Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File: UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier: AF0qYSqRwSZfHf3txZI+OK07h8QJecyOfnovoNRJbU8=
Subject key identifier: BE:C6:05:ED:9A:98:FB:C4:3E:DF:F7:C9:1A:25:3F:79:71:9D:F0:D8
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer: /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial: 019A52D1F359BF2D8D47A33B29413C40288D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number: 1039
Signing time: Wed 05 Nov 2025 07:01:22 +0000
Manifest this update: Wed 05 Nov 2025 07:01:22 +0000
Manifest next update: Thu 06 Nov 2025 07:01:22 +0000
Files and hashes: 1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=)
2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: Bdj3Udllp0Id0VJiTFmm5qyopOjwi3EjDcjG54sD+u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f3:59:bf:2d:8d:47:a3:3b:29:41:3c:40:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Validity
Not Before: Nov 5 07:01:22 2025 GMT
Not After : Nov 6 07:01:22 2025 GMT
Subject: CN=bec605ed9a98fbc43edff7c91a253f79719df0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:f6:99:3e:f0:14:52:3f:df:85:b6:28:bf:
9e:3d:bc:16:92:3c:25:2d:f9:59:a0:e7:d4:13:d3:
d0:73:a4:ae:a3:74:fb:e1:72:a9:26:96:92:48:e3:
8c:cc:c7:d8:8d:f4:8c:fe:ea:2e:4f:0b:b6:0c:9b:
47:2d:80:b8:de:8a:e3:7f:d3:d7:c8:ed:f3:59:74:
56:c7:80:58:ca:a8:d1:51:c9:cc:22:3e:f5:f4:86:
01:0a:10:3d:ca:fd:28:25:c3:87:c6:3b:f0:1e:08:
86:08:0f:8f:16:ad:ce:0f:73:78:97:03:d8:5f:59:
62:cb:cc:92:2e:34:76:e0:36:1e:ec:9f:25:25:6a:
5e:58:03:00:23:34:00:46:a0:42:ab:2c:7c:1c:f6:
7c:e9:07:b7:1a:29:e3:fc:69:0b:5c:a8:25:c0:f8:
c7:f0:9b:f4:98:a2:ab:8b:5a:7f:1b:97:2f:11:67:
5b:af:2d:7f:5e:bc:ae:c0:a5:53:73:09:6d:c5:bf:
51:f2:90:32:48:e7:4e:60:7f:9c:d8:53:7e:1e:75:
9e:e3:69:c9:2e:28:c7:23:c8:78:d6:c1:61:b0:c0:
6e:ba:6c:df:b5:1b:4e:47:ea:01:37:1d:81:48:fc:
c9:30:a1:4c:fa:20:d6:07:6a:ca:01:b0:e4:39:2e:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C6:05:ED:9A:98:FB:C4:3E:DF:F7:C9:1A:25:3F:79:71:9D:F0:D8
X509v3 Authority Key Identifier:
keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:95:93:aa:69:4f:b9:07:9a:81:b5:2f:50:76:64:f8:ec:
e4:59:02:16:63:3e:dd:6f:70:3a:ed:d7:f5:25:01:ce:c1:6a:
cd:aa:04:5c:8c:e1:53:e9:ba:f2:22:b3:1a:c2:17:34:05:ab:
79:a5:ce:95:64:35:a1:73:13:70:37:02:05:d6:8d:d8:3c:53:
b1:4b:d3:38:7b:f0:c3:77:9e:42:d8:35:74:a9:bd:09:51:27:
13:8b:9c:26:39:8f:67:0d:90:25:dd:14:79:c5:6e:f0:79:35:
54:d8:45:31:be:6a:fc:6f:90:11:37:6d:2e:a8:67:2a:fd:0c:
6f:4b:fd:09:1e:6f:cb:de:6b:6a:74:7d:21:67:09:b6:c2:72:
a4:a5:8c:7a:84:95:c0:06:2b:36:31:d7:80:1c:51:64:2a:59:
3b:0e:a1:81:a4:2d:42:9a:af:2d:ff:74:32:65:72:51:90:23:
cc:ed:3e:9f:8c:7e:26:70:a3:f8:b2:4a:21:12:41:63:75:ff:
e5:fd:37:24:2d:77:73:dd:18:0a:6a:fc:46:28:ed:49:eb:6e:
e8:32:03:e9:f8:b1:c9:0f:6b:0b:8c:8c:3b:0d:64:1d:17:53:
6f:a7:34:2e:18:5b:df:86:74:10:3b:49:d1:ba:39:9d:79:ba:
89:e0:24:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:57 2025 by rpki-client