Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier: HPwkCWKsRoIGYdoOvs79ZNFStkC9Or6KgwjsO2GIhP8=
Subject key identifier: 92:58:20:E3:D2:AC:1F:CF:F0:54:E6:4C:17:0B:91:3B:95:52:DC:DC
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 019A4EBD3AFF9BCB4AC6CD75DDD19A7E3DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number: 056C
Signing time: Tue 04 Nov 2025 12:00:15 +0000
Manifest this update: Tue 04 Nov 2025 12:00:15 +0000
Manifest next update: Wed 05 Nov 2025 12:00:15 +0000
Files and hashes: 1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: eQQZfYUqUf1rXaU89HnKpSXhnyYi0wH75QgM3XPW8tA=)
2: mQRNvpgGDTxl1ClE8lP4fBCE_zY.roa (hash: Y4EjZw1j54zSv6D2ykaYLyeNan8XUPzgXS8YGYvdiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3a:ff:9b:cb:4a:c6:cd:75:dd:d1:9a:7e:3d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Nov 4 12:00:15 2025 GMT
Not After : Nov 5 12:00:15 2025 GMT
Subject: CN=925820e3d2ac1fcff054e64c170b913b9552dcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:59:98:37:c6:df:72:6b:fa:bf:b5:bf:7b:
ea:e4:0e:92:37:5e:69:fc:66:47:d6:dd:70:dd:9a:
dd:7b:54:3f:7f:51:fb:40:a6:36:13:d7:88:3e:5c:
2f:46:2f:70:0d:ce:5f:79:e0:96:50:08:fd:e6:88:
83:db:e3:11:9e:4a:d0:44:ca:83:6c:8c:c9:6a:29:
b0:e7:2e:f8:00:7d:e0:d4:b2:1f:b3:a3:d8:33:56:
a0:98:0d:44:15:f3:36:e8:39:af:6b:ef:b1:39:2e:
2d:c1:e9:db:b0:58:f4:89:4a:94:d1:9a:bf:16:8c:
18:23:86:3a:4f:c8:bd:4d:12:ac:e7:fa:4f:10:13:
81:af:ac:28:ec:bd:7b:81:af:c5:ba:e3:57:dc:a3:
47:d5:45:ac:64:e5:8a:b4:8a:07:ea:3a:7c:a2:f2:
3f:79:2e:f3:c7:da:de:75:4f:c8:54:55:4e:1b:de:
f5:e2:56:85:30:76:04:4a:8e:c0:d5:04:68:4d:9a:
3a:a1:5f:30:b8:a2:af:cf:13:0b:c6:0f:a2:4d:dc:
5b:78:12:52:3a:8b:aa:f4:47:15:77:7e:ea:95:45:
51:5f:4c:f6:b6:88:cb:1c:5b:28:40:6f:56:a2:43:
ca:b2:d0:48:3a:98:f4:76:ff:d5:a9:ae:e7:c7:63:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:58:20:E3:D2:AC:1F:CF:F0:54:E6:4C:17:0B:91:3B:95:52:DC:DC
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ff:d9:9c:63:c4:39:06:f8:7f:ef:1a:70:b3:4a:14:da:74:
0e:3e:b3:59:b4:23:29:40:5a:23:da:5e:00:c2:7f:a3:7f:88:
6a:a0:f9:e3:68:f5:d6:f5:bc:cc:28:09:b3:ac:91:72:07:3e:
e2:55:a7:93:8a:9e:49:16:05:b9:00:5a:57:b2:c1:68:e5:7e:
50:a5:2f:6d:04:13:e2:45:b7:5b:b4:40:e0:8b:e9:59:0a:2b:
42:6f:39:74:3b:e0:31:5a:ea:ae:f0:df:a8:e8:5c:3a:9a:52:
5a:c4:42:fb:1d:d4:60:b1:03:e0:88:ea:13:8f:13:e4:dd:d8:
06:39:54:92:c3:06:11:c6:1b:fe:75:6a:c6:8f:4a:ea:13:1b:
b6:b8:84:c3:71:60:ff:83:48:f7:5b:12:18:08:b0:ac:e4:7d:
72:83:2c:79:d1:b2:a7:ba:b2:79:bf:ff:76:03:16:54:a2:03:
50:44:70:85:44:c4:fd:d0:bc:06:ee:58:9d:ab:df:3b:b3:81:
a6:b2:32:13:da:f0:8d:11:28:c4:50:c3:60:a9:d4:46:9c:37:
14:59:1b:c5:3f:48:fa:bf:ca:ab:73:6b:67:a6:66:c6:c6:18:
e6:73:19:8e:53:0a:3e:15:e6:13:86:5e:98:06:bf:aa:4c:f9:
fe:6e:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:02 2025 by rpki-client