Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
File: ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json)
Hash identifier: 9KO4uUmQGQlKn52K+SYdkAgpo65yb2+5AfzbUMCs9yU=
Subject key identifier: 75:C8:01:A0:CB:9C:28:67:6C:CC:69:B1:6D:9F:05:12:5F:2A:20:3F
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial: 019A71B7B073862E47B6328967B60F101FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
Manifest number: 0C55
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: 5AZ3tR0kmtggSX8GQL0nk_9vkNM.roa (hash: o7jn9b/bWLBA/ntIWwkYzFbMhpkdc8Mhco9rAn9gsO0=)
2: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: 9PioCzkZvhnvnNVr/NWK/yy991pUIklrAeD9XTqn+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b0:73:86:2e:47:b6:32:89:67:b6:0f:10:1f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=75c801a0cb9c28676ccc69b16d9f05125f2a203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:96:57:cc:0e:5f:80:41:1c:03:6c:38:9e:
60:8d:04:c3:57:30:fc:5e:9f:d6:ea:ed:a6:a2:62:
45:6c:b1:0a:65:82:c0:7b:01:f9:7f:51:1f:0b:31:
9a:c4:ce:0a:57:91:f4:25:6f:75:67:62:7d:cf:65:
2e:2c:33:6c:73:db:8a:3b:0e:c4:19:77:2b:ed:87:
0c:55:dc:c6:51:37:57:7a:7b:eb:d5:d7:c8:11:ae:
e8:db:66:6f:10:75:05:44:10:76:56:00:9e:9f:82:
5c:33:fc:66:6d:2f:30:ff:f5:e0:2c:a0:f2:49:31:
11:43:b7:55:f2:e6:63:cb:bc:24:17:c5:ad:6e:1d:
da:20:52:c9:0a:f0:5b:f4:97:c8:5f:91:05:d4:12:
57:a5:a4:5d:70:30:2c:9d:78:e0:e8:87:4f:53:66:
a8:45:98:de:82:8a:a2:78:5e:49:ad:0f:be:5d:0a:
f8:3a:f7:99:6e:df:e7:28:98:9e:a9:25:4e:9d:4b:
c4:22:f7:78:c6:f2:1b:0f:39:99:00:cb:be:fe:33:
bb:9a:e5:3f:0f:88:e6:ca:3a:c6:da:a7:cb:76:7f:
d8:ba:9d:3e:f7:c4:3c:e2:51:c1:42:f6:de:af:f7:
88:3d:2f:e0:22:1a:98:82:a0:39:8b:bb:53:67:16:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C8:01:A0:CB:9C:28:67:6C:CC:69:B1:6D:9F:05:12:5F:2A:20:3F
X509v3 Authority Key Identifier:
keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:23:e8:37:a0:71:cc:e7:57:60:85:3a:c3:82:5e:6a:92:d0:
c9:bb:8c:90:7f:6f:c5:6c:28:25:c8:3f:00:e9:a4:cc:e2:05:
96:a2:74:12:d3:ba:7d:1c:c2:aa:37:a4:dd:d6:db:a8:53:05:
b7:d2:37:95:52:9a:ae:81:79:09:01:58:fd:ae:bb:36:c5:aa:
38:ec:14:47:16:e4:d9:9f:e8:8d:cf:ef:be:a9:4c:d6:75:35:
20:c6:4c:f9:fd:85:91:9c:e8:3a:2b:fe:21:fc:a9:30:d9:04:
be:fe:9a:65:f7:bb:d9:a3:b3:11:df:54:41:41:af:12:09:c4:
c6:99:54:26:e6:45:0b:13:8c:20:3e:1c:c2:28:85:fa:29:da:
c5:fd:ff:44:58:5a:bd:70:90:ab:81:14:04:f6:38:fb:a3:27:
0f:e6:3a:0c:0d:a1:60:62:02:d4:1f:71:3c:f1:8b:8f:f0:f4:
13:d8:2e:fd:ff:58:aa:64:4a:94:b4:5a:68:44:e5:4d:f6:0f:
35:d3:12:bd:f6:b4:95:05:86:88:8d:3d:52:d2:bd:29:8a:99:
0d:7b:78:40:c5:3f:ca:f6:f3:f3:e3:55:be:4e:4f:41:f3:fd:
35:c1:04:6c:87:df:14:ee:43:db:5c:ed:79:c9:78:f9:ef:73:
97:85:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:30 2025 by rpki-client