Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File: UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier: zLotDC7nLAd2fLtQ8bdfy4enUcUNbUvdQhFesVZj/Hw=
Subject key identifier: 29:9A:0C:81:2C:03:FF:E8:8F:25:75:7F:99:F5:34:34:59:C7:F4:5F
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer: /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial: 019A4D3D179F9DA205BBC29D5BAB9EF6F9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number: 16EF
Signing time: Tue 04 Nov 2025 05:00:40 +0000
Manifest this update: Tue 04 Nov 2025 05:00:40 +0000
Manifest next update: Wed 05 Nov 2025 05:00:40 +0000
Files and hashes: 1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: UfK7efjwBdvoyRyRHOaHb/K4Tm2Wc9IZjSHEJWVFmVI=)
2: kBzABSrJTYuMHuIB-cAWqOKOwxo.roa (hash: Xo9goahQUE24SfaWYUzhm7qDfthcz3m4/YrZsayav+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:17:9f:9d:a2:05:bb:c2:9d:5b:ab:9e:f6:f9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
Validity
Not Before: Nov 4 05:00:40 2025 GMT
Not After : Nov 5 05:00:40 2025 GMT
Subject: CN=299a0c812c03ffe88f25757f99f5343459c7f45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:50:08:c7:84:ff:33:a6:8e:45:59:b8:a3:
e9:01:c0:a5:6f:fc:23:2e:5e:c8:28:13:45:49:4f:
91:38:44:df:6c:e5:14:11:6b:25:57:5b:55:86:d3:
b0:9b:b5:02:e1:ad:aa:9c:3d:03:a7:23:5e:6f:45:
92:b4:7e:31:a4:a4:a8:75:1f:31:94:7a:a1:47:4e:
5d:78:be:22:aa:d8:74:cb:35:8b:22:cf:7b:21:f9:
28:20:f8:2c:54:e8:ec:e4:ac:7a:dd:a2:80:12:09:
73:df:e7:0b:18:63:72:c5:2c:fe:d6:23:c3:41:ed:
28:b0:e1:3c:a8:49:7d:e4:f7:8a:71:3d:b2:fe:48:
71:30:19:2b:f3:2f:5a:84:0f:b2:e7:cc:49:eb:a1:
93:a7:df:fa:e5:f1:bb:c8:76:38:10:b6:d2:00:5c:
38:51:ec:2a:7c:f2:5c:f6:cd:77:53:da:f9:53:73:
22:aa:52:44:e4:4e:f8:b4:84:16:cf:a1:2d:1c:34:
9b:d0:80:75:27:8a:52:07:0d:99:d7:fd:53:33:a3:
03:09:96:02:ee:80:93:c0:27:43:6d:1b:50:fd:4d:
8d:e3:ef:53:10:a8:02:6e:8d:57:d1:0d:b7:7a:34:
81:41:ec:f0:77:a2:84:3e:9d:4b:46:e6:c4:bb:19:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:0C:81:2C:03:FF:E8:8F:25:75:7F:99:F5:34:34:59:C7:F4:5F
X509v3 Authority Key Identifier:
keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2e:90:e9:42:43:31:1e:db:fc:3f:8f:7f:94:db:2d:bd:12:
e9:6e:61:0b:02:4d:83:27:21:48:4b:99:10:96:9b:81:7a:f6:
62:09:99:2e:b7:c1:2b:03:f6:84:a9:62:67:c3:30:ab:d8:e0:
b4:88:31:74:61:5f:c6:cc:f0:4e:de:ca:4d:7b:13:67:0d:27:
77:d2:54:a9:d8:fc:42:54:94:46:8c:91:4b:e1:23:44:df:40:
23:65:81:15:6f:cc:7c:87:70:79:d2:52:94:5a:83:5d:e8:db:
ac:4b:25:c5:b2:63:9a:0c:6c:07:e2:70:f0:1c:d3:48:a7:30:
4c:62:39:a7:67:12:25:74:cb:99:f4:d2:bb:c2:54:89:20:bd:
fa:6d:db:8c:9b:cb:aa:1d:62:be:4c:a6:0e:b7:65:1a:89:a6:
97:da:40:e0:c8:0e:f9:a2:4a:2e:18:b2:1b:c5:c9:2a:fc:30:
9e:5c:f5:a4:da:56:22:b0:1e:36:80:24:4f:0b:1e:75:0c:d2:
dc:6e:5f:ec:4c:5f:92:cf:58:a4:7e:f7:48:2e:1e:d0:dd:78:
e1:8a:b1:63:50:fe:b6:01:bb:28:e4:ab:b6:78:46:18:25:13:
43:68:a7:fe:7d:c6:a1:39:99:4d:94:53:b2:d2:50:74:99:4c:
df:f9:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:23 2025 by rpki-client