Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: ZWlL9Ki0TOb7/ZWeW2IdZ+U49GICwl7PnMN+NPlHS9c=
Subject key identifier: 12:94:49:65:17:3D:6E:E9:03:1C:EF:98:44:20:B6:D9:13:1A:77:F8
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019A71B82ECC47C16C90F43826EAB6FE3CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 06F3
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: XRaVtHMUjNop3osrQWzvtnwPv7LDZguxvMlJLz5TzxQ=)
2: l-5i9oAqkZlj6BH6-zlLgCi-M8A.roa (hash: 2XZCzXlEs8Y4V/FtjrmGLpKeYJtdxgukjLa0vF1G5q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2e:cc:47:c1:6c:90:f4:38:26:ea:b6:fe:3c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=12944965173d6ee9031cef984420b6d9131a77f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:61:2a:22:9a:44:32:f0:b6:43:3c:0a:90:
70:44:90:0b:2f:0f:7a:3b:72:25:9c:2b:c6:aa:0a:
de:a0:25:64:69:6c:07:f2:ab:fc:dc:11:64:57:ec:
89:13:bd:06:8a:b4:7f:21:2e:d3:eb:62:d3:56:ff:
59:68:34:a5:68:f3:e6:9f:43:30:b5:fa:65:78:81:
b2:c3:dc:11:39:93:9d:e7:f2:66:58:c9:3d:df:b3:
a5:66:91:7e:b8:43:38:72:0f:4b:b9:91:c8:ad:69:
db:c8:ce:1c:85:8e:d9:2d:5b:bd:0e:4b:3f:c6:ec:
2c:6c:3d:2e:9b:0b:d5:1b:76:a7:c0:9e:50:e3:5d:
b1:27:35:57:50:fe:e1:14:76:e7:53:2f:89:c6:af:
23:72:be:9a:41:09:85:03:7b:93:7b:84:b5:08:48:
75:55:6e:cf:5f:14:79:f8:cf:fb:92:c2:c2:a3:aa:
f1:43:53:3d:e9:85:df:49:91:5b:8d:76:76:aa:04:
df:62:59:63:5d:e1:d6:e1:65:41:55:47:61:b9:c7:
10:f4:60:e2:9a:ad:17:26:ce:6b:21:b0:e9:2d:c8:
e8:eb:1e:ad:17:b5:77:56:91:fc:b5:04:46:5c:56:
4f:21:f1:4d:3d:a7:d3:71:eb:4e:01:26:24:cb:d4:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:49:65:17:3D:6E:E9:03:1C:EF:98:44:20:B6:D9:13:1A:77:F8
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6f:a6:f1:99:f8:f7:9b:b0:64:8b:29:9b:fb:f5:03:0c:28:
32:84:f5:1b:71:57:fe:77:fc:05:6a:2b:12:3a:6c:7a:d2:70:
24:02:73:f2:b8:00:ff:ee:f4:c2:97:48:3c:ba:b0:57:62:ff:
43:49:a5:90:7e:f2:ee:2d:22:5c:83:b4:cb:6a:fb:1a:69:d9:
ba:32:a6:1a:2e:4b:85:e1:7e:c4:0e:24:fd:e6:ad:45:79:58:
15:9c:82:bf:c0:b7:5b:06:b7:23:1a:a0:c6:a1:e9:f9:a7:e4:
85:3f:b2:7f:f4:75:59:45:8c:36:fb:eb:ce:77:e7:03:ab:5f:
bd:89:bf:50:3a:ee:f9:c2:e3:37:a1:7b:eb:47:a2:5b:bc:b7:
83:6f:ce:04:25:2b:7f:d7:24:f9:f1:5e:80:bd:b3:47:57:7a:
d8:5c:a9:9a:9a:9c:aa:e2:11:f0:f5:99:27:92:df:1b:ea:1a:
45:77:e1:dd:61:66:b8:4e:9e:97:61:b1:50:22:c6:4b:87:ab:
52:3f:1e:d8:40:da:f1:a8:7e:44:50:61:03:6d:7b:30:ef:79:
af:50:6a:24:2c:06:b0:ed:75:45:bd:f1:36:36:a5:45:04:fc:
31:e2:13:d3:a3:6e:53:f4:93:ec:a2:40:ad:9d:bc:b9:f0:58:
18:f5:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:51 2025 by rpki-client