Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: GQqAbLpP0w1A6PMOib9d/tKAFmQLBTligB23mRd27Q8=
Subject key identifier: 07:3C:11:09:0A:F4:B4:B8:0A:91:6E:21:23:5D:7F:11:7B:5D:27:FC
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019A228A0F420B0AFF43745476C25DCA768A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 101B
Signing time: Sun 26 Oct 2025 22:01:04 +0000
Manifest this update: Sun 26 Oct 2025 22:01:04 +0000
Manifest next update: Mon 27 Oct 2025 22:01:04 +0000
Files and hashes: 1: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: saTRlaMbmMR/UTrRtVDThBDTAuyD+jCkF302CWg9Sqc=)
2: bo7KO9XdD_Urskdk1n4Bj-fW4fs.roa (hash: ubQY2gOF+3dPO6O676JWntfiT2uJ103t4smlNmiKGh4=)
3: w9MEWUoUc8xZKY1er3NSZNyKi7U.roa (hash: POwTU/L0ZyJ5NYemVS0exc18aJZvc21A0g3ouxix4G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:0f:42:0b:0a:ff:43:74:54:76:c2:5d:ca:76:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Oct 26 22:01:04 2025 GMT
Not After : Oct 27 22:01:04 2025 GMT
Subject: CN=073c11090af4b4b80a916e21235d7f117b5d27fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:08:eb:f9:e8:59:6c:d8:9e:02:f6:06:a2:
10:6f:be:4d:ad:b0:f0:0d:52:7f:02:03:12:db:e6:
66:f9:2f:26:ed:54:83:39:29:08:7a:21:a1:1d:9a:
d8:4c:f4:7d:67:b9:44:86:61:e1:3b:f1:c2:e9:92:
01:83:d5:4e:ee:08:56:fd:cf:b9:ee:6b:6e:08:6b:
ba:ae:11:d7:f3:00:c6:8a:92:69:5e:10:43:54:02:
d5:2b:2c:5f:5b:c6:3b:7a:e1:d9:3d:da:77:08:41:
8a:9e:4a:c4:73:ec:80:a4:1c:9a:da:89:5b:9c:d6:
3a:cc:c2:eb:4e:44:cc:60:f3:b2:e9:e7:05:ee:d5:
49:f4:c8:8f:84:a3:c8:db:3d:6c:1a:5f:24:f8:00:
61:9a:8f:76:cd:73:a9:20:be:06:2f:bb:c8:fe:b2:
c9:6f:8c:d4:86:b8:85:bf:e2:cb:d9:d7:ba:c4:18:
d7:72:80:e9:11:9b:f1:7f:8f:2d:c6:17:b2:0d:89:
9b:5e:c2:35:84:74:10:c4:61:e0:50:02:1f:a6:9a:
08:08:b9:30:7a:f1:5c:9c:50:1e:bd:8d:c2:17:53:
fd:3b:b9:9c:55:9c:ae:f0:96:08:ef:57:36:71:3f:
5f:85:b5:9d:68:20:6f:bb:09:e3:b9:06:4b:3b:50:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3C:11:09:0A:F4:B4:B8:0A:91:6E:21:23:5D:7F:11:7B:5D:27:FC
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:14:a1:9c:82:41:1c:6f:62:ef:bc:dc:60:34:e4:21:b2:ad:
c1:8f:22:13:cd:f0:fc:56:55:5b:bf:2b:a9:cb:ee:2a:06:15:
4e:16:7b:46:c4:9b:c8:c5:f0:7d:43:ee:2c:b7:86:66:b8:d2:
5d:83:24:ac:e9:1a:fd:ed:64:72:8d:bf:b5:3e:a8:28:be:89:
97:22:41:20:9f:5c:81:65:4e:47:af:07:85:2e:77:34:c5:af:
17:6e:2a:eb:ad:95:67:9e:d9:ab:2b:3d:97:04:93:47:b8:6a:
0d:e3:60:37:9b:34:7d:0c:e9:f0:4a:0a:14:1c:89:88:ec:ad:
44:d3:18:af:a6:eb:ce:38:22:2c:a5:5b:43:12:6a:99:5d:0b:
32:c3:7d:9b:23:71:7a:7f:24:18:ea:64:77:5e:9f:2a:70:15:
a8:55:1b:50:5f:54:1e:f2:4f:65:6f:76:ef:10:47:ff:f4:6f:
dc:c5:de:31:64:bf:c6:3a:21:96:ad:7e:07:cd:1c:5a:c0:e3:
1f:26:4e:04:01:bf:06:da:f3:5e:6c:f4:ff:9d:26:5b:fd:68:
18:1e:32:b7:b3:39:c7:9d:c8:af:15:bd:c0:e5:2f:b1:2c:67:
ec:36:2b:3d:6f:a8:8d:7c:6c:e7:4a:8a:de:c9:38:09:09:1f:
e8:e1:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:28:01 2025 by rpki-client