Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: +raRWKwn7eCZH8RzlSQdB7lct3/DVZzuLxLfsA7wutQ=
Subject key identifier: 48:1B:A4:EF:02:60:B4:EA:A2:8D:A2:0F:35:38:B5:4D:D3:AA:86:F4
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019A2EFB738B489094E6096AEFE0DF024E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0338
Signing time: Wed 29 Oct 2025 08:00:22 +0000
Manifest this update: Wed 29 Oct 2025 08:00:22 +0000
Manifest next update: Thu 30 Oct 2025 08:00:22 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: pk91gYkxMZM3mN7WH+vdkbiFb90IcyOu62zz3Oi7GqI=)
2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 07:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:73:8b:48:90:94:e6:09:6a:ef:e0:df:02:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Oct 29 08:00:22 2025 GMT
Not After : Oct 30 08:00:22 2025 GMT
Subject: CN=481ba4ef0260b4eaa28da20f3538b54dd3aa86f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:3c:c8:33:fa:f3:ef:a9:2c:79:17:29:3b:
71:6a:72:ed:07:ba:0e:d9:d1:57:37:db:69:ed:f4:
50:e0:4f:20:7d:7b:fc:60:13:c2:b8:1c:a2:04:4b:
f3:4f:53:7d:77:d0:59:67:42:cc:77:29:62:ae:cd:
c5:96:fe:2c:20:57:89:a5:da:8b:79:a7:da:cf:55:
65:88:bb:ef:25:92:85:aa:86:a4:55:3b:69:77:80:
8d:a6:78:8e:8f:c4:78:d4:e5:f7:c1:82:56:73:84:
eb:89:23:83:ca:3f:7b:ea:c2:7d:67:0b:32:4b:2d:
bb:d6:cc:2c:d6:02:8f:86:82:06:3e:ec:f7:70:e4:
87:2a:d5:54:f8:6d:7f:94:91:07:62:64:30:cf:cb:
17:4c:1e:06:8d:76:ab:a3:ad:25:13:84:aa:54:d2:
b6:20:07:a9:60:97:54:77:28:26:55:02:11:b6:02:
48:46:70:f5:52:99:17:8d:8e:0c:f4:02:4e:57:fb:
5a:24:96:96:72:33:1d:d9:71:56:1d:1b:ec:2a:54:
07:99:e2:10:03:01:b1:f1:25:8b:9e:b2:90:5e:0e:
b0:85:a4:0b:ec:6f:38:92:46:e8:a8:13:46:c7:d5:
02:5e:ea:79:87:b5:15:78:2f:86:6e:a0:a7:97:cb:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1B:A4:EF:02:60:B4:EA:A2:8D:A2:0F:35:38:B5:4D:D3:AA:86:F4
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:68:97:1f:7d:b1:c5:20:f3:b3:48:e5:c9:c5:8d:2d:12:be:
ac:e3:fe:ff:9f:8c:4d:23:43:8d:83:da:55:c4:a8:50:9e:19:
ae:f5:9e:28:77:75:ae:4f:ca:b1:91:c1:78:3c:a7:59:68:d2:
7d:59:fa:dd:0e:d8:8a:f5:3e:f2:e0:04:73:5b:1d:6e:11:17:
3a:d5:4d:57:f4:d7:66:af:70:71:6d:0b:e6:23:d5:7e:36:bf:
79:91:9e:41:d0:6c:9f:c8:2f:4d:53:ad:7e:42:d9:e3:e1:53:
24:c3:92:c0:7a:db:19:74:d5:20:d6:e5:69:b5:eb:bb:aa:98:
91:b2:80:20:b2:a2:d0:f8:8b:54:e6:5f:16:df:fc:75:de:75:
a0:77:ae:ee:b5:ba:82:e7:d2:8e:85:55:3d:a4:35:c1:2c:11:
6f:b1:02:0d:ac:25:72:71:19:7b:b0:df:64:f8:a2:95:12:0c:
8c:15:de:ae:1f:51:36:be:11:c9:ff:ed:7f:32:48:6b:00:c4:
6f:d5:5c:1c:3e:e3:b6:87:57:2b:ec:d1:f5:f9:b8:67:38:87:
14:fb:dc:86:29:26:0e:3e:84:16:eb:7c:f0:7a:82:d2:f2:28:
c7:ee:c2:43:f4:76:96:48:31:f6:43:05:6a:cb:80:11:04:32:
3a:42:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:00:47 2025 by rpki-client