Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: ACIFwqjYl91vaGPpafbX1S6Dt3oC4LVhxVRbrobk5ac=
Subject key identifier: 28:5D:37:A1:BF:D6:9E:F5:04:B0:CA:B8:AB:2B:7B:0B:7D:23:7A:B5
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 019A5075063831C5E1846D22FBAD23CAE17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 09DA
Signing time: Tue 04 Nov 2025 20:00:37 +0000
Manifest this update: Tue 04 Nov 2025 20:00:37 +0000
Manifest next update: Wed 05 Nov 2025 20:00:37 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: sJabQuQTin2V/qzrZ0nwq5nxFE3yIeFwF2FVmkMj00o=)
2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:06:38:31:c5:e1:84:6d:22:fb:ad:23:ca:e1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Nov 4 20:00:37 2025 GMT
Not After : Nov 5 20:00:37 2025 GMT
Subject: CN=285d37a1bfd69ef504b0cab8ab2b7b0b7d237ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:13:26:e9:90:f8:13:70:4c:bd:f5:79:72:
f0:ae:de:6f:47:bc:ef:44:e2:27:ef:fa:e2:3d:35:
43:68:6c:39:c5:23:2f:db:e5:13:dc:5d:4f:e3:7c:
f9:6f:57:41:5c:37:de:39:65:5a:89:69:bb:35:82:
0b:b9:e7:8c:76:cd:be:4f:69:14:89:0e:77:ae:a7:
38:80:c2:10:3d:e0:6b:e4:8f:16:c5:c6:68:0f:19:
44:1d:be:a4:e2:1e:4b:f6:32:1c:bc:83:f5:cf:18:
0e:35:a2:74:8a:49:a7:ad:43:19:19:82:c6:df:42:
c5:2a:e6:11:a5:bc:b7:9e:31:fb:0f:60:43:e2:80:
26:26:be:82:0b:19:cd:26:ea:0c:48:58:d7:ec:02:
e3:aa:85:7a:4e:a0:e8:34:c6:10:a7:f2:05:bc:e5:
a8:96:df:cc:01:27:a9:83:8d:fb:21:dd:db:01:b5:
86:13:b4:56:db:56:a1:b3:06:5a:bc:93:58:da:a0:
ef:fa:34:b9:51:a3:d8:a4:39:c8:8a:aa:dc:cd:43:
f4:6f:d2:94:f3:b1:6f:92:fb:23:cc:00:f4:17:92:
f2:20:a6:a1:53:b7:c0:49:b9:1a:ee:6c:ce:ef:19:
cb:09:0d:a3:4a:7e:88:86:7b:d0:73:d3:e0:32:6b:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5D:37:A1:BF:D6:9E:F5:04:B0:CA:B8:AB:2B:7B:0B:7D:23:7A:B5
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e1:87:00:2f:aa:4e:d6:b8:93:ed:ab:9c:de:c4:54:56:56:
eb:6e:19:bd:f4:b5:0b:a4:09:9e:5f:a9:39:a9:94:7e:5f:db:
c0:f8:e5:44:9d:94:dc:b9:32:74:4f:03:32:fd:64:d7:d4:2f:
ad:ba:a8:04:2b:6f:98:41:69:32:26:cb:40:d3:e0:b9:76:9a:
b5:bc:ed:b9:de:0f:2f:bf:b5:41:a0:77:1d:d3:a6:fc:06:a6:
a7:91:ca:24:0e:64:43:77:64:d0:77:90:b8:15:e4:35:83:1c:
50:a8:dc:60:c9:1a:f8:7f:a8:ac:93:e2:07:77:59:c9:42:59:
96:50:ac:97:f0:87:32:25:0d:6b:bc:5d:8f:83:0b:25:aa:5c:
5e:e5:24:73:c7:1e:b2:69:bd:d7:2c:ae:f1:60:01:b5:59:59:
75:70:37:15:20:6b:61:c1:7d:68:3b:cd:fd:20:63:d8:ca:98:
4c:53:2a:0b:a0:93:f7:3a:de:64:2e:2c:f7:b5:a8:fd:89:50:
2c:9f:9f:57:fe:fa:b2:c2:fc:fd:24:2f:99:95:6a:21:1d:32:
0a:5f:45:39:c6:e7:48:f3:fa:13:7a:99:71:e4:ee:05:07:b5:
a9:d9:2d:fd:22:f2:e9:a5:55:8a:a1:80:3d:31:0c:68:5d:b0:
ea:2b:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:50:51 2025 by rpki-client