Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: QidxeZK24PNAVFI6rTNnn0ybC5RZnAiZa1y+1WKae/g=
Subject key identifier: 55:A1:5D:DC:6D:7B:27:B3:CE:B9:08:2E:69:9C:F2:B6:DC:08:AC:E1
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 019A153C01164BB13AE3C53E18B1D7B28767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 0E55
Signing time: Fri 24 Oct 2025 08:00:45 +0000
Manifest this update: Fri 24 Oct 2025 08:00:45 +0000
Manifest next update: Sat 25 Oct 2025 08:00:45 +0000
Files and hashes: 1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=)
2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: hfGNPKn3Z9nalUuURsz3/aGz72CXecieXfgQ+GEJ7Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:3c:01:16:4b:b1:3a:e3:c5:3e:18:b1:d7:b2:87:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Oct 24 08:00:45 2025 GMT
Not After : Oct 25 08:00:45 2025 GMT
Subject: CN=55a15ddc6d7b27b3ceb9082e699cf2b6dc08ace1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:97:00:3e:94:5c:3c:10:4b:76:74:54:88:
39:82:0c:86:58:6c:1e:30:36:fc:e9:74:66:67:a4:
06:78:dd:49:16:8e:68:6d:2a:1d:4c:a5:50:c9:cf:
df:f8:d9:10:b2:e6:3d:81:c0:3c:b1:fa:08:bb:d4:
c2:ad:ab:64:f9:fd:1e:84:ab:32:d8:0b:f5:06:dd:
e7:2a:13:00:20:61:5f:43:75:8b:d6:31:49:ac:e8:
05:94:91:2b:1a:a1:db:2f:cb:cd:88:f6:34:76:96:
21:b0:f0:a5:a4:14:e7:14:97:88:29:ae:e0:da:ac:
7a:2d:9e:0b:e6:32:00:cc:5e:25:6e:a1:28:22:2e:
e8:67:1e:00:26:8f:b3:18:89:31:72:be:c9:39:8d:
bc:36:ec:e6:03:d4:e1:f4:d7:80:a4:72:96:4a:aa:
c7:fe:eb:29:6f:7a:fc:a6:c4:16:8b:b4:5a:0d:46:
00:53:a6:f5:08:c2:54:7d:cc:00:7b:98:f7:27:35:
23:17:37:28:1a:a8:33:10:4b:9c:47:b1:91:33:c2:
bf:6d:7a:3f:36:88:3f:8c:a8:9b:47:0e:c4:f1:0b:
32:93:cc:95:40:f0:ca:d9:4c:24:99:8e:0f:47:b6:
67:9b:22:20:fb:bc:9d:cf:cc:d9:93:67:c2:1a:40:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A1:5D:DC:6D:7B:27:B3:CE:B9:08:2E:69:9C:F2:B6:DC:08:AC:E1
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cd:8c:48:52:ab:e8:ab:0e:34:f6:0b:07:09:8e:15:d6:aa:
7e:fe:ba:6c:18:25:be:6e:c4:a8:86:09:3c:f9:d5:58:cb:ed:
df:0a:01:01:49:80:82:13:51:6f:72:76:d5:84:1d:6b:2f:b3:
bd:a0:a8:bb:84:b3:77:83:f8:70:0d:69:81:7a:03:f0:1a:32:
cc:ab:e7:02:57:54:8a:96:ab:38:c0:d8:16:9d:e5:f6:5b:ec:
81:11:3b:f0:e0:3e:fb:07:ae:0d:ce:a1:e9:7b:76:ca:8a:9a:
a8:5e:5d:50:60:54:63:b0:41:f1:c5:5d:6d:64:3d:1c:c4:b3:
8d:bf:96:03:02:28:b5:06:66:a0:d8:54:a9:04:db:6a:9f:cd:
99:24:09:2b:72:8a:00:e6:60:13:6e:01:d4:12:34:f8:de:8c:
88:59:db:bc:85:66:c4:2e:59:62:18:3d:f5:1e:b6:43:1c:56:
52:fe:d5:fc:a3:56:8f:be:f7:9a:90:80:e4:d3:e4:ec:a4:a9:
d1:d7:25:0b:fc:93:ec:e0:a4:0e:e7:bf:c3:39:72:fb:12:2c:
07:ec:de:67:fc:56:66:88:52:9b:3d:4f:2d:e8:64:11:5e:2b:
d5:bc:3a:cb:36:27:b1:dc:f2:b6:ba:d6:74:6e:cc:a9:2f:04:
db:18:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:53:11 2025 by rpki-client