Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File: Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier: a+vdoGYwa4GES0GllShcZlp+VuXk2qbAZnucqkhfyOI=
Subject key identifier: 74:24:4D:A4:CF:38:89:14:80:D6:D7:2D:76:2C:09:98:15:22:DA:DC
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer: /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial: 019A54BFBFA70DF08A92EC25325F45E7E832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number: 123A
Signing time: Wed 05 Nov 2025 16:00:43 +0000
Manifest this update: Wed 05 Nov 2025 16:00:43 +0000
Manifest next update: Thu 06 Nov 2025 16:00:43 +0000
Files and hashes: 1: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: fTOsnb/POgbKVkW3/Lgcnw3mQxOyQecUZli9Qxkgeik=)
2: f_wj04ETq9bQrF4XPngK42N1KfA.roa (hash: g/L8C+Uofn47VNMVi+59N+SowKWU37rtsG4L1uBFxUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:bf:a7:0d:f0:8a:92:ec:25:32:5f:45:e7:e8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
Validity
Not Before: Nov 5 16:00:43 2025 GMT
Not After : Nov 6 16:00:43 2025 GMT
Subject: CN=74244da4cf38891480d6d72d762c09981522dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:4e:1b:d6:39:56:47:97:40:c5:7a:8f:3b:
46:7a:68:f4:a7:be:84:4b:c8:c3:b7:7f:37:44:b8:
12:55:e9:13:f0:9c:6e:46:47:a3:4b:ad:3d:a7:67:
3e:cc:34:10:c9:15:ae:a4:38:cd:0f:1f:ea:5e:b0:
8a:19:12:8d:bc:50:5c:d6:9c:2a:67:5a:e2:e9:fb:
a5:c4:a8:90:55:67:6d:76:2b:9f:5d:03:f5:d2:2a:
d6:4a:50:32:e8:89:7a:37:c0:bb:2e:63:bd:7a:df:
a8:4f:e3:b5:13:74:6d:e2:7f:80:df:30:72:30:e4:
a4:0a:af:1e:dc:0f:e5:4d:57:c5:07:02:b8:bf:14:
bb:54:51:9c:82:3e:2c:d9:95:78:32:57:8a:ae:7c:
da:c9:11:3d:c7:6a:e1:33:bf:8b:59:b7:e8:a7:96:
99:45:f6:10:8c:b6:c2:be:d7:90:84:77:f5:f4:4b:
b1:75:fd:17:51:32:e0:27:49:88:9f:0d:db:6c:c5:
56:c8:12:48:e4:95:5a:a6:58:88:28:ce:ab:fc:51:
1c:62:f1:1c:08:69:0f:c9:dc:d6:39:ba:87:d4:c2:
64:70:57:1e:e7:dd:ce:dd:7e:0f:74:0a:f4:e0:35:
10:a5:ff:cd:49:ca:a8:80:14:d9:1c:89:cc:5b:33:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:24:4D:A4:CF:38:89:14:80:D6:D7:2D:76:2C:09:98:15:22:DA:DC
X509v3 Authority Key Identifier:
keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:3a:4a:8a:4f:0e:82:01:2f:4d:79:7e:7c:44:c6:f1:6f:
9f:e9:db:83:e6:82:57:fc:b7:a5:eb:5e:47:d0:4d:31:08:e8:
0b:db:95:5e:fa:bb:d3:cd:87:88:e5:c3:9f:db:22:70:62:2b:
c2:c8:a0:49:d9:bb:16:79:f0:90:e4:d6:f9:69:7f:da:8b:d9:
b9:e0:0b:29:9f:5f:cb:c8:ea:96:3c:94:c3:cb:c0:be:b2:4f:
65:ff:7b:86:25:8c:f6:34:6a:03:e1:87:90:c3:ef:f7:34:12:
ff:ab:7f:45:f2:45:48:ef:93:05:0b:21:73:92:0d:55:6d:2e:
89:ea:67:bf:b5:42:a6:48:df:e8:53:72:1d:cb:64:45:b2:0c:
2d:9b:18:7e:a1:8f:13:22:28:e2:0c:3f:51:05:c6:fb:38:50:
ba:ad:68:37:40:ec:16:55:be:98:1b:e7:ce:ee:55:aa:9b:03:
84:b6:32:51:7e:4a:11:00:84:cf:a8:29:ae:ce:b0:bd:d2:e8:
f2:5d:29:41:c8:d3:92:b1:51:76:7b:80:0b:57:1b:a1:dc:29:
61:7b:04:ff:a6:a5:9b:48:58:5a:59:ee:a3:c5:59:89:ca:54:
6f:63:eb:85:f9:1d:df:70:2f:70:2b:bf:05:7c:8e:3b:98:20:
4a:be:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:02:45 2025 by rpki-client