Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: juwWUYjqMzW7S0EePYcQTpwQtGtPIM+p7f6yyE05Gxg=
Subject key identifier: A7:34:B3:A7:EE:C0:EA:81:1A:1D:7B:FE:96:79:96:2D:31:BA:11:BC
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 019A4EF5FDBC98252EBD9DE9CCD413F9BB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:02:15 +0000
Manifest this update: Tue 04 Nov 2025 13:02:15 +0000
Manifest next update: Wed 05 Nov 2025 13:02:15 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: 7ZAbiOazQYTlqEcStstX3jrzcyleVN5+qFTDcDjzbDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:fd:bc:98:25:2e:bd:9d:e9:cc:d4:13:f9:bb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Nov 4 13:02:15 2025 GMT
Not After : Nov 5 13:02:15 2025 GMT
Subject: CN=a734b3a7eec0ea811a1d7bfe9679962d31ba11bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:9c:4b:44:89:dc:ae:c8:af:26:0c:14:bf:
9b:12:7c:ee:c4:ef:3c:5d:a0:ed:74:b9:16:52:df:
aa:fd:0d:e4:23:8d:4a:d5:8c:a8:6b:ce:4e:b5:c2:
da:04:65:3c:ac:12:91:e8:79:ef:27:9e:e3:9e:57:
02:17:cc:99:92:16:6c:35:d9:70:c3:79:9d:89:f2:
e1:40:f4:c0:b9:1c:01:42:ed:c7:40:ca:07:f6:ae:
ee:5f:18:cc:14:76:35:78:1c:2f:f1:51:2b:17:7a:
88:19:e2:8a:69:2c:d9:41:70:cc:0a:2a:56:60:ea:
5f:bd:ba:b3:72:f1:69:21:21:c2:3f:dd:4f:dd:ac:
7b:ce:fb:17:1e:83:cb:df:64:23:00:d8:e4:ba:eb:
b1:4d:4b:55:9c:e4:59:cc:fe:e8:a0:fe:49:dc:11:
47:db:bf:7e:18:c1:06:d4:bc:c8:59:38:95:5b:2e:
14:f4:7b:49:a0:49:c0:1b:df:bc:fa:6b:91:fd:9e:
f5:6b:12:0f:ed:8a:8f:83:2c:6d:07:f6:4d:b4:dc:
76:82:52:00:28:34:ce:15:73:bd:61:b3:12:45:49:
ef:5f:06:26:fb:ae:92:1b:0f:04:09:18:83:69:44:
7a:35:46:2a:f3:48:a6:c2:13:8d:9b:f1:18:04:d7:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:34:B3:A7:EE:C0:EA:81:1A:1D:7B:FE:96:79:96:2D:31:BA:11:BC
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ff:96:68:ba:1e:7e:28:59:69:d2:f1:a0:ae:db:33:07:fd:
28:98:26:3e:cf:ab:47:f5:90:2c:d7:40:a2:81:f4:bf:b0:9e:
8f:d4:30:0e:b7:7e:00:88:c5:25:1b:38:e5:1a:e6:e2:9c:57:
ba:21:29:e2:c7:31:7f:b6:b3:d9:1b:3c:2d:66:00:25:35:5d:
47:46:9d:53:27:87:dd:dc:0d:4e:fb:7d:08:ec:67:fb:67:08:
68:92:2a:88:b9:a9:a5:55:2a:33:60:17:c4:38:b0:a5:54:ab:
eb:92:6a:87:6a:c0:8c:89:9d:d1:9b:a1:49:b8:2a:a6:5f:5f:
e8:a1:af:a0:a5:29:60:f1:3c:df:6b:28:31:16:86:db:f0:97:
41:14:42:9d:c3:87:62:8c:ee:9b:bf:bf:6f:f5:a3:c8:c3:da:
be:7d:c2:7d:b8:9d:72:11:8c:79:41:51:d3:a9:d3:10:59:40:
a0:39:36:d2:39:df:01:af:46:dc:64:3a:f6:2e:2d:00:d9:24:
e1:27:88:b0:41:0e:21:e2:88:e1:84:50:e5:0f:5d:95:91:4a:
20:19:1c:aa:78:d6:74:28:da:3c:46:02:41:b6:dd:7d:75:74:
68:fb:c4:1d:d1:23:b3:c0:9c:7f:ef:c2:ed:6f:a2:38:d6:f0:
40:0a:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:13 2025 by rpki-client