Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier: sl8x/7yvobqiMUKScCVC44lgUFRo7hdZ++piyD2QgS8=
Subject key identifier: B6:D9:C8:C2:18:1E:76:8C:91:81:A9:1F:18:B4:74:4E:04:6A:D4:7C
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 019A71B9460811BD098EA84C96677203E4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number: 0B2C
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=)
2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: D+AoO5mi+GYVfTml3EFhEq0IiWCqrIHup0SgCsf9430=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:46:08:11:bd:09:8e:a8:4c:96:67:72:03:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=b6d9c8c2181e768c9181a91f18b4744e046ad47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:69:27:92:b9:bb:1b:33:fb:bb:58:42:59:
90:17:08:6c:98:ea:5d:53:da:16:44:60:86:81:a9:
ca:83:9e:0b:8e:72:d4:ae:d0:fc:10:07:d5:79:89:
bd:67:73:6e:c6:a2:a6:0f:6c:83:14:e4:cc:cb:04:
51:d0:34:b1:c5:6f:65:85:8c:ca:6d:83:1a:87:89:
ab:d3:02:96:0c:b0:09:02:b3:05:38:55:1f:52:6d:
27:30:37:fd:dc:e5:3f:fc:36:76:0e:b8:3b:0c:94:
ed:69:05:cf:93:67:55:ea:8e:d4:05:f6:53:4d:83:
64:1e:b9:e7:a0:f1:44:25:d9:1d:28:f3:23:36:b8:
09:d3:c8:94:9e:52:02:9c:aa:a9:97:d6:38:5a:1c:
4c:d1:fb:7f:36:94:14:6a:b8:9d:a5:0e:21:78:f7:
e2:ec:7f:da:69:72:2b:cc:a7:24:7c:06:64:55:e4:
30:6a:9f:25:f0:36:19:41:66:4c:86:79:88:65:2c:
23:e1:4b:11:b4:a1:53:7d:cc:16:8d:9d:08:03:3b:
fd:61:76:b6:f2:4e:3c:97:be:90:93:2d:97:7c:e6:
f1:81:cb:28:80:fe:ec:c1:76:ba:ea:68:83:37:2b:
79:d0:7f:63:09:57:56:e3:b5:2b:c5:a0:dc:66:76:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:C8:C2:18:1E:76:8C:91:81:A9:1F:18:B4:74:4E:04:6A:D4:7C
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0f:40:d8:44:32:8e:f8:2e:2f:3d:fe:8b:26:22:1b:b2:a9:
a9:47:e3:aa:ca:0f:d2:cd:63:8a:ed:83:80:5c:5f:26:d8:b8:
c2:37:da:4f:c6:01:5e:57:60:6b:57:a6:59:13:eb:af:44:d3:
10:92:39:5c:ea:ce:57:8c:5e:c2:c8:5b:60:5f:c0:94:70:43:
cd:70:87:df:26:98:4b:fd:bf:00:19:24:2d:57:e7:4a:e6:6f:
a6:6f:2a:e8:77:31:43:ae:5a:ff:8a:3f:3c:f3:13:cc:bc:ca:
bb:25:88:54:84:af:1f:16:76:eb:42:57:40:23:99:dc:9b:b3:
d7:0c:df:12:59:2b:cd:99:70:42:d5:92:ce:f9:e5:b0:81:be:
43:a2:04:4b:98:f0:d9:b5:8d:32:44:8f:36:cd:d0:19:fc:b4:
aa:03:ff:c2:09:5d:12:2e:78:8e:7b:fa:a8:3b:15:b9:75:c5:
8f:4a:ad:22:5b:c1:40:a5:a8:cf:0b:53:6f:c6:c4:8e:35:33:
2b:ac:10:77:06:7b:bd:6d:09:38:6a:af:72:bb:b5:d3:3b:2e:
75:f7:6d:f2:66:fd:25:d7:d6:cf:c0:71:53:e0:99:dd:c2:c8:
b3:13:c7:66:f2:22:ed:61:29:f5:37:fc:48:b8:4c:97:31:1b:
b3:72:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:14 2025 by rpki-client