Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: MmKWkgVrD34gLoQplsyf9y4Ycu6ArIdLhNLviYfA5Kc=
Subject key identifier: 91:D4:9A:62:73:DE:48:80:71:A7:51:7D:44:D2:E3:FE:69:B6:7F:EB
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 019A725C47C6E5FE67C92C9490C4AE32E299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 16A1
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: 1I4+PTCmu4IkzCmTf6IwIazH+M8MHoMTFkcOH1OuLU4=)
3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:47:c6:e5:fe:67:c9:2c:94:90:c4:ae:32:e2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=91d49a6273de488071a7517d44d2e3fe69b67feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:33:33:12:75:ed:06:1f:16:70:03:53:56:
31:9d:02:d2:d4:a5:8e:6a:93:7a:e7:57:e9:ea:ae:
07:ca:c5:19:2c:f4:75:ef:f2:4a:dd:56:83:34:2c:
7a:e0:06:9e:6f:c1:6a:b4:22:da:66:8c:fd:1d:f7:
4e:30:93:b6:56:dc:da:20:a5:31:51:2c:d3:2d:a1:
4c:79:09:6a:89:76:50:ce:ca:f2:aa:a3:a7:01:58:
06:37:9b:79:6a:2e:66:a7:38:1e:42:db:4d:80:4e:
de:90:57:36:08:80:3f:4b:e1:66:12:5a:e4:14:24:
4f:b7:2a:c7:7f:62:00:93:3c:e6:8f:f0:55:89:77:
9b:d3:dc:45:c7:64:93:4d:ca:65:de:89:a9:28:79:
8b:36:98:36:63:50:7a:ee:d7:1e:77:62:bb:1d:03:
05:36:e5:03:6d:29:04:c7:a0:bc:e2:44:3b:fa:1d:
75:c1:ac:21:bf:92:ef:6a:74:46:22:84:0a:79:5b:
d5:67:54:b5:22:5d:b2:b0:3d:4d:69:dd:aa:01:4d:
57:e9:ce:86:bc:78:d0:bb:19:a4:77:51:45:e1:06:
59:43:43:53:59:d0:31:8e:7d:90:a2:31:41:a6:1e:
78:44:1d:f2:c8:99:a6:40:d9:d0:d8:47:f9:e3:7c:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:9A:62:73:DE:48:80:71:A7:51:7D:44:D2:E3:FE:69:B6:7F:EB
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:37:e9:f1:51:91:c6:ba:ff:78:56:cf:d0:60:0a:be:98:b4:
33:f8:5e:a3:dc:1d:8c:ab:8c:34:6a:36:b9:75:3b:22:27:13:
91:84:42:18:02:ab:2c:38:ea:db:72:60:80:41:b6:04:30:81:
76:16:33:25:b2:58:e5:ff:b8:23:f0:9c:b2:7b:3b:44:8b:89:
59:28:2b:b9:5b:9e:c3:0e:15:53:94:d9:42:e5:4d:39:37:dd:
46:61:92:23:99:7f:6a:dd:80:e6:d9:c8:56:d6:c6:fa:86:56:
44:bd:96:45:be:0b:d9:d8:fe:19:7a:b6:23:06:c5:5d:d2:54:
31:c9:36:fa:42:e2:d4:e9:ae:47:77:a5:a9:57:78:ec:df:da:
23:48:ee:42:14:70:4a:f7:d2:0e:14:b7:4b:06:ad:37:b1:ff:
97:9a:b9:10:cd:5e:53:f4:ab:6c:77:2c:a2:46:98:24:47:59:
4e:a8:b3:e9:df:2c:6e:37:8c:05:b9:6d:29:fe:be:e5:fc:71:
fc:97:5c:ef:28:2e:7f:fb:c9:2b:60:17:96:16:ae:71:69:17:
6b:d5:56:d9:85:9c:da:f4:f4:e9:ab:61:25:79:b1:77:3d:03:
c4:ad:90:b0:00:ce:1a:26:61:5a:22:c4:cb:8a:ce:a0:5a:bf:
f3:95:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:14 2025 by rpki-client