Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: ohCkSxTSspzsx1z9O7HPRN+OEc3BfBMrkMMefat3R3I=
Subject key identifier: EF:F1:54:93:F3:33:22:1D:6C:9A:D5:A7:06:97:83:A3:FE:E2:BC:4A
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 019A4EF5BE7153D0BFA034BEC6D44419785E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0ED9
Signing time: Tue 04 Nov 2025 13:01:59 +0000
Manifest this update: Tue 04 Nov 2025 13:01:59 +0000
Manifest next update: Wed 05 Nov 2025 13:01:59 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: dsWh7L3MWUZKXglnsh+5LV5mSjGjnyCv0aPip5o+Q+k=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:be:71:53:d0:bf:a0:34:be:c6:d4:44:19:78:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Nov 4 13:01:59 2025 GMT
Not After : Nov 5 13:01:59 2025 GMT
Subject: CN=eff15493f333221d6c9ad5a7069783a3fee2bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:e0:20:0d:6e:98:09:77:1b:e0:c6:e0:e2:
96:21:37:3c:f6:f7:4d:6f:f5:0e:cc:33:9d:03:36:
2d:75:65:f6:90:65:d7:21:d3:d3:e0:a0:3a:6d:7e:
d8:41:a0:0a:e4:ea:49:41:22:6f:db:17:84:eb:35:
44:68:63:87:3b:25:b9:e4:a7:53:e7:07:f8:47:e1:
46:7f:7c:11:af:68:41:29:21:08:62:aa:e4:66:4e:
1a:d3:5b:3b:3f:e6:18:5f:4a:85:3a:9e:7f:ca:e6:
d0:63:8d:da:9f:b7:89:7f:3f:8a:b2:fb:71:3d:3d:
49:0b:57:cb:ca:62:29:9b:64:87:2f:74:e7:ae:d2:
eb:87:77:3e:8d:d1:37:75:b7:f5:a2:82:c5:6c:a1:
80:af:f4:c1:b9:f5:4c:20:cb:72:e3:5a:4a:fd:bf:
74:b6:d0:13:99:47:f1:88:70:80:da:21:94:54:a1:
00:c9:66:3c:99:c4:08:1f:f9:07:f2:3a:b9:db:34:
6d:6e:e5:3b:27:be:9a:d6:39:38:f6:0e:cf:77:76:
d0:82:34:1f:40:73:74:01:f9:58:6d:02:4a:99:37:
5d:cf:03:22:94:c1:28:2b:25:d0:06:42:92:ae:43:
ae:18:b3:11:a1:95:84:1f:32:34:7c:7f:1d:d8:53:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:54:93:F3:33:22:1D:6C:9A:D5:A7:06:97:83:A3:FE:E2:BC:4A
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e8:2c:4c:4c:1a:1e:d5:0c:23:f8:de:30:a5:c0:ce:3f:74:
f4:70:23:05:c4:b3:8c:fd:57:74:04:5d:57:e0:05:14:dd:7d:
ad:e8:98:ea:7a:86:b8:65:d8:99:e1:d2:e0:97:a9:63:ef:5c:
8d:bd:8c:a6:22:67:07:50:79:fc:f9:8e:1c:8d:5e:c7:dc:89:
81:50:e4:6e:1d:9b:e5:09:14:73:64:6f:2d:68:c3:89:27:3d:
70:5c:58:7d:c2:71:ce:0b:7e:69:3a:59:2e:64:b4:c5:3e:7b:
22:ec:c6:8f:4f:2d:9b:e0:52:6e:f9:ae:14:08:71:16:2c:7d:
5d:96:3d:8f:97:f7:8e:2b:f5:e7:b3:d8:22:20:ed:96:22:83:
d3:b8:87:f5:8a:2a:f4:1b:25:ac:a2:75:6e:cd:a7:be:00:ab:
63:0c:d2:18:1c:a9:bc:d0:f3:d7:09:59:7e:42:60:f8:e1:c3:
94:4c:7a:8b:0e:e6:f3:1f:bb:35:e8:dc:6e:11:91:2b:76:b9:
18:07:d3:b9:ee:da:c8:bd:83:60:1e:db:c5:ff:f1:ef:d2:33:
10:7a:2a:67:cc:36:d4:3b:e1:83:7c:9a:50:dd:5b:58:40:0f:
af:21:85:a5:f7:ac:64:95:34:99:4d:26:b7:28:47:be:0e:e6:
31:4c:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:02 2025 by rpki-client