Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: jvORlBylfA2juq6VSLGtCy+jq4547Xzse4YwmemwRrw=
Subject key identifier: 24:6F:2E:0B:40:38:5F:D0:51:39:9D:7B:2F:86:A5:19:7A:D2:2B:EF
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 019A503E1BA842A365777C4DF0529A05E7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 145D
Signing time: Tue 04 Nov 2025 19:00:38 +0000
Manifest this update: Tue 04 Nov 2025 19:00:38 +0000
Manifest next update: Wed 05 Nov 2025 19:00:38 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: qrVfFdwNyATtPUY/4NoQpL86Q5GnQeCsGyPgE+tgp58=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1b:a8:42:a3:65:77:7c:4d:f0:52:9a:05:e7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Nov 4 19:00:38 2025 GMT
Not After : Nov 5 19:00:38 2025 GMT
Subject: CN=246f2e0b40385fd051399d7b2f86a5197ad22bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:73:14:21:42:00:2d:35:c3:05:73:c3:b9:
24:5f:f0:5f:bc:96:c2:a4:12:73:30:e6:02:04:71:
a6:a0:c8:d0:26:35:a8:0a:cb:7b:92:7c:79:3c:44:
41:ed:f8:7e:1d:70:e3:42:df:63:c3:16:9b:d4:cd:
83:07:d3:6e:62:82:20:0c:a0:92:ef:09:b7:41:c8:
b5:21:bc:9c:e7:df:04:51:ec:b5:15:39:42:1c:74:
c7:60:06:91:d0:5e:e6:60:d4:6d:9e:23:06:a6:0e:
74:71:ca:3b:73:b0:17:2f:d2:cb:4e:f6:1d:d6:2b:
01:24:01:5b:dc:ae:ab:a7:5f:e8:09:5b:f3:28:22:
7e:e7:cf:70:48:59:4d:ae:b6:1b:a2:f7:e8:cb:c8:
1f:f4:7e:24:95:86:36:90:df:c4:7e:31:e8:92:a9:
04:59:3f:fb:58:f8:b6:3c:7f:16:ba:78:8f:dc:53:
56:07:02:44:de:37:ef:81:96:b0:2d:c7:53:8d:14:
db:19:17:c8:cf:11:b1:fb:b5:b9:26:9b:1d:b7:67:
f9:38:90:63:b6:a8:53:67:14:71:51:fc:ef:d1:38:
50:cd:99:b0:94:20:9f:77:20:1a:80:e6:bb:03:cc:
84:4f:d0:2d:19:05:18:b9:b9:37:f8:e5:75:46:63:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6F:2E:0B:40:38:5F:D0:51:39:9D:7B:2F:86:A5:19:7A:D2:2B:EF
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:15:57:51:b1:ee:e3:26:4a:ba:71:df:26:02:dc:d0:d1:8d:
9d:02:9e:6f:3e:62:05:5b:19:4a:c0:03:4a:db:cd:c0:44:16:
38:09:78:60:c3:4b:5e:65:61:4a:c6:94:79:e5:17:58:11:b9:
7e:00:03:c1:e4:70:77:59:84:09:fd:17:e0:2b:9f:bd:06:30:
57:3e:20:60:95:e5:31:52:c2:22:62:88:f7:68:84:4d:7c:27:
db:66:2a:21:37:71:62:67:f8:c8:b7:4d:dd:0c:e4:77:55:ed:
d4:55:a4:d7:f3:18:7d:71:59:99:03:ff:b7:73:1d:ae:91:f7:
ab:bc:99:de:4a:c9:5c:bc:68:80:40:56:6a:cc:50:8e:33:80:
1a:fa:60:c4:4f:29:5f:41:20:ac:28:cd:30:93:15:0c:80:91:
fc:b7:16:b2:d5:cb:c0:f2:5c:02:e7:62:f3:6c:3e:66:6e:32:
a8:f5:41:99:c5:bb:22:cf:ed:ce:08:1c:73:77:f1:6d:d3:e1:
19:9b:60:fe:d7:1c:c0:1c:d3:85:61:7c:87:2d:d1:ef:69:45:
bc:75:a1:90:da:98:50:ae:e6:ab:a0:a0:32:94:eb:c3:8a:a4:
aa:77:e7:53:54:df:c0:1f:9d:70:29:b7:ef:dc:e4:51:ab:48:
8e:db:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:08 2025 by rpki-client