Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File: UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier: Obs/DMS6aCCOH5kR8rzAZNSvvYe1J8BtttR0bOYetss=
Subject key identifier: 20:8D:2F:C6:91:00:0C:A7:58:47:BC:9D:63:62:9E:6C:1D:4D:47:74
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer: /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial: 019A24AEAF36157FB631F64A929C8367C609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number: 1047
Signing time: Mon 27 Oct 2025 08:00:19 +0000
Manifest this update: Mon 27 Oct 2025 08:00:19 +0000
Manifest next update: Tue 28 Oct 2025 08:00:19 +0000
Files and hashes: 1: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: b9oUV/v3/n0OtbIAIapbGY0VmvszO1pz06XKKhdxosc=)
2: a7WXMgAx0WN70jOmPA_ZHtAqrZ8.roa (hash: S6bbeU5Csf/O2Nyy+w5nuCt2wnvpiGasWshn5o3uk0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:af:36:15:7f:b6:31:f6:4a:92:9c:83:67:c6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Validity
Not Before: Oct 27 08:00:19 2025 GMT
Not After : Oct 28 08:00:19 2025 GMT
Subject: CN=208d2fc691000ca75847bc9d63629e6c1d4d4774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:57:e6:a3:b4:6a:a5:4e:d4:97:89:ad:5e:
d4:b3:8c:99:ef:ec:a4:80:c3:3c:8d:1b:2b:94:09:
38:ab:6a:27:bf:81:17:8d:17:03:56:16:db:a2:29:
b2:1e:8c:6d:fc:52:a0:2e:60:c6:9d:25:b4:1c:f2:
21:f7:1a:66:c5:55:16:37:6e:6c:76:a8:8b:9e:b9:
49:c6:7d:e8:c4:80:34:78:15:6a:be:31:4d:fd:b5:
3c:48:3a:ee:c0:c8:67:00:8b:0c:83:87:d7:c1:86:
84:f7:73:c4:3e:f2:8a:2b:8e:94:1f:05:aa:c2:dc:
b5:77:ce:eb:0f:ef:24:c8:b0:35:19:bc:30:da:f6:
73:67:27:0e:52:5c:50:46:59:a8:a2:77:d2:55:2c:
75:ec:4a:e4:78:86:9a:75:7c:fb:4d:15:92:80:f8:
ea:39:08:56:50:cd:27:4c:20:ee:44:ef:be:c9:a5:
35:40:08:a2:f3:e1:5a:a2:61:19:b7:60:a2:a7:89:
63:c4:48:6a:de:b3:db:4c:28:f2:47:fb:6a:c5:65:
39:cf:78:90:52:74:f1:7a:f8:3c:13:07:8d:e4:f9:
91:ff:45:a8:6f:54:32:16:4c:62:50:b5:d9:fd:f0:
41:53:af:54:3b:e4:42:20:04:0c:11:a7:60:0b:89:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8D:2F:C6:91:00:0C:A7:58:47:BC:9D:63:62:9E:6C:1D:4D:47:74
X509v3 Authority Key Identifier:
keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:de:52:d3:3d:2c:c9:24:e7:a7:21:cc:98:64:91:f5:f2:e8:
18:cc:2c:af:c8:94:8e:9f:ee:16:ea:c9:98:2e:dd:d8:0d:f8:
2d:5d:4e:b7:88:51:bb:12:5f:68:ed:7f:cc:97:c9:6e:63:9f:
4c:50:44:c1:00:e3:6c:e1:67:68:ed:14:91:23:8d:11:47:07:
e9:16:74:b1:44:d5:a1:22:52:e7:3b:f0:93:08:64:e8:eb:ac:
77:b1:9e:8a:53:71:0b:4f:2b:07:48:e3:26:78:f4:e1:ee:d9:
80:dc:de:ce:2f:0e:0b:0c:d1:a4:f8:25:57:73:55:9c:bc:b7:
54:28:73:fc:cf:d2:ab:6a:bc:90:26:a5:f0:21:d2:14:a7:99:
4b:f7:43:2d:4f:21:27:e9:91:0d:14:a7:59:92:24:25:13:13:
7d:51:f6:0d:50:bc:b9:41:25:f4:21:66:94:9f:cb:e5:bf:bc:
26:48:10:80:ae:ab:95:be:7d:68:b4:e1:63:2e:73:c9:85:48:
1c:38:f3:37:b0:8b:e6:39:ba:ae:27:4f:fd:cd:51:03:5b:60:
dc:06:24:be:22:52:5e:3d:32:e6:ed:b7:d7:10:c7:60:2c:88:
3c:7a:90:c0:ba:ba:68:17:44:9b:7d:a7:b3:b4:51:17:95:f7:
49:84:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:47:17 2025 by rpki-client