Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier: eexTPlthsKbXx3QIxOSlFCRx38tUg/RvhlRiNkgwPlY=
Subject key identifier: 80:8C:A9:24:65:DF:5E:D8:0C:C1:4E:7D:39:92:E3:B9:1B:A4:AA:77
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 019A4FD009B6594F95CCBD1DB8AA1C311E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number: 13F1
Signing time: Tue 04 Nov 2025 17:00:25 +0000
Manifest this update: Tue 04 Nov 2025 17:00:25 +0000
Manifest next update: Wed 05 Nov 2025 17:00:25 +0000
Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: 8pyFyrOuRdIiJLpKUIOhtC+X53voKUCufbdmJlSTrSw=)
2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:09:b6:59:4f:95:cc:bd:1d:b8:aa:1c:31:1e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Nov 4 17:00:25 2025 GMT
Not After : Nov 5 17:00:25 2025 GMT
Subject: CN=808ca92465df5ed80cc14e7d3992e3b91ba4aa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:8e:d8:0a:e5:fb:23:ab:3a:d8:b6:33:74:
eb:55:d0:e4:41:20:ae:ae:94:89:c4:22:56:f6:a7:
8c:cc:4b:7c:51:35:fe:61:ee:a4:36:21:30:ae:33:
13:8e:e6:0a:fb:95:d1:62:43:09:1b:b2:82:c4:08:
a4:2f:8d:15:11:6c:a0:21:35:42:2a:35:34:fb:8f:
c7:aa:c6:1e:52:e5:76:2e:44:ad:13:29:95:0d:d5:
dc:ec:e8:df:73:ab:44:a0:45:81:56:d0:c7:1a:9f:
7b:62:5e:35:50:aa:5c:51:10:15:26:bd:2f:86:4a:
01:0e:d8:55:16:91:0d:0f:1f:68:ca:19:d4:97:b4:
7d:3d:f0:63:65:cb:57:3a:78:2c:1b:66:ad:fb:c3:
d7:42:78:de:2e:0f:ff:35:81:82:e6:bd:60:de:b3:
f7:43:63:8d:1a:1c:63:e1:27:b3:c3:a7:60:a0:28:
27:28:2a:13:a6:4e:7d:f2:2a:9f:ad:15:7a:53:c7:
f0:37:a2:1a:77:65:b1:f8:cc:84:4d:0c:46:e1:0f:
6b:36:b2:fd:c5:86:5e:8c:2e:fb:ad:0b:41:11:00:
cf:c2:89:a8:c3:5c:01:4d:d9:33:f8:f7:c8:53:8f:
4c:05:65:3d:4e:42:9a:16:9c:8f:c2:6f:55:f9:54:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:A9:24:65:DF:5E:D8:0C:C1:4E:7D:39:92:E3:B9:1B:A4:AA:77
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8e:c1:f1:46:24:4c:c8:c2:88:88:10:53:cb:1f:36:9d:ca:
b6:3e:42:d0:04:8d:6b:ea:42:fb:4c:21:cd:3a:a6:9e:13:e3:
a6:ca:db:9b:66:99:29:36:91:e1:78:31:d6:03:70:f6:1b:61:
4c:79:5c:52:87:50:f2:7f:fb:19:2e:ac:02:17:f5:ba:88:40:
d6:76:d1:f2:5a:8b:12:7f:19:c8:f2:3e:43:ce:d5:b3:5f:e2:
32:40:7b:cf:1a:ad:10:7b:5b:24:e2:3c:c7:39:42:ca:90:11:
5a:22:47:fc:13:c2:74:48:2e:27:dc:d7:f3:53:d7:f1:26:ca:
39:ec:a2:5a:3d:cd:cf:a0:68:95:94:c3:02:a2:59:e6:80:e0:
65:40:af:03:ee:95:e4:65:c0:46:00:df:af:c0:e1:49:33:03:
f8:37:30:9a:40:ed:1e:0b:34:dd:86:b7:2a:5b:6f:33:db:76:
11:b4:43:aa:2a:62:c4:77:e5:eb:04:62:05:47:da:fc:70:a6:
90:eb:d5:16:34:0c:c6:18:8a:de:2e:6e:9c:30:7e:9d:fc:66:
4b:d6:b3:6e:a5:3f:9e:15:49:aa:1e:5b:31:e0:f1:8e:59:58:
42:eb:0b:8c:e5:86:2f:94:1e:ca:25:76:a1:d7:53:9e:0f:be:
a7:67:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:19 2025 by rpki-client