Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: GO2NXpqzHHMdad4EC+pnsvjky/1q/7ZgOj/VElUhf6U=
Subject key identifier: CA:2A:CC:27:F5:B7:2E:5F:8E:E0:80:3E:4A:BF:4D:60:61:CB:C5:A1
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 019A4E86A71C70C238BE33B7E02F7AF74A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 0F14
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: 2oBhtrzReTYx96K9wY7jLHz/Z2iMe7bzcoWY500oGAQ=)
2: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (hash: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a7:1c:70:c2:38:be:33:b7:e0:2f:7a:f7:4a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=ca2acc27f5b72e5f8ee0803e4abf4d6061cbc5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9a:ee:e6:9e:19:fb:5d:7b:f8:d8:03:f5:11:
29:ee:3c:d0:2e:0c:73:b8:e9:5e:57:3b:3a:82:90:
6e:b0:22:85:02:3d:f7:d3:32:9e:a5:c1:bc:53:74:
5b:fc:2d:5d:b4:dc:83:ad:42:64:ca:b8:d9:10:bc:
b1:69:48:73:91:b3:e6:69:c0:ef:80:d9:40:f0:50:
18:f7:51:d8:f7:40:fa:ad:f0:20:bd:fd:5d:9f:22:
d7:a6:8f:82:08:76:df:29:12:ef:e5:2f:cf:66:14:
3d:81:09:7a:74:fc:3f:3a:c5:f7:6c:62:d7:69:fc:
d5:00:d2:e6:91:5b:64:1f:f8:ed:24:f7:66:47:47:
d1:37:b9:92:78:18:83:66:0a:fd:5c:e6:aa:fa:e6:
ba:40:6b:fb:f8:ac:25:62:85:7e:5d:a0:b8:0d:34:
bb:0c:c9:1d:2a:44:aa:f5:1b:6e:38:67:3f:82:c6:
1d:d1:98:02:2b:15:45:56:00:96:75:9a:4f:c9:a5:
34:72:0c:e8:3b:9f:00:42:89:28:79:30:2b:57:87:
61:5a:6a:55:28:80:fb:39:90:36:d5:21:8e:d9:77:
5e:d4:35:03:84:06:c1:02:2e:ab:ad:a2:b1:9d:83:
66:03:89:cd:9b:b3:eb:8d:5b:dc:92:98:86:b6:f7:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:CC:27:F5:B7:2E:5F:8E:E0:80:3E:4A:BF:4D:60:61:CB:C5:A1
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a3:e3:0e:89:cf:e8:a7:96:ce:ee:2f:c5:71:47:55:fc:1a:
31:df:99:b0:5f:91:fb:42:11:d0:a4:13:0d:00:de:b0:9f:c1:
63:e2:79:f8:d7:26:3c:d4:a4:86:5e:37:40:9c:22:ba:66:71:
f2:a4:e2:07:42:e8:6d:96:5b:5d:5e:36:bb:ac:10:0d:d5:6d:
4a:ab:6b:6f:e6:a2:34:7e:e0:32:19:6a:b5:8f:d2:7e:bf:51:
90:9f:65:50:21:c3:58:9b:e8:6b:14:da:7e:e9:2f:b8:48:6f:
68:6e:90:47:aa:04:d7:90:10:99:a0:61:0a:51:1a:31:19:fc:
51:8c:02:e2:70:99:15:e7:e4:36:05:0d:72:49:36:3e:57:de:
78:a4:08:80:be:78:61:e3:fa:7a:08:aa:d8:53:74:96:df:75:
95:bf:2b:d8:85:6f:70:e1:c0:43:47:70:af:15:13:6f:f8:55:
87:9a:38:5a:e9:92:ab:42:9e:9c:86:de:58:3e:66:24:af:eb:
4b:8b:67:c1:a2:41:37:a5:39:de:a0:d3:96:29:a5:b8:b0:fa:
cf:e3:ec:2f:ca:bb:09:3f:51:a1:c9:97:6f:c2:35:1f:3f:78:
63:ac:c4:72:da:61:78:ec:b7:a9:ed:21:02:56:a3:c8:7d:6a:
61:aa:93:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:01 2025 by rpki-client