Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: iAt7HB3kzwtzEpe1SutphVIUZQLhAESj/DLIo0zHhhs=
Subject key identifier: 30:70:CE:A5:0A:DD:22:52:47:72:98:2E:77:7C:1F:5D:D9:37:CB:D9
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019A725CFB0ECB112A95657D8C0FCBDE16DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 10:01:27 +0000
Manifest this update: Tue 11 Nov 2025 10:01:27 +0000
Manifest next update: Wed 12 Nov 2025 10:01:27 +0000
Files and hashes: 1: TFo1gtP034QimxoONKR9cO3Rea0.roa (hash: ZbKyuz+8pa9I1RSPWJwZNU5a7S31Y7QOYHmJtNh9TXA=)
2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: /jooXY2Ua5QRYbww6goyCpMYqWP3r9vVnoPhKNn7ZGU=)
3: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:fb:0e:cb:11:2a:95:65:7d:8c:0f:cb:de:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Nov 11 10:01:27 2025 GMT
Not After : Nov 12 10:01:27 2025 GMT
Subject: CN=3070cea50add22524772982e777c1f5dd937cbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:d9:2d:d8:5d:20:25:c8:08:4d:86:2e:c8:
22:b5:6d:27:0b:7c:56:e8:29:0c:b6:07:79:a7:30:
be:1c:43:c7:a8:b8:6a:5a:9a:15:e7:a9:c5:75:e5:
b8:c9:a1:a5:8b:39:06:dd:a7:1b:74:b7:c8:e9:e8:
15:5f:4c:08:ce:67:58:49:59:67:55:8a:50:a3:67:
1a:08:61:f3:1d:9d:62:47:15:76:af:28:d3:34:90:
3b:33:f4:0e:09:51:34:47:d5:c7:86:41:93:97:b8:
65:7f:ad:5c:68:ff:f2:7c:47:3d:b6:b5:74:75:02:
9b:74:5e:92:33:f6:96:4d:0c:ce:b9:ab:5e:4f:6e:
44:a9:dd:ac:4c:13:96:7d:f1:24:23:33:59:86:6c:
04:64:97:12:d4:59:92:22:fe:54:98:6d:7f:0f:2a:
4d:17:b2:6c:b1:9f:87:d9:ca:aa:f4:46:49:10:60:
14:5e:eb:a4:32:37:03:b6:2c:cb:46:64:f7:43:d8:
6a:56:a0:3d:22:b1:da:e9:98:e6:b6:88:b5:47:21:
30:64:61:cb:d5:86:56:b7:ac:28:67:62:c4:35:2a:
84:aa:a6:13:1c:35:de:54:3d:42:fe:ca:50:da:0c:
f4:6e:f0:9c:bb:40:19:f1:2c:63:4e:4a:1c:1f:12:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:70:CE:A5:0A:DD:22:52:47:72:98:2E:77:7C:1F:5D:D9:37:CB:D9
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:d8:c7:9c:cc:e7:d3:4c:8f:44:04:24:95:f8:b4:f2:c6:
8d:64:63:a3:15:af:ba:d3:a2:10:b1:0e:0d:b5:7f:e6:00:88:
f7:d7:da:4c:2a:41:3e:f7:4f:2f:29:28:9f:e5:8f:cd:4a:b4:
31:0b:a6:ec:37:eb:b6:e1:a9:35:ce:a7:4f:df:ad:01:46:f7:
6d:d6:33:f2:c7:82:1f:7b:90:a4:8e:8b:08:6a:51:90:ae:69:
f2:d7:c0:c0:98:da:5a:0b:85:43:6a:91:5f:0e:6c:51:24:9c:
ac:37:38:8d:ef:14:af:34:71:f9:3c:5f:e2:02:df:21:76:3c:
e4:f7:e4:4b:c6:c8:08:a0:dd:6c:d3:bf:07:20:c0:8d:a4:b8:
42:20:a5:be:5d:ee:8b:e3:f9:bd:d8:1c:4a:87:dc:ac:6e:e1:
18:ba:93:d5:6c:ab:38:3f:3c:eb:30:5e:7c:7b:a3:21:bb:f4:
4e:62:bc:7f:bb:e2:4f:7d:66:f9:a8:8d:9e:d3:66:4f:73:1d:
41:7d:fe:39:29:2f:57:ce:4e:d1:5f:18:ed:4f:f7:8b:9a:ad:
f8:e2:a1:69:7f:70:79:ee:f2:41:ad:a4:7e:5d:73:9f:4b:98:
3b:ea:b5:ad:91:9b:10:00:75:f9:aa:42:b2:65:bd:1b:52:1f:
db:d8:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:34 2025 by rpki-client