Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: iKM61FZnE6tsvqu050CGkbQ7+H19SMz7AiNGxfs8zjU=
Subject key identifier: CD:DA:6E:97:99:CB:2C:08:8E:E6:9B:E0:BE:06:BF:72:20:9A:C5:01
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 019A71B7A81473D1A7FBB1360F5337198C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: HML4xzSnEMzO3r1oLB5h4OLti1STVnbL8+F6+/Cxlrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a8:14:73:d1:a7:fb:b1:36:0f:53:37:19:8c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=cdda6e9799cb2c088ee69be0be06bf72209ac501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:46:ca:cb:f6:de:39:c2:24:34:4d:d0:a8:
36:0f:d0:4a:d3:fa:f8:7d:7e:a6:0d:61:6b:48:25:
9c:35:dc:2b:69:2e:4d:9b:96:f4:1d:ce:1e:93:ee:
45:ea:94:c0:d6:e5:bb:af:c0:34:7a:a9:4e:39:46:
7b:e3:fd:a1:2b:7d:26:53:c6:cc:2b:94:06:da:0d:
33:dc:8e:88:0c:57:d3:a4:56:ce:2c:0d:12:b1:3c:
5a:78:e8:40:91:5a:e5:95:99:e5:ac:5e:ab:3c:0d:
ed:e0:0b:2a:19:a9:b5:20:cf:8a:fb:4d:b9:77:05:
b9:1a:5a:2a:48:54:bf:d6:dc:c2:d6:8f:27:e4:81:
6d:fc:65:58:58:03:4c:02:97:01:8a:43:a2:cc:e8:
07:5c:cb:d7:af:76:53:26:bd:93:c7:85:14:b8:d6:
28:45:a5:66:a4:e4:50:a1:b3:2c:c0:0a:58:7b:1f:
15:55:7d:07:83:46:59:f7:7f:d2:04:7a:2c:66:38:
b3:c1:cb:5e:35:37:90:18:81:df:12:f5:58:9f:05:
76:e1:6f:02:6c:a3:b2:59:3b:b0:85:ab:d7:3d:9d:
04:1f:e0:91:66:77:3b:8b:b5:55:43:00:cc:3f:0e:
70:b0:d8:54:b9:07:f9:9c:51:28:41:83:d6:b3:cd:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:6E:97:99:CB:2C:08:8E:E6:9B:E0:BE:06:BF:72:20:9A:C5:01
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ed:43:41:2e:fc:69:4d:08:60:66:54:d8:36:8b:d7:d5:3a:
b6:75:14:82:a6:cb:37:b0:d5:f4:ae:f8:e7:53:fc:6f:05:a9:
57:47:89:d6:82:0b:8a:b0:da:fd:f5:3d:48:29:6e:0e:a7:d9:
64:08:07:e2:57:02:67:d6:5b:66:c5:2f:ef:ca:ba:7a:b3:da:
bc:ff:6e:cd:0b:e0:1c:af:4e:b3:71:27:5f:ca:bd:ab:ab:d7:
5d:72:6d:76:01:13:af:33:a8:37:09:96:bd:79:b4:85:5b:7c:
34:74:83:bf:96:73:8e:10:ea:68:c8:f2:a7:b7:f2:27:d6:1a:
1a:3c:88:03:82:b9:3d:31:67:d7:1a:b9:e6:76:bc:f9:87:d7:
26:b9:63:d1:67:d9:fc:21:b0:99:cb:15:c1:30:20:02:c5:4f:
0d:48:c0:6d:8b:ea:d4:d7:40:cd:8f:ff:04:4f:ed:e1:23:b1:
d4:fc:66:61:4c:a4:41:82:78:2c:df:52:17:26:3d:a2:be:5c:
d6:e3:9b:26:20:94:0a:25:2d:56:f9:25:9d:80:ea:38:00:b9:
77:35:ba:8a:bf:a0:a6:ab:12:b1:b4:b5:ef:24:9e:6e:5e:d9:
56:dd:aa:0b:14:82:76:e9:b3:d9:9c:25:9b:da:20:2b:de:0b:
fc:fd:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:18 2025 by rpki-client