Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier: 8D15y8ewjdiqBSGCgHaMIFAW2bNLNPra7juW/4WLybc=
Subject key identifier: C2:AB:79:12:50:EF:18:FA:2C:41:E7:8A:76:08:22:5A:10:92:F9:44
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial: 019A725C9E014F851BE92E94BCF6C999B003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: bYPbLanH+nvk6qqlbjPuCKNNi16VYLRrPPUVZMa2Epo=)
2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9e:01:4f:85:1b:e9:2e:94:bc:f6:c9:99:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=c2ab791250ef18fa2c41e78a7608225a1092f944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:bd:ed:08:ae:ae:81:0f:d9:2a:6e:c7:95:
b4:52:d9:06:f7:0c:d5:d3:f6:04:db:90:66:6c:b9:
a1:de:02:79:e1:79:e6:19:81:fc:f6:a5:8e:3c:07:
56:d9:34:42:d6:dc:65:b9:43:1a:ae:14:0b:14:95:
1f:9a:ae:e0:a7:15:25:47:af:ea:f2:80:e7:75:98:
ea:e3:07:f5:a7:5d:48:b6:da:a2:69:66:42:5c:27:
2f:07:c2:f0:b5:e6:58:11:37:7f:f3:58:5a:76:87:
47:21:2c:10:d7:1a:58:24:ec:e0:08:5a:c1:1a:3b:
12:e1:a2:f3:19:73:60:8b:2a:51:a6:05:bf:8f:16:
a4:9d:85:07:1d:51:d6:20:85:93:c6:ff:93:aa:2f:
fb:ae:ed:02:d2:d7:ae:c0:8c:69:43:45:97:6a:07:
c3:36:a2:a2:6f:6f:24:2c:63:0d:ec:87:f7:ab:2f:
ed:52:41:99:c3:18:15:f7:67:bb:56:06:b9:29:96:
5b:78:28:9f:2c:ed:c7:4d:13:67:4a:bd:89:38:4e:
76:c5:02:dd:e5:95:48:f9:aa:74:2a:95:b0:06:68:
38:36:80:32:0b:a0:c0:20:fb:57:c2:36:ca:5f:22:
f3:56:94:85:f7:f3:8a:01:3d:c2:76:69:4a:5c:f2:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AB:79:12:50:EF:18:FA:2C:41:E7:8A:76:08:22:5A:10:92:F9:44
X509v3 Authority Key Identifier:
keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:13:52:e5:23:a7:f3:c7:27:42:9c:aa:d9:d5:50:c8:e6:4f:
2c:c6:3b:94:b4:e3:b3:c5:ff:7a:d9:c7:e3:7c:bb:41:64:39:
07:45:88:5f:ee:71:4c:7c:04:ca:78:62:dd:ab:c0:ae:93:e3:
45:18:33:3f:fe:74:c0:73:aa:d5:37:26:7c:2c:00:7a:56:f6:
7f:5c:94:54:a2:09:24:68:05:e4:3f:2f:b1:30:17:e9:96:ab:
25:a3:d4:5e:b3:5a:d7:1d:ab:b9:90:58:2f:6f:80:f2:a6:44:
81:34:69:02:b0:61:16:92:f2:91:71:a0:19:c6:ee:9d:4c:59:
3c:1c:32:f0:c9:f0:2b:58:30:81:86:fe:b2:02:49:fd:33:ad:
b7:c6:39:dc:ad:c8:bc:83:bf:80:bf:7b:81:e2:4e:1d:42:ff:
36:d0:7e:dc:db:64:8c:9f:5c:6d:98:15:63:10:8d:e7:44:6b:
a0:3c:b3:07:65:61:5b:e5:1b:1b:57:c1:65:2b:1f:48:10:04:
87:3b:77:e5:61:26:29:41:29:e7:96:4f:7c:a1:30:41:85:7a:
99:5d:aa:30:94:d2:7a:ee:3f:0a:0e:76:d7:4f:3c:37:92:ff:
d4:b8:06:c0:af:dd:ea:41:b1:2d:c1:56:d6:79:a2:c4:77:ef:
cf:a5:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:27 2025 by rpki-client