Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: IA6Be5WUAX+Ozxhkjx4cXfLNOGlr3zmvusZjQ2V1WO0=
Subject key identifier: 04:7A:3A:E9:FD:41:46:45:A0:27:DA:DA:36:DC:B0:3D:59:F5:73:08
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 019A1E3EEB909DCC0FFEACA46B7DE191FDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 06AD
Signing time: Sun 26 Oct 2025 02:00:31 +0000
Manifest this update: Sun 26 Oct 2025 02:00:31 +0000
Manifest next update: Mon 27 Oct 2025 02:00:31 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: BkAyrHfw9SJ4WUxJgvs8X7Cc62L/KEigl6KknRbGoXs=)
2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:eb:90:9d:cc:0f:fe:ac:a4:6b:7d:e1:91:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Oct 26 02:00:31 2025 GMT
Not After : Oct 27 02:00:31 2025 GMT
Subject: CN=047a3ae9fd414645a027dada36dcb03d59f57308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:01:45:38:0e:57:19:46:8a:59:99:1a:32:
7f:40:f4:e3:90:f5:66:5a:58:20:a5:6a:ba:5f:15:
e6:92:04:81:5e:dc:68:a5:0a:4d:7c:be:3a:8b:df:
44:ee:f5:e8:73:29:d8:09:6b:47:6b:c1:54:b4:36:
b7:22:22:73:6c:95:87:16:2f:72:55:06:2e:0b:ed:
af:44:76:1c:9f:a9:04:b9:e7:cd:9f:5f:95:a7:af:
01:0d:b1:a7:bf:c3:15:08:33:14:d4:ff:1f:65:1b:
63:1b:12:ca:03:81:92:67:25:74:26:af:e8:7e:2b:
6c:54:74:30:fd:cf:94:98:1a:0a:6b:04:3d:13:53:
ad:72:98:a2:b4:39:e9:48:29:12:99:2b:94:e4:71:
cc:14:9a:fa:d2:81:dc:83:da:ef:45:f6:6d:cd:92:
86:e3:60:93:46:3a:83:1d:a3:2c:61:ad:a5:eb:43:
d4:cc:fe:9c:56:46:62:ee:be:e2:f5:10:cb:a9:3f:
86:75:ff:5c:4a:21:27:be:d2:3e:02:69:48:4f:89:
51:20:6d:34:dd:37:2d:69:3f:17:3a:38:6c:34:26:
32:c2:e6:7c:d8:99:96:96:d0:b8:81:a6:57:54:31:
94:68:02:1e:69:33:63:88:eb:b8:7e:27:ff:b7:a2:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7A:3A:E9:FD:41:46:45:A0:27:DA:DA:36:DC:B0:3D:59:F5:73:08
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fc:f0:2c:7d:8d:40:b3:b4:5f:02:50:77:1e:04:64:7b:e1:
04:ad:b5:88:ca:73:42:cd:ad:66:e1:27:85:ad:38:83:dd:51:
e3:91:fa:13:91:3f:bb:52:fa:89:fc:38:54:d0:3c:6f:00:a3:
0a:19:7b:08:41:09:a7:43:f0:4c:32:13:47:46:6d:91:db:2b:
d1:18:34:89:24:19:c7:4d:dc:8f:66:75:ff:0f:5e:2b:8a:77:
bf:92:14:ad:b8:d9:d4:3e:f8:6e:e2:44:84:01:21:d7:a6:e3:
d3:cf:03:c0:f8:1b:38:2e:0f:b0:d6:30:4c:d2:62:0b:bd:0f:
6f:8f:61:cd:f2:9d:21:77:a3:73:cd:b2:6f:62:4a:ec:c6:a9:
bf:b8:b8:35:cc:9b:b5:af:cd:03:72:99:2e:0a:87:7e:dd:37:
09:b1:5f:0c:e3:55:19:38:ae:2c:c2:46:36:6d:40:91:0c:1a:
60:bb:57:4d:2d:bb:a9:fc:d3:e7:76:e0:2f:24:ee:04:2a:73:
be:e2:a1:e7:db:d0:03:e7:65:9d:e5:2f:83:1b:97:db:d9:fe:
76:87:32:e7:ef:8d:23:61:1b:aa:9d:fb:54:1f:c3:cf:d4:aa:
2d:01:ab:7a:11:d4:d3:1a:03:43:0a:b5:19:40:80:68:5b:ca:
69:51:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:56:01 2025 by rpki-client