Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: 7lPumY2rpCWT5Cxp7rnkZp57RcOq1fO0bGgH4roHZHc=
Subject key identifier: 62:1C:EB:3D:57:CC:CF:17:DB:6F:C5:6F:29:20:E8:1E:AC:45:0C:7B
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 019A7149C1DC36DE160F1E6FC7C8C7C1E18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:50 +0000
Manifest this update: Tue 11 Nov 2025 05:00:50 +0000
Manifest next update: Wed 12 Nov 2025 05:00:50 +0000
Files and hashes: 1: 5BpJC5kfYpwnpQHv48KWy-JUppU.roa (hash: CrCPGt1FnNwvHaRxzi66Coran28PbWoZQZiC83vw/u0=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: 6bSAbwvzvqC0eDh0n+UNJ4wlLC5Cys0s7h5w1G96zSA=)
3: fGMhxat_aWV3hx3-ZEsjMXX_eos.roa (hash: okji5lN0mnnP4DUHwDGGfA4mpjSl7H2/JOP5GvkdRJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c1:dc:36:de:16:0f:1e:6f:c7:c8:c7:c1:e1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Nov 11 05:00:50 2025 GMT
Not After : Nov 12 05:00:50 2025 GMT
Subject: CN=621ceb3d57cccf17db6fc56f2920e81eac450c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:cc:1f:d8:33:16:a0:18:20:69:23:f1:c8:
aa:ea:98:65:3d:2d:37:c2:f4:2e:09:86:90:10:0c:
8f:9e:31:29:de:1b:aa:3f:b8:dc:37:eb:11:97:23:
1c:34:89:fb:0c:72:03:bd:a0:c9:d8:09:73:a6:4b:
47:53:b1:91:37:10:d8:e9:27:46:22:98:e7:1f:1e:
e6:01:35:90:f8:38:ec:51:61:ca:35:5e:ee:d7:9f:
98:08:57:bf:b7:45:c6:42:c0:03:4f:9a:0f:cf:2a:
e7:08:8d:6e:d4:66:05:08:b8:d1:58:9d:28:b8:67:
fc:2d:ba:39:7b:a1:20:43:42:4f:40:e4:f0:a0:d6:
44:70:2e:85:f1:42:23:9d:8c:34:d5:cc:f4:b3:23:
01:46:95:a8:b8:1c:41:09:a9:ad:78:c5:bb:54:75:
30:48:53:b2:fe:03:66:49:fb:08:85:13:b3:fd:26:
91:1f:3a:5c:f5:98:62:6d:48:cb:75:1a:40:b6:79:
68:ff:bb:04:8d:c4:16:38:d0:47:10:ff:85:75:4f:
95:92:be:c4:47:cf:88:32:d5:47:85:49:b2:62:ab:
43:b9:bf:fc:08:d5:69:e8:82:6c:83:95:50:f4:bb:
aa:cc:f1:89:c3:99:a5:c3:3e:49:e8:81:23:20:59:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:EB:3D:57:CC:CF:17:DB:6F:C5:6F:29:20:E8:1E:AC:45:0C:7B
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:61:2f:1d:12:12:9b:62:b4:70:c5:fd:b4:ec:a7:2e:df:2a:
e1:9e:e3:5a:e7:32:0a:9a:07:fc:50:5a:72:c3:3d:9a:57:4e:
d3:de:f0:18:84:eb:4d:90:e5:99:f0:47:1a:50:e8:a2:74:14:
38:e2:b2:35:79:c8:c7:6c:ec:66:36:0b:3c:07:6d:17:86:e8:
d5:ec:1a:1b:56:c4:10:6c:cb:17:12:02:d4:0f:78:1b:91:72:
21:08:8e:80:da:44:9c:c1:71:aa:2b:30:ba:59:71:1a:1e:f5:
28:25:dc:ff:29:e2:b9:d9:b7:72:58:8b:cb:c9:0d:04:d8:01:
5b:6b:54:e7:69:2a:5e:94:82:8d:11:e8:5e:b7:93:77:97:e4:
e2:1a:c5:9e:ad:cd:01:a4:1d:dd:d1:fe:1c:1f:34:2d:6d:bd:
10:d6:c6:04:03:e1:6a:a9:33:f5:bb:09:e5:da:4c:ea:a8:b8:
2c:97:5b:de:ab:20:a1:3b:e4:50:ca:62:9c:38:89:8c:3f:2c:
3d:99:a6:b9:a2:6c:5c:dc:ee:02:3e:47:72:3a:0d:c1:fc:ce:
13:eb:91:5e:66:51:44:16:7d:f4:50:af:8b:f5:99:e4:e0:2b:
9f:de:05:38:ef:7f:c2:de:79:10:e5:22:99:d9:75:0d:d4:ab:
0f:e0:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:47 2025 by rpki-client