Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier: qJVrTeUDr50YUyP0kF3M+oLO7eMjgiB8N3L+9SBdxYY=
Subject key identifier: 48:D3:57:E6:1C:E9:FA:49:72:AE:BC:0C:60:5C:E4:20:59:8E:00:E7
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial: 019A71B7AF2C3ABDBB01DABE1EB7F554AE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number: 0947
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: KNoYaoBmBEq+yUIsZgviEfZ7EqqqvloLfZkl/ADNdBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:af:2c:3a:bd:bb:01:da:be:1e:b7:f5:54:ae:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=48d357e61ce9fa4972aebc0c605ce420598e00e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:bd:02:91:1a:ef:1c:51:75:b8:b6:20:6f:
10:1f:2f:1e:1c:f2:79:45:52:11:c9:84:90:cc:c2:
5b:56:d5:2e:82:05:44:61:e0:10:30:d4:44:23:19:
c4:b1:6b:e3:e2:3d:66:c9:b2:96:90:2e:2d:00:e6:
17:91:8c:0d:1d:6e:25:79:81:fc:36:06:49:d4:2a:
e6:fa:46:b2:d8:85:6e:32:d8:a4:86:c0:cd:e4:f5:
d1:65:9c:13:62:0d:8d:94:e7:cc:51:2f:e2:eb:13:
19:db:b7:36:4a:ad:93:d4:ff:ce:6f:6f:f5:4c:ee:
f2:9b:c2:9d:aa:ed:5c:e3:0d:43:de:8b:bf:14:4f:
a4:0b:13:42:60:53:2c:6b:c0:24:e1:a8:21:7a:de:
dd:d8:82:29:06:0f:1b:f5:f6:3d:82:2c:3e:21:a9:
a6:dc:17:f9:be:d2:c2:a4:0a:ea:f9:ae:3f:34:39:
ed:70:c5:2f:a6:d7:ff:b9:29:dc:8d:5f:8e:4c:fa:
dd:6b:b9:56:de:65:3c:11:88:0b:c1:1d:99:62:97:
d1:c7:07:5c:b6:d9:6e:15:c7:1b:31:67:c9:e5:4e:
d0:9a:31:5d:27:d0:38:af:0b:d9:ee:51:dd:76:e9:
59:af:c3:8e:59:13:cc:85:c2:0f:b6:4e:97:ae:93:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D3:57:E6:1C:E9:FA:49:72:AE:BC:0C:60:5C:E4:20:59:8E:00:E7
X509v3 Authority Key Identifier:
keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:88:6b:20:70:2e:ee:2a:1b:50:ab:29:09:c7:bc:c3:09:
92:5d:b6:f8:a0:3b:54:1d:03:d7:68:38:00:98:b8:b6:cc:45:
2b:d0:8a:b8:81:22:db:b6:ff:fe:e4:6d:29:93:0e:76:45:55:
cd:ad:f9:dc:bf:14:0e:7c:52:d3:cd:8b:ef:7b:94:0a:f5:af:
a1:36:46:95:c1:55:91:64:12:04:f5:da:ab:b4:7e:79:57:30:
dc:28:ee:6e:47:0f:8d:1d:de:ac:3c:78:4e:5f:fa:30:8e:82:
25:fc:05:a4:98:c4:85:9c:85:c3:f0:d0:18:76:82:a3:dc:d4:
1a:7a:4a:d2:f7:f9:60:39:1f:b2:96:ac:48:68:52:29:d0:1e:
2d:c3:df:50:32:0d:65:ef:cb:69:24:90:43:31:c2:d8:e8:56:
78:e3:7c:28:7f:d7:11:85:07:e4:b1:12:6e:93:11:ea:d3:e1:
ba:1e:ce:04:62:2e:8d:d0:9d:d8:cb:49:53:a7:20:95:22:63:
b3:45:a5:9a:bd:04:e2:eb:5e:65:e0:5c:bf:99:4b:de:0f:2e:
fb:f6:d6:30:49:06:1d:5e:7c:82:4c:6f:89:24:16:eb:3a:22:
98:be:e3:4a:63:29:d8:f9:d5:76:1a:61:4d:b2:fa:83:05:e1:
60:22:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:26 2025 by rpki-client