Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: w9BqXv3j471bDXXuIS2asvODxzuHzKMNjGO2WpYkhbo=
Subject key identifier: 0F:27:4F:90:33:58:0B:4E:63:F1:2C:5F:8C:70:03:BE:17:D8:23:DD
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 019A73385F08A2A207EB4ED062DE310F9D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 0F27
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: gKVswHOURbsVwg2Pk8APC3rFXUrcT52YBWqNNEAl1ak=)
2: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (hash: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:5f:08:a2:a2:07:eb:4e:d0:62:de:31:0f:9d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=0f274f9033580b4e63f12c5f8c7003be17d823dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:11:df:96:b9:c1:4e:02:ba:41:85:47:5c:
76:bc:9a:0d:84:bf:5e:80:42:6a:35:af:82:5c:b6:
d1:a1:e9:41:cf:fb:f2:4e:de:17:c4:08:c7:c9:2d:
13:1a:71:7c:23:98:78:c9:04:c8:eb:4e:d7:0c:14:
78:6d:6e:e4:f5:84:02:90:05:b6:4b:84:4e:c7:8a:
4e:03:30:60:46:50:59:3c:d2:1b:9f:93:00:68:cd:
29:9a:6d:59:9c:43:cf:97:96:c2:34:a3:ac:69:02:
90:66:ee:b2:3a:9d:89:fe:c5:f3:74:67:b7:78:ce:
5f:9e:ac:1a:78:f6:9b:5f:d8:bb:a4:fe:b3:50:cc:
92:17:c6:8c:df:38:69:03:14:81:b7:17:ef:56:08:
25:be:3c:44:c5:f4:11:c4:97:7f:27:82:fd:cf:7e:
d5:22:f7:61:07:ed:97:ed:e3:71:94:07:89:7c:cd:
97:a3:a3:a2:bb:80:0c:36:3c:0b:12:e7:73:f9:27:
ff:de:fe:cd:0d:54:30:c3:2d:14:e1:cf:81:f1:ff:
68:5c:7d:85:a0:7e:8e:02:48:50:bd:ed:fc:db:b9:
55:c0:a9:c7:a1:62:5a:7f:9b:51:e6:cf:6f:1f:6b:
5f:35:8e:1b:0f:52:1c:a9:c7:58:f6:26:50:0b:c6:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:4F:90:33:58:0B:4E:63:F1:2C:5F:8C:70:03:BE:17:D8:23:DD
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:29:3a:6c:ef:52:9a:e4:e4:d1:bd:51:7e:86:2a:02:9f:c1:
7c:1c:52:a8:52:34:4e:ca:d0:7d:f5:ee:5a:42:59:5d:88:52:
14:1d:51:94:85:63:75:3a:ab:95:33:7f:63:26:3c:1c:74:5d:
36:68:aa:69:94:0c:35:6d:4e:90:90:bf:38:b9:68:fa:97:98:
9c:7a:c4:e0:cc:ce:87:d4:be:e3:37:13:d0:eb:f0:65:b0:30:
b6:1c:73:a2:94:e9:66:1d:3d:b0:97:7a:2b:b0:f0:51:7c:a9:
7e:ea:53:78:c8:0b:1f:fb:12:ee:14:69:af:24:43:94:fa:e0:
4e:50:5b:e3:ae:9d:4c:6c:ae:88:2c:fe:1a:ef:98:c7:83:07:
49:bf:a8:f0:1c:59:26:e5:6e:95:9d:bf:56:11:8f:95:98:e9:
85:cb:60:e1:2d:a7:ee:f8:70:8d:b9:b4:a7:16:2f:ca:17:2e:
1a:0a:bb:16:39:a0:8b:52:ea:74:a0:c0:b9:c2:2c:01:d2:bf:
4f:ce:20:08:bb:a6:f8:53:b0:33:cb:5d:a4:bc:a3:10:e0:5b:
01:55:f7:3c:9a:ae:10:65:31:1c:ff:df:38:eb:e8:af:05:e7:
1c:d0:46:9c:3d:d6:2b:fe:3e:8d:14:30:9c:3e:48:22:0e:2a:
c6:11:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:47 2025 by rpki-client