Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File: UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier: 0nUcJDulu+rALmlTAYUFdlcHVhiHxzft+CrQodxAXJI=
Subject key identifier: AA:DC:7A:D1:1F:F0:CA:38:AA:71:9C:24:5B:06:91:D8:AA:DD:BB:6F
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial: 019A7225A06A5A385B26B4E785A695340F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number: 08AD
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=)
2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: B8p8g/R5gXZ3N+a5iLMsM0zILMbj/44GcIexgdZYft4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a0:6a:5a:38:5b:26:b4:e7:85:a6:95:34:0f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=aadc7ad11ff0ca38aa719c245b0691d8aaddbb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:f3:fe:23:7d:64:29:4c:0e:d9:c3:55:14:
0c:f7:5d:06:83:0f:9a:3c:9d:5b:b1:d4:33:26:3b:
53:af:6d:53:65:1c:b6:ca:95:d4:c0:b5:95:24:4c:
47:02:03:e5:e2:87:f6:1a:d7:e6:8c:f1:76:49:49:
18:da:f1:9f:1d:2d:a4:55:31:56:35:ef:19:ab:f8:
42:13:9f:6f:97:10:6f:36:33:5d:9f:46:be:9e:38:
95:a6:bd:5f:d9:33:f9:a3:1b:ec:cd:e6:2f:ff:3f:
9f:fb:98:48:fe:39:60:8e:52:f1:5e:e9:cb:1a:ef:
f5:d9:f5:4d:b1:44:b9:dd:bf:69:52:e9:d8:53:cd:
c4:bb:0c:f0:58:27:fd:a7:da:2a:a0:0e:ec:ee:40:
4f:24:00:62:a2:2e:b0:70:ed:0c:10:e5:7a:1c:2c:
5d:65:31:76:c7:8e:fb:f2:d7:49:d5:2b:c7:40:ce:
44:87:ba:67:3c:c1:05:71:65:ce:ba:e2:1b:b2:7a:
0e:b6:68:1b:78:cf:5c:13:17:02:0e:2a:6c:14:89:
89:75:15:95:a0:d2:07:42:6a:0d:24:ef:f0:27:3c:
b4:44:1a:60:8e:f4:8e:9b:62:ec:6d:d0:a3:29:9f:
20:e0:f4:36:3f:79:8c:3d:3b:3f:e2:60:a4:84:64:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DC:7A:D1:1F:F0:CA:38:AA:71:9C:24:5B:06:91:D8:AA:DD:BB:6F
X509v3 Authority Key Identifier:
keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5d:af:e3:9a:a5:0a:5a:79:09:dc:96:18:d2:6f:d4:46:17:
47:1a:4d:0a:7e:85:09:f9:4e:9d:37:55:90:2c:48:e4:11:15:
d9:18:f3:b9:20:b6:20:ed:91:ca:74:49:a7:a0:fb:54:ec:4b:
a4:9a:b8:eb:27:d0:2c:c8:01:9e:73:c2:07:e3:93:5f:67:9f:
de:b8:a1:75:06:99:77:e9:cf:88:52:ff:97:88:d9:50:bd:eb:
43:09:88:65:ed:39:35:8a:87:5a:be:6c:2c:56:eb:0d:e3:7c:
c6:2f:53:5c:27:86:1e:6c:7b:cf:c6:2f:55:59:19:06:e0:0f:
83:6b:18:cb:86:2a:5b:ab:32:c5:3d:7b:c7:73:1c:f4:88:3d:
d5:7a:60:75:97:4d:e8:a0:84:a6:55:6f:1e:96:17:d5:2f:22:
5d:bd:09:a1:86:f7:6a:68:b8:e2:03:4d:6b:bb:e4:fe:4f:5d:
1f:45:34:94:f6:d1:35:9c:1a:64:67:40:53:2f:24:18:5b:a2:
82:75:f0:9a:71:03:56:ae:c3:8d:4c:2a:ca:54:f2:75:be:d3:
09:c6:d0:82:8d:41:4f:9c:92:e0:12:1f:3b:d5:b7:91:1a:b5:
cf:9d:df:fb:cc:62:f4:d4:45:be:49:20:ad:a2:ca:97:7d:4d:
8c:06:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:27 2025 by rpki-client