Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
File: UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft (raw, json)
Hash identifier: 79qIsmyk1yMD4pDnR1Kdsta3b1NMjZPJck7nxY3c37o=
Subject key identifier: CB:49:79:5B:01:6F:64:E4:72:E4:8A:F5:A4:56:AC:7D:8B:37:30:FF
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Certificate issuer: /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial: 019A7225CA80309DF0FEBFCDD5DA5E10B045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
Manifest number: 1053
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: EmZGnE3cUctL2ReH5qcX6e_cHZA.roa (hash: /paSeXdGSN8xOjhTUDVjgnMls/gfanO98AsFxJF7eNA=)
2: UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl (hash: MLlU/E2ZaofKG4ejIOgJgAo1xEnGZS1jHF4Ry6Nx81Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ca:80:30:9d:f0:fe:bf:cd:d5:da:5e:10:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=cb49795b016f64e472e48af5a456ac7d8b3730ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:b1:ae:31:de:c0:4d:99:79:4d:77:8e:ca:
b9:8d:13:08:54:f1:ca:1a:7f:07:01:7e:3f:15:13:
b4:d5:7e:ee:cc:64:ea:4c:23:74:f2:11:e9:7c:50:
60:80:7d:0e:c2:e9:51:30:87:50:ad:35:33:f1:63:
02:52:ff:d3:40:49:2c:e8:41:3e:dc:7b:9a:9a:14:
d7:93:4b:b6:9c:71:eb:1a:9c:9e:6e:a8:d5:1f:d7:
31:c8:e4:f6:ce:c9:e6:6c:47:b5:c5:db:8f:21:4f:
35:f0:42:df:e5:4b:22:4e:b5:e1:51:18:c8:07:f5:
b1:92:1f:a1:57:14:b5:08:a5:d1:15:3b:a7:40:d5:
3a:17:cc:50:1e:51:01:3d:cf:05:15:9c:23:91:eb:
89:86:cf:28:67:a7:f9:2b:9f:dc:06:37:bc:9c:3d:
f4:40:b6:c5:3b:e4:18:d9:e1:16:d1:42:8d:0c:26:
6a:53:ba:8c:39:67:09:7d:7c:39:da:00:37:56:c7:
2e:16:82:6c:af:f4:c7:32:f6:a5:5f:22:d4:a7:e5:
16:4b:59:b0:c3:61:cd:77:41:44:d9:35:57:4f:1a:
b1:75:62:6f:ae:dc:12:08:a8:e2:5c:18:0c:52:24:
ff:d8:9e:1e:61:65:4b:72:84:e1:36:21:a4:03:74:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:49:79:5B:01:6F:64:E4:72:E4:8A:F5:A4:56:AC:7D:8B:37:30:FF
X509v3 Authority Key Identifier:
keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e2:84:23:bf:5d:2c:e9:b4:7f:4b:a5:03:25:0d:d4:80:f9:
92:27:2e:f5:a4:b1:83:b7:a2:13:a2:39:4d:c1:5a:7a:02:c4:
79:20:96:b6:d6:6c:bd:d7:dd:02:86:72:67:2b:43:2e:26:5c:
da:dd:bc:2e:d8:ec:2e:b4:3a:14:75:8a:ad:c4:c1:c3:64:c0:
f8:5d:be:65:8e:41:7b:4a:38:43:f9:78:5e:11:01:24:c1:d2:
ec:a8:e1:33:74:26:88:8c:ad:86:92:5a:ef:1b:16:6a:6d:c6:
8f:9b:35:6a:6e:2b:66:2f:d5:78:25:2f:2e:39:11:d7:2a:34:
ff:42:47:41:ce:d4:3d:af:2f:57:a6:84:db:00:6d:6b:ea:22:
be:f3:8e:48:c7:d4:f1:34:17:c7:f2:77:c7:ee:d6:5d:c5:64:
ed:0c:61:ce:80:d2:5f:f0:f3:75:45:b8:52:23:16:db:80:d9:
e3:12:a0:7c:ca:cf:c2:4b:08:7c:4d:b4:e8:de:1a:85:8d:10:
8c:69:61:a4:65:9f:44:a8:97:06:bc:fd:cd:80:83:c8:24:72:
35:87:dd:53:5b:b7:f9:15:60:e8:e8:9d:81:5f:d3:22:03:89:
e7:1c:4b:14:29:bf:a6:6e:df:83:37:6c:f1:d6:bb:b5:0a:fc:
92:99:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:30 2025 by rpki-client