Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File: Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier: KaZy7gJanGXZLKyXu92u4Ap7Sz+WLzM4iJWb9HnQAoc=
Subject key identifier: DB:1F:8B:98:AF:3E:BC:D0:61:DD:DD:5F:47:2F:AB:37:95:52:FA:98
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer: /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial: 019A7112E039E89089FA457B20BAADF9A2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number: 15F4
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: I4h2lPBOUEJnBvdG8XPw90lA/6RcVwII1t5mjHYW7Lg=)
2: kWgx2Wjql2LYt0QNUa7UD3E-ZNs.roa (hash: NPB7ZX6Td6/rM0WpZJID5mJD7qpTT41mPi5DDVNwg5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e0:39:e8:90:89:fa:45:7b:20:ba:ad:f9:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=db1f8b98af3ebcd061dddd5f472fab379552fa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:35:7c:59:80:5c:a0:27:dd:a5:78:fd:bf:
11:28:06:e0:e6:15:64:07:a9:6a:d1:1a:81:96:a6:
23:ae:d8:18:25:4b:e9:29:67:b8:d6:e2:0f:58:e7:
9b:11:e1:83:73:35:b0:bd:9b:13:42:8a:b9:a4:d1:
62:15:c2:a7:dc:22:e4:11:7c:09:55:5f:a2:a6:35:
a9:28:e6:c2:5b:34:25:af:59:ce:9e:4e:a2:39:e7:
2e:be:5d:b0:fe:d2:f5:e9:8f:cd:d1:18:7c:76:43:
13:1e:ce:cc:db:85:1c:c4:f5:80:f6:4a:0d:c5:5f:
90:6e:ba:c6:8e:3d:42:cb:f2:ca:ee:b3:40:f4:7e:
3e:23:1d:e2:81:2f:de:d8:d9:65:52:47:5d:b7:88:
66:57:31:c2:bb:74:69:56:4e:23:08:78:8b:fa:2e:
72:87:29:d2:d8:4b:49:80:59:bb:bb:4f:b5:22:1e:
f3:76:7d:8b:49:c2:1b:9c:96:ce:06:73:0a:25:9e:
84:0a:98:27:8f:a7:6c:7b:0c:09:7d:75:99:29:cf:
9e:7d:f5:b2:7c:63:ca:a8:85:e4:ac:84:33:ea:78:
5d:16:58:94:c3:3b:7a:b2:50:6a:0f:fc:42:09:c9:
6c:5d:58:0a:c5:36:6f:b8:56:53:e6:8f:7a:cc:85:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1F:8B:98:AF:3E:BC:D0:61:DD:DD:5F:47:2F:AB:37:95:52:FA:98
X509v3 Authority Key Identifier:
keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:72:f1:d2:88:c1:02:4c:95:1f:6b:99:db:35:ed:aa:76:76:
91:33:b1:53:ef:49:93:b4:f3:bb:0a:e9:81:0e:b3:7c:bc:9d:
93:39:b1:c8:87:7b:35:90:3b:ff:5f:4d:2a:f9:56:3b:bf:bc:
9f:de:8d:b9:38:e3:1d:03:b3:0f:ff:36:22:3e:14:52:59:6e:
20:df:e9:aa:a4:03:e4:0b:16:de:4c:27:91:01:24:c8:24:fa:
ff:7d:c9:7f:20:65:a2:00:73:7d:d9:7d:1a:2e:59:db:c9:b5:
2f:70:1e:d7:8a:51:7e:eb:f6:2f:1b:23:c5:45:dd:4a:81:18:
04:df:24:d2:45:74:b0:62:68:c3:56:a0:d9:d3:4b:16:4e:b1:
56:c9:f1:3b:e7:59:3f:95:09:c9:b6:83:87:36:88:c2:51:42:
43:ef:82:85:0d:01:b6:b2:47:25:44:90:1b:4e:b0:bc:7d:11:
3f:b1:71:61:76:9b:d6:ce:06:6a:1f:8a:ca:5d:a8:3a:e1:18:
4a:50:55:97:39:49:e1:65:fc:ef:cc:8f:9c:e4:72:e7:87:d7:
7d:4a:34:9b:25:a0:5a:7f:5d:de:0c:f1:a7:cb:3d:04:ed:7e:
0e:90:36:5a:a9:6d:76:ac:18:99:49:84:d4:d5:dd:f9:28:f7:
77:7f:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:36 2025 by rpki-client