Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: 9oHp/mA72rKsg6kt9MsJlxamEOR5DeuaTctW3dckRV0=
Subject key identifier: 5A:B0:54:C2:D7:EB:DF:6C:32:83:6A:67:5F:37:B8:87:75:0C:C8:96
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019A730127EE2CF6F7FFA0F8BAF2C42873AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 08B1
Signing time: Tue 11 Nov 2025 13:00:46 +0000
Manifest this update: Tue 11 Nov 2025 13:00:46 +0000
Manifest next update: Wed 12 Nov 2025 13:00:46 +0000
Files and hashes: 1: 0_BivZleQqQTDIIA1zuJgrTZcsU.roa (hash: 1e4TcEyXBttiFq9j+bwnnfrMc5xlrfiEhLRAJpiXu2M=)
2: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: 6pr1An6m8we5pZot2mQ/W/Lfx7XIrNMg54E9NPgcvwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:27:ee:2c:f6:f7:ff:a0:f8:ba:f2:c4:28:73:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Nov 11 13:00:46 2025 GMT
Not After : Nov 12 13:00:46 2025 GMT
Subject: CN=5ab054c2d7ebdf6c32836a675f37b887750cc896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:bf:4f:ca:c3:5a:8b:30:1f:88:0a:a1:e4:
af:21:7e:18:3d:26:e6:10:d7:c5:cb:89:9e:30:cb:
0c:66:8f:23:6b:fa:51:e8:1e:a1:87:8b:3b:70:4f:
35:b8:58:a5:9d:cb:e6:8f:1f:47:db:40:5f:f8:36:
45:52:9b:93:62:0b:ee:0a:9b:c4:6f:c0:07:7e:ba:
99:08:ef:27:37:58:94:88:ea:6d:3e:f8:bf:2c:8a:
3c:60:d9:42:0d:81:f0:02:8c:11:e2:35:e1:af:73:
b5:8e:85:91:73:89:6f:ca:18:be:5b:76:d0:e9:98:
66:28:e9:2c:e9:e1:55:08:0b:1f:ce:2d:f2:85:46:
97:e8:83:97:c1:d3:42:89:d6:40:4a:b4:56:9d:59:
e6:74:30:83:27:9b:ea:9e:5b:07:82:f6:3d:79:f4:
70:59:ad:c3:0b:cd:fd:c3:d1:86:f5:91:24:5d:e6:
3a:93:1a:63:5b:54:fc:d8:73:0d:a9:91:67:ce:a9:
77:3e:2c:41:53:ab:1c:f0:65:3c:b3:ce:97:fa:87:
88:ef:5f:d8:59:a4:3a:dc:89:1a:33:47:5d:24:74:
b5:7c:02:9b:aa:9c:6a:11:a5:42:1f:e2:73:7d:24:
f7:d6:f5:48:69:06:bf:0c:0e:ce:9b:1e:26:56:15:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B0:54:C2:D7:EB:DF:6C:32:83:6A:67:5F:37:B8:87:75:0C:C8:96
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:8f:8f:e6:eb:28:9f:df:98:cb:18:cb:01:31:78:34:28:
f5:e2:ff:81:76:e8:85:fc:f2:89:c0:46:dc:89:be:22:d8:93:
d8:ca:5a:bf:03:8e:42:e1:3e:b9:76:cd:00:b6:06:7d:af:de:
87:63:3c:f2:31:98:2e:e8:28:e6:7c:80:32:5a:6e:35:97:76:
dd:8f:05:c0:9f:a9:eb:57:06:e4:b2:8b:71:d7:75:dc:3c:f3:
f5:84:02:4f:8d:29:9f:fe:ca:6c:48:39:4d:bc:52:0a:25:19:
cb:3d:7f:f3:e0:57:d4:da:47:43:2b:40:4b:a8:31:67:ba:d6:
82:bf:61:c7:be:c1:2b:a6:34:67:7e:0e:db:d5:24:6a:7a:53:
d6:9f:c7:de:8c:72:61:77:5f:c3:4b:c2:7c:8b:48:18:4f:c9:
e3:e1:10:25:8f:59:5f:32:0d:d9:6e:ca:3d:60:af:9a:90:91:
f4:f9:c0:23:e6:a2:2c:96:91:e7:52:97:ce:ff:d2:d3:24:7a:
e9:4d:68:61:91:88:85:cc:df:da:8d:05:d3:af:87:da:8c:41:
df:3f:de:bd:a1:99:5e:03:13:4f:a4:49:f1:37:66:35:0d:fd:
a2:f3:b8:cc:96:38:86:3e:23:46:65:97:9b:8a:08:91:6f:14:
6f:53:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:19 2025 by rpki-client