Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File: Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier: zQ8T16N79E4FSURWF60WQ3gekX4vp6Kykz5yPdzXHXI=
Subject key identifier: FA:6D:54:D1:E4:B2:AC:EF:8F:3A:81:6C:FB:29:1F:AD:44:9D:7A:2B
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer: /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial: 019A730161147F498FA28ABDC9A328398B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number: 12E1
Signing time: Tue 11 Nov 2025 13:01:01 +0000
Manifest this update: Tue 11 Nov 2025 13:01:01 +0000
Manifest next update: Wed 12 Nov 2025 13:01:01 +0000
Files and hashes: 1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: j3qBUc0+u/OrHniyIYKwWZMRCb+K59Wslr3NDLMkqbI=)
2: xBgAFkKx8Hk3olxaNjWis5mQn98.roa (hash: P1KCvzISYpUAfpvA/Q/kzEUy3tIPC4wJ6UjU3FGpTJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:61:14:7f:49:8f:a2:8a:bd:c9:a3:28:39:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Validity
Not Before: Nov 11 13:01:01 2025 GMT
Not After : Nov 12 13:01:01 2025 GMT
Subject: CN=fa6d54d1e4b2acef8f3a816cfb291fad449d7a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:6c:f1:5c:fc:9b:d9:bb:51:72:53:ed:c9:
71:74:38:84:88:05:b6:8e:98:61:b3:f9:ce:07:41:
11:14:ff:9e:d9:4f:b0:bc:3c:d5:6d:1a:1c:81:fd:
17:d3:c9:47:a4:32:64:cf:c8:98:9a:a1:fc:32:fd:
2d:6a:0f:6e:7b:21:e0:ef:68:fe:5d:5a:6f:09:2b:
e2:90:df:ce:56:16:63:a6:80:f4:09:82:ee:78:4d:
82:a0:23:84:92:72:8a:37:a5:8e:50:1a:c8:3f:7a:
ab:77:27:6d:34:ce:21:e2:7f:3b:a9:63:9c:c6:a3:
d2:8c:b3:06:e6:4e:90:9e:15:9e:44:78:d1:85:53:
93:21:a5:92:6c:83:02:ba:8a:49:65:f3:cb:c0:10:
01:f9:af:51:92:ae:94:06:fb:f4:3e:71:9a:83:0a:
8a:d0:ca:9a:07:90:31:44:80:7d:3c:92:ea:7b:ae:
e5:1f:ec:8e:04:11:64:56:3a:2d:8b:0e:30:ac:c5:
65:9d:22:a5:de:23:aa:cc:49:dc:12:98:9c:b0:46:
9e:32:eb:32:27:35:1a:5e:98:f3:37:7c:1f:d2:48:
e3:b6:85:08:f2:0c:1f:45:d6:49:93:50:46:8f:3f:
1d:97:a1:a9:03:ac:61:b5:d2:04:3e:ce:91:4c:b2:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:54:D1:E4:B2:AC:EF:8F:3A:81:6C:FB:29:1F:AD:44:9D:7A:2B
X509v3 Authority Key Identifier:
keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f7:3f:f9:20:44:f3:95:55:53:bf:61:d2:08:9e:57:ef:28:
25:04:6f:82:f3:79:fa:47:35:2e:43:bb:f7:e1:a1:16:ec:70:
e2:a4:d4:0b:25:5f:1a:41:9b:60:bc:fc:92:a7:a3:4b:c8:de:
fb:92:3b:31:5c:bf:6e:73:48:50:c2:a9:b5:19:04:76:37:da:
a1:6d:3b:77:26:4d:c9:cc:85:73:27:27:cc:07:c6:70:c1:28:
b1:19:81:68:38:94:52:7d:df:8a:a6:4a:bf:11:b5:3b:3d:61:
59:93:83:50:99:4e:1f:0f:5e:67:3a:93:90:fe:76:03:31:25:
92:e4:e7:ee:ba:c2:2e:d6:12:b4:51:56:dd:49:07:83:cf:35:
27:31:78:6a:dc:51:0d:36:02:38:52:81:ec:76:11:c7:47:6f:
a7:6d:12:66:9e:a1:3a:6b:c0:e6:71:04:a7:fc:d5:91:a8:e6:
45:70:76:60:5c:4c:5c:83:2e:69:82:d6:8b:fc:6b:cf:83:ba:
0b:46:f6:b4:e4:b8:a7:0c:1b:98:55:11:11:a6:80:52:92:66:
e0:6c:b3:93:59:60:ff:8c:ce:ab:1e:cf:45:f3:0b:a8:cc:a1:
d7:74:88:5e:79:b5:a9:26:9e:a0:62:5f:ab:e6:e7:a9:dc:16:
74:42:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:19 2025 by rpki-client