:4a:ef:ab:95:2a:
81:40:7d:67:ee:d0:ec:71:02:2b:ae:5f:fb:c8:75:
4c:1e:c3:63:44:f3:78:a1:0e:d3:f8:76:45:9f:2b:
72:a1:c6:16:8a:2d:38:94:3a:01:7d:93:84:ba:1c:
db:83:99:8b:01:4b:24:65:0d:9b:cb:40:e1:a5:c5:
05:73:b6:ec:b7:4b:ce:c2:25:a8:91:29:15:f4:b6:
58:7a:21:82:93:56:df:a7:de:34:81:35:98:1a:fb:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:27:70:1F:D9:E8:8A:D8:21:EC:86:90:12:00:B9:AC:95:85:93:1A
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:31:ca:29:e0:c9:52:34:a7:e3:f3:a7:b2:9b:f1:1e:27:a6:
05:31:bd:1e:14:f0:d5:48:53:f4:30:2c:61:2e:6d:fb:d9:be:
1e:0a:c2:4c:da:1a:34:fe:5f:52:82:a2:36:e2:86:a1:42:9a:
38:6f:15:0c:68:b0:3e:26:20:dd:3f:73:6b:8c:1b:91:f4:f7:
89:5c:bd:c3:bf:57:d3:b5:d9:c1:52:fe:a4:80:a6:4d:eb:03:
81:c8:57:a1:7a:87:28:14:0c:10:21:95:35:50:63:0f:77:f8:
0f:f7:0b:be:c3:0e:06:b0:79:03:30:43:2a:10:65:65:f3:e1:
6f:d0:af:73:c3:2b:fe:bd:0c:e5:9a:03:2d:fb:67:e8:3f:04:
ad:db:5d:ea:7e:48:95:d9:74:49:2f:0c:50:c4:d6:8e:f5:32:
4a:b2:b2:1e:c0:b0:ab:7f:fb:1c:51:1a:6f:c4:37:2d:8f:8b:
61:ef:84:3a:72:4d:3a:04:85:9e:68:a6:a1:d5:c4:b4:de:e0:
71:4f:19:b4:a6:e2:e6:25:02:0a:65:2a:3e:bd:dc:f6:83:4c:
f4:12:81:a9:b1:e9:4c:c0:17:ce:5b:6e:38:b4:b5:4b:c3:60:
14:39:80:68:37:f6:d4:92:e7:64:4f:3a:ef:ac:da:2a:c9:af:
5e:85:28:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:22:33 2025 by rpki-client