Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File: UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier: 52bliihO8dzJNmzgSFn6lPgTXKmillYPtPMcEhHTiro=
Subject key identifier: E2:06:F4:30:8C:C9:FD:C7:7E:B9:71:01:DE:F1:96:0A:0C:04:DC:A1
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial: 019A70A4FCABA269691B0342990244D07B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number: 0F3B
Signing time: Tue 11 Nov 2025 02:00:51 +0000
Manifest this update: Tue 11 Nov 2025 02:00:51 +0000
Manifest next update: Wed 12 Nov 2025 02:00:51 +0000
Files and hashes: 1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: qapF+q5rfJ4LFWdZSIWehH1GJc914lt00oRjjKsLdwc=)
2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:fc:ab:a2:69:69:1b:03:42:99:02:44:d0:7b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Validity
Not Before: Nov 11 02:00:51 2025 GMT
Not After : Nov 12 02:00:51 2025 GMT
Subject: CN=e206f4308cc9fdc77eb97101def1960a0c04dca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2e:b1:33:71:96:1a:a5:a3:34:67:85:69:b4:
e1:8b:45:f7:80:e8:f5:a0:67:ae:cd:49:fa:12:d9:
34:5d:ff:e0:80:96:dd:62:a9:c2:6d:c2:4a:98:e3:
0f:9e:6b:ba:4d:05:f5:3a:2a:8c:34:25:1d:32:9f:
df:8c:0e:d9:99:c8:c3:51:fa:74:18:b7:dc:3d:30:
cb:98:61:87:22:5d:d4:8c:f7:9c:76:8f:d3:84:8f:
b2:81:0f:e4:43:af:16:3f:fd:b4:89:ec:66:c5:2d:
ae:2b:61:34:8c:5a:93:53:21:ef:35:f9:f9:0f:36:
c6:bb:89:f5:f5:c0:1f:5b:06:dd:e0:8d:f9:f6:7f:
43:7d:ab:95:0c:be:29:00:81:88:d1:9e:ff:62:e2:
84:5b:03:0e:c0:9c:92:b0:08:00:86:79:95:ff:e0:
9c:df:b2:ce:ba:2a:ff:e5:a7:d5:48:83:d7:d8:e8:
b9:48:77:51:c2:2c:ed:66:f4:31:99:1a:bb:1d:10:
5b:94:0e:13:65:07:f6:e5:14:35:51:c3:89:ac:24:
b7:22:15:98:fa:15:90:b2:61:bf:a7:00:36:1d:ba:
55:71:f7:c9:c4:66:c7:77:40:a4:5e:04:d3:49:95:
ea:a8:33:c4:c7:d5:1b:f2:84:77:ee:f2:c5:8a:b4:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:06:F4:30:8C:C9:FD:C7:7E:B9:71:01:DE:F1:96:0A:0C:04:DC:A1
X509v3 Authority Key Identifier:
keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:64:64:3f:4a:de:cb:79:e4:38:da:4c:d6:9f:21:e7:a6:46:
eb:68:69:35:5f:62:4c:ca:ae:ad:83:e0:1e:1e:91:82:9f:5d:
1f:51:f0:30:ea:73:aa:c2:83:88:ba:41:9a:fc:f0:9e:0f:83:
de:14:c9:9f:90:dd:38:9e:85:50:64:a2:7d:ce:79:fc:14:1a:
da:02:9b:26:86:75:02:64:95:25:9b:17:4b:c7:9c:d8:d2:ea:
27:7e:e8:8b:16:37:61:4b:65:0d:33:1f:bf:af:fb:4f:49:29:
0b:34:ff:d7:09:f4:94:ed:94:39:b2:a1:50:63:e7:b2:98:f7:
8c:a6:3d:f1:58:eb:06:d2:ef:ae:d8:cf:38:94:da:c7:52:d5:
ba:60:99:fd:7a:4c:27:dc:34:f2:bd:53:3f:96:88:24:c8:19:
07:5d:fd:e8:95:9d:33:71:2b:41:4e:87:60:ff:83:3f:41:f6:
96:ac:81:7b:81:8e:51:8c:27:64:21:c6:4c:2d:e1:72:9f:da:
c0:db:f6:62:af:02:a0:f6:76:73:07:07:2f:4d:00:0e:54:28:
e0:3f:1c:84:7c:df:5a:8b:0f:bc:61:94:6d:1e:de:c6:75:ba:
d7:4f:04:84:38:10:05:88:3f:2d:68:ab:79:c3:d5:da:2f:b8:
69:67:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:37 2025 by rpki-client