Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: Yd5G2HMMHDrBuRcgyM3WrpWmeDmwCooo4+TaPLLWG28=
Subject key identifier: BD:CB:30:35:EE:4E:B1:55:73:DC:2B:C7:86:12:3F:85:57:04:76:F4
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 019A52D19595234583531E7383EAF5E1FF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 1459
Signing time: Wed 05 Nov 2025 07:00:58 +0000
Manifest this update: Wed 05 Nov 2025 07:00:58 +0000
Manifest next update: Thu 06 Nov 2025 07:00:58 +0000
Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: cDCTFD3nOfkx6CBa+QV5lCgfhjFgUcb1vUktWo3wcMg=)
2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:95:95:23:45:83:53:1e:73:83:ea:f5:e1:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Nov 5 07:00:58 2025 GMT
Not After : Nov 6 07:00:58 2025 GMT
Subject: CN=bdcb3035ee4eb15573dc2bc786123f85570476f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:cf:77:65:6e:a0:c3:4d:ad:c5:a4:c9:ae:
82:f3:94:6d:36:31:d7:44:81:2d:5e:af:ca:2f:34:
fa:68:ca:04:94:a1:8f:d8:e4:e2:5d:13:48:81:cf:
e6:8c:3d:aa:69:93:8e:bb:f6:c9:be:6e:e7:80:1b:
9b:f4:a3:b4:d7:4e:1f:08:9e:0a:64:87:21:a0:0c:
df:3c:95:d8:38:51:02:b7:5b:ef:19:0a:26:09:7f:
fa:f8:dd:f8:f7:52:f5:ed:a6:4c:6f:46:00:57:42:
32:b5:29:3f:d1:6d:a5:10:15:6c:f5:cd:30:53:e2:
d0:d9:f2:f7:1b:fe:ef:6c:1f:a1:51:14:49:50:88:
c5:7f:ae:74:49:84:ad:a0:21:32:df:7b:bb:d6:15:
12:99:43:86:c1:d6:56:e4:dc:87:ba:85:db:2a:21:
3a:7d:36:ec:f9:3a:63:7a:7c:04:74:5e:41:57:90:
6e:9d:97:72:76:52:3d:22:21:4a:28:a6:8d:cf:3a:
63:50:22:af:b1:a2:ab:52:ea:82:78:56:bc:d9:b1:
b2:0e:35:81:db:4a:0a:5d:e5:69:b5:5f:d6:1b:49:
aa:d8:37:db:d7:84:88:fd:f2:e4:59:23:5a:1e:7c:
75:45:01:49:9f:80:c1:d2:0c:6a:0f:20:43:05:30:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:30:35:EE:4E:B1:55:73:DC:2B:C7:86:12:3F:85:57:04:76:F4
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:55:8a:cb:ea:10:79:f2:83:45:8e:cb:63:01:8b:a7:82:80:
a1:86:ef:74:89:e8:25:12:71:3e:a8:5e:01:5a:a4:e2:34:65:
4e:c9:97:2a:b7:5f:c5:83:5f:cd:51:55:66:b5:8e:00:df:87:
df:83:95:38:82:92:70:58:f3:7f:5d:fd:d1:56:1d:cb:a5:a0:
a0:db:bf:1f:2e:29:fa:61:31:2e:86:f6:0d:d2:aa:87:ff:96:
bf:93:90:b0:9a:57:2d:09:30:b3:5b:c6:73:d4:86:03:25:0f:
1a:89:19:36:4f:96:25:94:80:70:ad:1c:bb:bc:23:ee:25:0a:
d9:65:19:59:61:e8:8b:3b:fb:08:a0:f7:ca:b7:78:42:28:0e:
ac:3b:06:b1:9a:3d:6d:43:a9:30:42:64:2e:d0:f4:dd:7d:60:
fc:81:65:63:67:c1:dd:fc:86:ce:68:90:df:91:63:1f:05:c6:
39:a9:cd:ab:08:75:d1:b5:5d:f3:fc:7d:c0:d9:55:94:97:d5:
a8:0c:b6:8e:5f:30:55:1d:c9:9c:a8:4d:9f:0c:08:1b:55:38:
be:87:04:b9:92:df:af:2c:f1:83:d8:4a:1a:fe:2d:1b:7e:be:
a2:79:f9:12:77:0e:12:4d:16:f7:67:d1:22:ad:3e:49:62:c6:
3f:2a:e7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:29 2025 by rpki-client