Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: o+8/8u0GNtDdPiiwIYvpu2f0BRKxWOCR5FEEB5oYYUQ=
Subject key identifier: CF:28:F4:FF:8C:56:D9:4C:A3:60:DB:D1:4F:F3:CE:38:5D:60:06:8F
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 019A733893F4FC04A8E3476793125F7BCC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 11EA
Signing time: Tue 11 Nov 2025 14:01:18 +0000
Manifest this update: Tue 11 Nov 2025 14:01:18 +0000
Manifest next update: Wed 12 Nov 2025 14:01:18 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: unqaE6B5RmQenS+faM7ngIwoFIYmudSpCet0UO7V/yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:93:f4:fc:04:a8:e3:47:67:93:12:5f:7b:cc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Nov 11 14:01:18 2025 GMT
Not After : Nov 12 14:01:18 2025 GMT
Subject: CN=cf28f4ff8c56d94ca360dbd14ff3ce385d60068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:7f:94:cd:c2:c6:3f:d2:ef:73:5d:ed:7a:
23:eb:7c:b2:8c:77:26:19:56:94:5a:00:37:c9:11:
e2:d5:f5:6f:fc:af:5c:66:1a:9d:38:d2:7b:17:7e:
a5:ae:ec:44:6f:dd:a4:ff:eb:34:fe:16:20:8f:54:
7d:60:cc:2a:49:60:8b:ae:4e:f3:1d:bc:b7:7c:97:
f4:bb:33:e3:07:17:a0:7d:dd:6e:f3:21:c0:c2:45:
bf:0c:0e:f1:65:b0:9a:82:7a:34:2b:18:72:4d:98:
73:24:24:08:b7:0c:6d:ff:96:99:f5:4b:46:82:95:
2d:0a:32:bf:5b:af:f2:43:fe:12:bd:9c:f2:f5:12:
b6:db:15:a5:df:29:77:f2:2a:a6:95:97:9a:4d:96:
a0:f1:30:13:8e:db:bf:d5:a5:50:9e:09:cc:75:23:
07:95:5a:98:3d:7b:21:1c:3c:ed:aa:50:9f:da:07:
8a:96:34:f7:36:f6:04:e5:d1:c2:06:25:cb:cc:db:
4f:46:f2:43:2c:03:d3:1b:67:2f:c3:b3:00:df:cd:
ae:f2:4b:f1:24:b3:51:11:59:d9:2b:0b:a0:58:98:
99:1f:0d:0f:8a:a2:00:1b:dc:c7:f8:55:52:b1:57:
d1:d4:6f:e3:12:c4:4f:c2:46:70:a4:eb:15:bc:ae:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:F4:FF:8C:56:D9:4C:A3:60:DB:D1:4F:F3:CE:38:5D:60:06:8F
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:ce:29:31:f6:33:d5:87:01:f9:e8:02:61:1d:53:51:f6:
f0:5f:ed:2c:44:3c:f5:b8:29:6e:27:00:46:0f:bb:8f:52:bb:
40:77:d7:a7:41:56:b2:c6:96:30:de:3b:4a:07:6a:7d:14:aa:
eb:1f:13:eb:27:6e:01:69:c1:2e:5d:4b:8e:5e:2d:57:db:f9:
7f:9e:75:75:be:80:6d:fc:21:31:33:98:a5:d2:4c:fd:18:34:
09:b3:11:98:eb:1b:f8:74:fa:2a:25:9b:5e:03:8a:0c:af:1b:
32:69:c9:37:30:a5:a6:34:61:5f:7e:a6:f6:d7:13:34:30:82:
97:86:8e:0d:97:98:b8:9b:74:ec:86:b7:f1:81:40:47:7e:00:
06:22:f1:16:61:7a:ba:37:c1:31:0f:16:f4:8a:e0:b3:f7:90:
8a:53:76:91:8a:bf:40:39:33:8e:20:62:be:b5:c4:e6:9e:66:
9f:cc:57:f4:d9:a5:b3:78:80:0a:de:ef:34:83:d2:c9:df:ec:
61:05:70:b2:1b:65:f4:cc:cc:62:9c:98:cc:3a:ae:b1:9f:ef:
ba:da:da:d6:49:ac:02:ad:43:ab:39:7e:3c:d6:ad:56:d2:17:
76:47:2c:3b:c9:f7:02:ee:f1:2f:c6:8d:a1:90:4d:75:82:21:
7a:d5:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:25 2025 by rpki-client