Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: ToLsIyFc2Jjo8Dh3g0UTqMXw3SUzMq6CoCQBRwPgSpc=
Subject key identifier: 80:64:FA:5E:E6:F9:A4:76:D7:21:4C:C6:87:57:E0:AB:40:61:00:7F
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 019A725C828C5593B771A72E62C9AA2D7395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 15C0
Signing time: Tue 11 Nov 2025 10:00:56 +0000
Manifest this update: Tue 11 Nov 2025 10:00:56 +0000
Manifest next update: Wed 12 Nov 2025 10:00:56 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: RIDE1n7FBvHVRCE5Vl6zPKYGS54bUEjCdD2EgYxYkiE=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:82:8c:55:93:b7:71:a7:2e:62:c9:aa:2d:73:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Nov 11 10:00:56 2025 GMT
Not After : Nov 12 10:00:56 2025 GMT
Subject: CN=8064fa5ee6f9a476d7214cc68757e0ab4061007f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:7c:b6:ed:5b:33:ea:85:ec:80:21:d3:63:
9a:47:c1:14:cb:ac:b2:ac:31:27:3c:ee:e4:ab:b9:
36:5e:3d:d2:e2:fc:71:a2:87:9e:87:a1:89:9f:66:
a1:ba:0f:54:3d:d7:ca:7e:d8:55:e1:ca:0d:a7:43:
ed:d4:b0:8d:ad:4d:05:65:d0:b1:54:7d:38:9f:2d:
07:7a:52:9c:fe:8f:ec:fc:8e:8e:57:d1:04:d1:f5:
0d:5a:ad:a5:b9:52:dc:8a:05:8a:c3:44:c7:2c:51:
74:6e:16:c0:40:a8:c7:fa:b3:e9:9e:18:67:27:cd:
c8:14:91:0c:ca:e3:cc:18:85:a8:ca:79:76:4a:e2:
c6:3d:96:17:17:71:f8:5d:c1:55:d8:b6:80:e8:6b:
a8:4b:b8:30:28:ab:b3:7a:40:43:d0:9d:9b:d9:ec:
ed:38:ed:94:e2:f0:59:bb:42:74:ca:31:f9:15:49:
70:bd:f9:46:c6:d9:16:b5:3b:a4:7f:68:37:31:01:
c9:e6:b0:dc:53:b9:a4:c7:ac:68:76:fb:63:5d:e9:
52:91:90:3b:59:5a:47:9d:8c:bc:f1:2b:b2:3a:a5:
0f:17:9f:8e:0a:4d:23:ba:1d:c8:8a:d1:eb:08:7a:
de:3a:4c:79:a8:e9:08:a4:ea:e5:9e:c3:9e:3f:2d:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:FA:5E:E6:F9:A4:76:D7:21:4C:C6:87:57:E0:AB:40:61:00:7F
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:33:cc:72:3d:a1:6b:66:dc:7d:41:b4:f1:17:56:16:88:
06:3e:b2:8d:8c:be:ec:0e:6d:26:39:3b:a7:49:fa:5c:e5:6a:
8b:96:3b:15:99:9a:42:4e:3a:74:48:19:b9:48:4d:4b:df:49:
1b:21:f3:07:19:ec:a0:9e:dd:cd:04:7e:ef:71:e5:36:bd:b7:
dc:a9:ff:ff:06:e6:1b:cb:27:b6:79:b9:2f:a2:7f:6d:1c:04:
c0:11:af:00:86:70:15:4e:c0:86:f6:ad:65:b4:ef:18:21:cc:
3c:71:f6:56:67:45:c4:12:9a:31:fa:2c:71:45:1b:55:4b:a0:
f0:68:39:23:5a:b4:47:85:15:77:ee:68:9b:d4:2a:da:9c:91:
ff:fd:4b:eb:e9:ad:7d:26:0b:48:31:32:01:e7:14:7c:6c:f7:
83:1d:b0:06:59:c1:f7:91:13:59:d0:82:80:ad:7b:5a:f3:e7:
50:d3:6b:a4:73:01:8a:9d:b4:2e:62:f2:6b:4e:ba:b4:ba:6e:
7f:0c:be:cc:22:71:99:ec:01:b3:16:eb:db:34:03:3f:7b:a6:
a5:2f:e7:b5:82:59:e6:5e:72:79:3e:ef:fa:1f:6d:b7:e2:8e:
9b:4b:12:4a:c2:95:e1:48:4d:ad:0c:35:e7:70:a4:20:11:39:
93:13:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:29 2025 by rpki-client