Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File: UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier: 5oLhhO1C/hEJA76MVKqBFH8Dx51P83WsFMBpg7ycifA=
Subject key identifier: 9C:2A:2B:6E:39:7C:2B:06:93:A3:10:9D:28:51:2E:7C:63:E2:34:E9
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 019A7293E5995EE174A11AF2805117B5BF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: 8xMxjtO-k2WYJj5fJmeVkGV5YA4.roa (hash: h2/dulkFhykUkX0igL56x6SI1vv2NsPZ43/9G+3BAxs=)
2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: nqRH20TUnQI8V18gd6t2z3OPWUZZw1E6nAu7xHvuwmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e5:99:5e:e1:74:a1:1a:f2:80:51:17:b5:bf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=9c2a2b6e397c2b0693a3109d28512e7c63e234e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:a7:6e:a3:7f:e8:cc:f0:66:24:7d:32:57:
e6:2f:c3:56:54:3b:c7:33:04:76:da:28:80:d7:bc:
e4:bb:67:8c:5e:1b:ea:78:05:73:1d:28:1b:4a:6a:
33:d0:47:40:12:23:8b:50:ac:d8:af:79:28:0d:5a:
6e:c2:43:47:42:17:b2:a0:74:d8:b4:ca:c0:0d:aa:
78:e0:ab:26:ea:12:36:f1:f5:4f:f6:ff:81:1f:b6:
91:9a:0b:09:dd:a0:f5:68:69:c8:c3:fb:aa:e0:76:
e9:05:d6:f0:eb:4d:70:d5:8e:cd:58:df:9d:a2:19:
4d:d4:32:48:ff:06:2e:08:04:a6:64:15:79:60:c4:
20:1c:7f:34:ae:00:35:8f:ca:80:b8:61:90:26:8e:
61:1c:01:ac:0a:86:3f:72:02:37:ec:a5:86:3c:df:
e7:19:82:e8:cf:99:6b:f7:98:a5:17:b9:20:a4:78:
3c:c6:30:89:e2:65:06:c2:79:d5:63:04:92:59:68:
89:8a:1b:1c:48:27:72:68:c8:23:8c:6a:7d:71:fc:
da:3b:17:21:75:fd:07:96:09:c8:5c:16:fa:37:93:
a1:bd:80:44:28:29:4f:7e:17:79:ff:e2:3d:d8:1f:
50:57:52:98:12:c6:3b:45:48:3b:7e:a2:44:04:c0:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:2B:6E:39:7C:2B:06:93:A3:10:9D:28:51:2E:7C:63:E2:34:E9
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:37:61:20:53:17:7b:36:50:8d:dc:ee:26:a5:a4:b3:ef:c9:
e8:81:a3:28:ce:f5:2e:1c:51:13:ee:59:0d:ed:d5:24:f1:d4:
51:9a:1c:91:86:47:8a:d6:18:b5:da:7a:80:64:e1:6f:38:6b:
b2:4d:a8:a6:fb:5c:64:ee:a0:74:77:7c:94:4a:77:d8:b5:c4:
64:91:31:87:26:06:07:ff:0d:0c:c4:a1:bc:59:70:12:48:6f:
28:1f:d9:58:da:0b:55:9d:9a:a6:30:5d:e0:c2:66:14:7a:7b:
c4:83:17:27:ee:79:d3:a1:62:c8:66:72:24:f3:f6:da:a9:37:
8a:5c:89:ab:00:8b:56:26:b1:08:a8:5a:3f:f5:26:95:38:78:
cf:7b:d6:61:62:5c:df:a7:b0:85:1f:77:35:79:cf:59:ee:6d:
e3:c3:dc:fc:19:9e:80:50:03:09:b6:d7:fa:64:20:b6:13:a4:
ab:94:34:cb:b0:82:0a:cc:cc:0c:0c:f0:3d:cc:12:90:42:ce:
50:b0:64:fc:6c:6e:b5:7d:43:a5:ec:ff:23:a4:45:dd:85:b0:
d0:c8:f1:52:a0:94:f3:9e:7a:55:f3:f0:d4:b8:30:32:32:7b:
f7:21:15:83:64:fb:ae:7e:5c:b5:c0:57:ec:74:20:79:c1:b0:
56:98:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:05 2025 by rpki-client