Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier: UIfHddCuDu+NQ+WKoqrdMYh7xRrSEIAoXoA6SbAW4ks=
Subject key identifier: E5:28:88:CA:A2:E5:32:2D:57:31:BD:F6:A7:7A:AE:0D:A4:59:FE:34
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial: 019A4DAAFDCCCC09922A9EA99526D275B2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number: 02E6
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: eshEq4uoDAOCLQxhGOevTajChO5IWeUeEhkX1SUEChM=)
2: nD2FojKO7bGyMYSc_km6FxF9OQw.roa (hash: MJthcbFLTQ4qYvaISXw/LfG3ni1OzmPoLMDcwKerRhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fd:cc:cc:09:92:2a:9e:a9:95:26:d2:75:b2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=e52888caa2e5322d5731bdf6a77aae0da459fe34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f4:2d:2c:9f:92:7b:64:81:f9:f1:74:af:44:
25:4d:7d:70:b9:90:a5:6c:5c:d6:b5:f1:99:66:c4:
34:87:16:35:72:6a:4f:ab:d0:aa:af:ce:43:41:65:
6e:85:a5:8d:81:44:6c:e6:a5:c5:fc:76:9e:04:23:
63:19:d3:01:13:82:3e:e1:69:22:86:1c:83:c4:63:
eb:61:e9:c8:c4:6e:10:f2:6d:93:80:d4:0f:21:29:
f1:6c:6b:d0:12:0a:01:18:08:41:d9:64:cc:2e:7a:
51:17:2e:9f:14:6a:32:df:ba:75:f4:a9:6b:81:77:
42:02:34:6a:24:75:ee:14:10:8b:68:0b:9f:b6:f0:
8c:78:5f:b4:db:d7:da:f5:5b:4f:c5:f9:a3:b8:fd:
3c:d2:55:ee:df:9b:98:2e:0f:88:d2:11:8e:10:a2:
bd:bc:c7:56:85:05:27:0b:83:ad:d5:fe:5e:15:7e:
4b:15:76:35:2b:69:9a:6a:42:0a:da:ab:79:3a:92:
f1:82:28:60:23:7f:a1:e8:6c:e7:21:5c:b9:b2:46:
9b:f7:8f:8a:94:2a:46:96:3e:27:39:f5:9a:f6:cf:
7a:33:be:ed:2d:b6:2e:69:29:3d:1a:86:f2:13:bd:
11:67:4e:1c:38:ae:bf:ef:59:4f:aa:4b:df:1a:14:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:88:CA:A2:E5:32:2D:57:31:BD:F6:A7:7A:AE:0D:A4:59:FE:34
X509v3 Authority Key Identifier:
keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f7:97:7f:b1:f0:f2:c6:21:0d:4f:8d:66:63:1c:d2:ae:e1:
1c:be:5e:91:ab:5e:bf:e0:37:65:a3:e6:f7:26:ab:25:91:16:
dd:52:6d:29:03:33:3f:12:1e:35:c7:79:d9:2c:81:fa:27:43:
b8:64:ef:f3:d8:1d:f9:1c:15:b1:d5:0b:4f:c7:2a:29:97:d5:
9b:7f:7a:8b:c3:5e:4d:cf:54:ab:2e:fd:d0:0e:e3:18:79:c1:
49:0b:43:a0:c5:db:73:14:0d:58:aa:bd:0d:c3:c4:4d:be:6b:
54:30:87:70:ec:2f:3d:8e:f6:4b:82:0f:65:26:38:2b:bd:f6:
19:6b:d9:e5:02:f5:47:dd:09:eb:dc:7f:d5:e6:72:e5:3b:fa:
40:9a:61:1b:c6:f6:62:71:ec:b1:42:ed:fd:4c:f5:b0:b2:52:
63:8d:36:0b:27:7e:2b:a6:71:01:1b:b1:fb:21:06:d8:34:cd:
e4:37:8b:cd:92:f1:0a:66:f9:c7:96:42:7c:22:f1:94:5f:40:
1a:16:9f:7c:be:24:ae:c5:63:6f:d0:94:2a:68:1b:26:78:3c:
7e:5f:99:22:b7:14:fc:59:fa:20:8d:b4:47:8a:f6:af:8c:67:
1d:4f:f2:fe:98:36:04:e8:87:5f:b1:01:8d:ac:54:d5:53:ea:
58:91:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:57 2025 by rpki-client