Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File: UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier: pLwEEaSWk3Evk+ri99VZ7N6gJMrMDpMTzercD0szlYI=
Subject key identifier: 43:BA:7A:D4:CE:55:C7:A5:C8:9C:A1:9B:6A:D9:DB:43:66:BC:35:46
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial: 019A71B881A929C25F015F49578BE5BE4B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number: 09B9
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: TRZ-bXVpGuPzmHQA948WyQR5KOg.roa (hash: DS5TFuJAWuJAhwbXFziYJwVjw+lHGW5/W63yt+OmaIw=)
2: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: eY2tVXLHpF5ZKpznZLWBx4b2f9F6ndfEhxDx7yfcz9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:81:a9:29:c2:5f:01:5f:49:57:8b:e5:be:4b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=43ba7ad4ce55c7a5c89ca19b6ad9db4366bc3546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:18:21:cc:74:02:74:3a:5e:71:d8:1e:0f:
d0:60:a4:d0:33:1c:4a:e9:68:7f:2c:9d:3f:d2:ce:
35:17:b0:1a:c7:02:09:fa:69:d1:8b:0e:e6:4f:f9:
54:2a:96:4a:75:8f:6d:c0:84:b8:69:6e:48:47:7f:
20:0f:4c:f4:86:9c:f9:19:66:cf:c6:3f:8c:82:61:
a2:0a:cf:bc:8d:0d:f3:3a:2e:be:5d:71:c4:3d:0e:
2f:b5:eb:6c:1f:3c:66:6e:20:be:5d:58:6e:f0:4b:
63:85:56:bf:19:6f:95:82:11:a4:3a:9d:47:00:6a:
3b:fb:00:48:3e:fc:71:7a:51:ce:bc:02:aa:26:bf:
94:3a:b7:6b:7a:53:88:ae:26:be:3b:31:f1:ff:19:
40:bb:32:56:90:87:34:d3:89:8f:ec:bd:83:9b:7a:
0f:04:a7:9d:cb:b9:d7:62:47:c8:3e:83:65:85:b6:
78:ef:2c:1c:a6:bd:8c:8a:80:09:3e:18:b6:90:a6:
60:54:13:a9:70:c4:0d:e6:85:6d:06:24:f8:7e:62:
93:fc:13:c2:53:75:e6:4e:2c:4d:f8:4f:0b:91:ed:
e7:6e:f6:91:bf:00:bb:ce:5c:2a:73:f4:db:9c:7a:
84:f3:18:5b:cd:85:f2:f8:65:9d:52:4a:d5:39:e3:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:7A:D4:CE:55:C7:A5:C8:9C:A1:9B:6A:D9:DB:43:66:BC:35:46
X509v3 Authority Key Identifier:
keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:10:9b:92:20:9b:c6:a8:db:72:31:15:e4:3a:8a:1d:37:b9:
e1:b8:03:05:6f:a6:14:c8:55:55:a4:e0:a3:22:06:c4:08:15:
bb:18:1e:60:62:62:f2:77:6f:e0:62:45:36:56:81:53:a3:96:
6f:2b:bb:60:a1:f9:4a:42:ec:ad:69:f6:5f:d6:db:1b:03:4a:
0a:e7:44:a9:7c:a1:6e:85:61:dc:7b:82:e0:e5:0d:2e:49:bc:
f6:86:80:e9:08:7c:3e:32:90:2b:a3:96:f6:32:47:68:02:d8:
86:0e:27:fd:0f:02:29:5a:ad:ba:b6:4f:52:e7:88:26:67:cc:
c3:7e:fc:fc:7a:84:47:10:83:d9:8d:12:1d:24:28:3f:6d:51:
ce:39:50:f5:bb:bf:d4:75:e3:42:aa:4c:bd:d8:42:93:87:ae:
36:09:2c:33:d5:1e:90:6f:09:55:91:ba:0b:3e:c6:99:70:a0:
66:fc:ef:9f:ab:33:b1:e2:f6:a8:d5:84:da:eb:6d:45:7a:da:
b8:d9:93:cb:c5:7e:66:83:64:ac:c5:22:2c:ce:0f:bd:0b:0d:
53:8e:85:fe:e2:37:85:71:c6:53:b7:f8:fb:bf:22:6f:32:b5:
e6:f9:4b:87:07:cc:6f:ec:d1:eb:78:6a:6a:6c:5f:f3:4b:a4:
0f:dc:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:20 2025 by rpki-client