Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
File: UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json)
Hash identifier: MKmfG72juu14HotoAYe9O0vbM1m30SGkfbSnIEwsC44=
Subject key identifier: 39:84:72:74:28:46:C0:F9:3B:EB:2F:BA:33:0E:CD:B0:F5:49:46:1E
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial: 019A7149D921AE48BBF817915C7B7D2D1EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
Manifest number: 0E05
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: +LjF4hzUDscIVSJFQM4iA5ZqfhYGFx7El1GN4vX93rY=)
2: XcVo6Gcf-l3iWhZzeOaaEzufuDw.roa (hash: Q8U31mISF8PJJ4X9+WRd+NF2mJCwrseuFFyVkfpjEQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d9:21:ae:48:bb:f8:17:91:5c:7b:7d:2d:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=398472742846c0f93beb2fba330ecdb0f549461e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:66:cd:b4:52:95:d9:80:7a:fe:23:a2:14:
13:f7:07:8c:dd:20:d1:45:74:69:7a:a1:2a:60:a0:
17:08:e0:7a:1a:5c:1c:eb:ed:fa:ce:38:99:0a:5a:
88:f4:b7:f7:6b:c5:f6:70:b4:63:d3:1e:7b:2e:e4:
53:13:4d:15:ed:77:a4:04:66:fb:30:cc:af:b7:14:
29:25:4f:dc:ca:c1:15:c2:d1:9e:5c:00:ab:31:d3:
18:59:25:15:16:57:ee:79:d6:89:09:71:bc:66:d4:
8e:0f:7b:ad:d4:cc:45:d4:91:cf:9a:b9:f0:86:75:
ee:7a:e1:17:ff:67:a4:08:f6:35:a2:8c:d7:66:e2:
7b:18:b3:f0:4f:64:b4:15:02:ac:a0:09:fa:07:a3:
bc:fc:c3:c5:29:4c:cd:5a:dc:56:0f:dd:b2:5e:42:
18:fa:e6:1e:81:68:d5:8b:f0:54:ea:7a:ff:0e:5d:
7c:52:c2:e5:12:bb:f3:35:dc:78:21:16:1b:85:a3:
f5:2b:89:2c:31:7a:6d:e4:d5:d5:b7:60:4b:11:d4:
a3:8a:65:3d:be:8c:e6:24:8f:45:0c:1f:b1:88:09:
c9:b5:d8:2d:fa:f3:80:bd:ca:60:b3:5c:81:ce:59:
bc:7b:a7:0f:9b:f9:88:ce:e9:c1:64:61:d1:b4:d8:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:84:72:74:28:46:C0:F9:3B:EB:2F:BA:33:0E:CD:B0:F5:49:46:1E
X509v3 Authority Key Identifier:
keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0f:8f:09:93:f1:57:c3:58:56:bb:7b:a9:bf:1e:53:e5:f4:
e1:14:02:fc:ab:e6:89:19:3e:79:4b:09:a2:22:98:15:35:bb:
d1:77:fc:fe:82:c1:23:62:85:3c:72:bb:6f:5a:ee:47:6b:41:
ac:9d:4e:0a:dd:21:be:9c:93:58:b9:02:6d:49:67:f7:db:c9:
4c:6e:94:9b:46:9b:81:21:4c:c9:9c:79:5d:ac:84:00:c1:c5:
f4:bf:3a:6e:3a:64:81:a7:c2:c8:c7:43:5a:13:1a:c0:c8:a4:
dd:c4:2e:06:3b:86:2e:da:05:35:f5:5e:9e:50:d4:e1:25:99:
fb:08:73:8c:b8:17:bc:98:53:5b:f6:ee:51:a7:99:24:04:8b:
d9:e3:e0:43:a7:71:73:33:a2:f5:ca:fa:44:d5:00:69:2d:41:
00:19:16:0c:ca:bf:0f:b5:37:7c:25:7f:85:16:d7:38:6b:b3:
b6:08:f3:19:ae:e9:93:1b:75:36:46:40:b8:46:1e:cf:7a:a3:
26:40:4f:52:03:ad:6b:ac:be:17:2b:af:3c:e3:2e:1b:2b:93:
6c:78:78:61:ff:88:d8:a3:e9:7b:61:5b:c9:0f:33:ce:a5:fc:
59:19:b1:e4:a8:df:15:d8:f7:65:fa:fc:64:83:19:bf:a7:de:
9d:d5:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:16 2025 by rpki-client