Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: XXG/6cm9zQJddmR9bCmeraRyWToa+tzTsPO93e9cKUg=
Subject key identifier: 35:CC:19:BB:AF:1F:AC:81:4A:E5:9D:95:D1:07:AF:4C:6B:50:FB:7D
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019A71B815EB6E4A709CDB9B6BF30C22679A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 1346
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: E_VTiATzUgc2DhxvquhHUq4XjMM.roa (hash: QY5XIJ7ljEf/JGfsfFT7Yois/7EOyZU9vkUnS75efNE=)
2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: 1SrahHAFiIEdrGUVPqsd7uKsEcfLLyOr/hgoNu/l6UU=)
3: wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (hash: 4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:15:eb:6e:4a:70:9c:db:9b:6b:f3:0c:22:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=35cc19bbaf1fac814ae59d95d107af4c6b50fb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:6d:84:f4:96:92:3e:7b:93:53:76:58:7d:
c3:6f:5e:8f:e0:f1:cd:26:63:15:05:7c:40:06:cb:
49:64:3c:bf:b7:2a:3f:f7:83:95:f2:93:74:eb:2e:
43:5a:63:cb:26:89:3a:59:64:8c:06:9d:02:10:a0:
dc:43:fa:8f:82:80:52:7f:bb:1a:a3:08:68:6b:69:
e3:00:21:27:a8:be:10:d7:38:05:a1:cb:89:57:95:
76:57:a9:fe:b5:46:d9:a1:f2:2f:12:d4:d2:af:60:
09:1e:ef:9c:74:06:8e:f3:f1:a9:1b:bc:c5:fa:cf:
d8:ae:db:80:0a:68:0e:c0:4a:28:7d:61:14:68:92:
e9:47:a0:05:44:e5:d5:d8:ae:0a:e0:13:47:a1:bc:
c9:3e:b5:a1:dc:04:fa:42:70:7a:cb:9b:c3:41:bc:
36:9e:72:cc:52:d0:c2:25:25:ac:fa:a6:e9:89:86:
51:62:55:62:a7:bc:98:64:6f:22:42:bc:a2:9f:11:
be:c5:cf:d6:df:bb:71:b1:c4:dc:28:e6:72:b0:6a:
9d:5b:ac:8a:e8:72:0a:15:12:1c:d4:6d:ec:10:95:
2b:db:dc:df:b2:a0:48:d9:26:45:83:e4:8b:b9:17:
db:08:52:a3:ce:1e:d2:a7:fc:c6:94:2e:e0:e9:4c:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:19:BB:AF:1F:AC:81:4A:E5:9D:95:D1:07:AF:4C:6B:50:FB:7D
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d5:73:79:37:14:67:af:51:5d:d2:3f:11:75:94:d3:2f:33:
fe:dc:07:81:bc:9b:00:b7:47:5c:7d:04:4b:dc:16:91:70:9b:
d5:79:69:58:da:cf:3e:1f:e4:ad:26:32:cc:1e:9f:e1:c1:25:
52:c2:18:18:56:d1:e1:73:dc:34:e5:31:a2:a1:00:d2:b6:99:
48:ae:48:d7:c8:26:9e:fb:b4:8e:50:d4:91:c1:1b:30:8b:58:
9a:95:6a:e7:c1:e4:e1:7e:05:39:ed:5d:b4:bf:92:85:54:74:
0d:c1:84:d6:e3:dd:e1:a7:3f:06:15:cc:89:d8:8a:5a:23:95:
e4:6c:dc:17:1c:54:99:4d:b5:5e:80:e6:1d:e5:a0:95:2c:3d:
2c:b8:df:78:3d:3a:fc:ab:42:82:ae:ce:e7:7f:c3:8f:36:95:
af:2d:83:95:d9:3a:24:b6:42:a7:f1:f2:9c:ff:84:2b:c7:02:
cf:da:d4:3d:a4:07:c8:8e:9c:76:90:bf:0c:8e:38:88:67:ec:
5e:ad:29:bc:bd:aa:fb:40:b8:9c:84:ae:b0:dd:de:27:ba:bf:
13:55:20:a0:8d:61:bb:f3:00:d6:b6:1d:f5:4e:da:80:cb:7b:
70:5a:f4:97:12:f4:51:84:ea:37:f5:8b:d2:1b:d1:c4:95:18:
00:86:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:30 2025 by rpki-client