Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier: hwlOFtmYNw7lyxTJSVPnT2nsVFz5D+g48cw6RQeX9ug=
Subject key identifier: 0F:AB:2A:5C:8C:36:FC:AA:8C:CD:E0:15:D0:10:76:42:E2:4A:78:15
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 019A71B8CA17C8AC11DBA6D9EBF2D8A96F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number: 08DA
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: KXcIKmgoikRwG9D3uUs7mJuDPf+n51Otf8ewDW130tI=)
2: Wz-CuiJfUzqRsGkKMc_PANgseeQ.roa (hash: Hz/DB1yX6TNALaQj3H9UXpc/xUp4S9JB/h6qum3wSrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ca:17:c8:ac:11:db:a6:d9:eb:f2:d8:a9:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=0fab2a5c8c36fcaa8ccde015d0107642e24a7815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:70:74:98:4b:61:10:96:e5:c4:b7:e6:a4:
95:cd:d2:1d:77:77:2d:1c:f8:b2:3e:e0:fa:ae:65:
70:69:87:5e:87:ae:ce:65:50:a8:bb:0c:15:e0:71:
bb:3d:74:2e:7d:51:a0:9f:e0:90:60:d9:62:7c:2c:
f2:59:32:a5:9c:5f:58:07:1f:48:d5:04:56:0b:56:
7e:6f:ae:3a:fc:34:46:d7:5f:fc:cf:55:7d:d2:52:
3d:1c:2c:1e:d7:70:22:67:bf:39:c0:2f:54:a2:02:
7e:08:bf:42:71:a8:04:54:97:95:3e:9b:4f:ad:54:
09:4e:f4:7f:85:95:d6:43:65:1f:65:bf:85:d3:5e:
44:e5:14:23:70:aa:5e:e7:58:f6:89:77:27:1e:0c:
6c:6e:07:65:6b:d3:be:93:82:26:ef:af:d4:6b:e6:
55:15:40:eb:f7:b3:0f:7e:da:54:ea:19:84:7d:03:
ce:0c:37:a6:c8:56:0c:53:81:8d:88:4b:60:d4:25:
7d:5d:54:46:2e:61:62:d0:d5:b3:ef:5c:f5:36:8b:
18:c8:40:fb:82:56:b1:f0:3e:d6:e5:5f:f3:03:02:
7b:1f:f6:45:4a:31:40:27:06:c5:31:86:e3:1f:e8:
d2:8a:7f:be:41:7e:13:f1:6a:99:72:27:24:f9:c5:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:2A:5C:8C:36:FC:AA:8C:CD:E0:15:D0:10:76:42:E2:4A:78:15
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bc:f8:30:e5:75:3c:a4:da:7d:7b:92:9b:b3:fd:dc:55:1d:
54:d9:8b:ae:51:8a:03:89:ea:84:87:49:ff:1d:66:00:1f:a9:
2b:bb:32:4b:72:47:cb:4f:d7:f8:25:90:76:af:8f:57:31:da:
f9:f9:75:bb:ca:7c:b6:fd:31:6d:97:d6:26:69:81:97:4b:29:
fc:64:04:2b:f9:20:63:98:0b:68:c7:1e:77:1b:8f:d2:04:8f:
6a:2c:38:68:2c:92:ee:24:8f:63:e1:c9:68:d5:93:4b:65:cd:
5c:57:83:57:73:72:32:6f:81:35:58:03:d3:58:a3:0f:28:a3:
a2:76:60:2e:43:98:23:2d:f7:01:06:7e:25:25:03:dc:3a:20:
a1:57:8b:05:21:30:a3:cd:27:6b:31:70:76:f3:d8:8f:82:da:
44:42:1d:9d:35:cf:14:04:43:3f:cd:2e:ab:5b:e9:22:f1:72:
ae:ff:95:6d:fe:ef:08:54:d2:97:7c:4b:38:12:75:a8:99:06:
f1:56:e5:d1:08:1e:8b:ce:4e:7b:ff:09:44:f9:0f:e2:8c:10:
3c:9f:4e:ad:b9:e3:bb:cd:62:41:fa:88:c8:fe:30:b3:20:78:
fa:1d:42:0e:b3:1c:4f:37:64:2d:89:79:73:f5:ab:e0:b2:b9:
6d:ea:93:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:18 2025 by rpki-client