Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File: UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier: jlqn1Vgs1Oi7Ev/Zd1xDdq15YYgkPj05if0P4dfOifo=
Subject key identifier: F8:52:1E:B1:1B:F1:04:16:45:65:5F:63:77:94:78:49:62:AE:9C:51
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer: /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial: 019A4F2B3E9E5B7F1C338937AD199D3DCBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number: 14AF
Signing time: Tue 04 Nov 2025 14:00:25 +0000
Manifest this update: Tue 04 Nov 2025 14:00:25 +0000
Manifest next update: Wed 05 Nov 2025 14:00:25 +0000
Files and hashes: 1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: OCIpI1oLBxxdbLWfVIqK0HQYLWKaDtyF7urruPqkL0k=)
2: _a7tAKf339v0StwY-99zGhTqG38.roa (hash: JYQNh/oqUzKN3SGNytd9bNClD0WxhF6t77T6aTG1SXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:3e:9e:5b:7f:1c:33:89:37:ad:19:9d:3d:cb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Validity
Not Before: Nov 4 14:00:25 2025 GMT
Not After : Nov 5 14:00:25 2025 GMT
Subject: CN=f8521eb11bf1041645655f637794784962ae9c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2c:a0:d7:e3:af:b9:f5:7f:85:27:f3:bf:92:
dd:95:f0:9c:51:e9:86:ce:e8:08:06:83:18:52:6b:
94:da:10:2d:b4:e5:02:97:27:6e:d2:93:c8:59:5d:
18:40:35:38:1f:f8:17:26:e1:08:73:e3:ac:7b:fa:
eb:84:b8:33:ab:00:49:e1:bb:9f:8a:cf:00:de:aa:
0a:2b:5a:6b:c7:fd:cf:dd:29:84:b1:f5:c3:b1:85:
10:28:3f:6b:57:d1:9f:87:8e:d4:78:da:eb:eb:d5:
f7:00:75:ab:a3:29:cf:6e:7d:aa:c0:f0:b6:79:bd:
dd:c7:61:81:47:77:8c:9c:75:db:5d:57:84:78:c4:
fa:08:09:0a:5f:21:8f:e2:3b:3c:fc:a7:09:af:61:
07:de:d9:38:0c:fd:c8:7f:c0:e7:68:80:b1:8c:9d:
fb:f1:b9:9f:56:70:ff:2c:c2:6f:6a:2b:1d:f7:6f:
8f:30:0e:8d:d5:60:a9:a1:07:fd:75:7e:a6:03:31:
20:06:36:d9:ae:1f:36:f9:ad:96:4c:66:1e:58:92:
b5:8b:68:f1:2e:29:0a:b8:23:f9:11:76:dc:75:ce:
7f:02:81:b5:43:73:25:d0:58:7f:2a:8f:b1:35:98:
47:99:5e:8e:c5:c4:ae:f5:59:d4:ad:21:47:15:10:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:1E:B1:1B:F1:04:16:45:65:5F:63:77:94:78:49:62:AE:9C:51
X509v3 Authority Key Identifier:
keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:38:00:b1:4b:dc:c7:a0:8e:ac:07:56:d8:f3:79:08:82:1a:
1b:2e:6a:9c:53:b4:08:d0:a5:f0:3b:58:88:32:31:88:49:f7:
1e:8c:8e:fd:08:25:04:b2:f6:0e:a8:dd:6c:93:35:4f:f2:eb:
bb:11:1d:1d:18:cc:6e:a0:a5:7d:ea:ac:47:46:49:14:25:f3:
fe:46:3f:e7:8a:fa:4e:98:75:17:54:45:dd:8f:0b:ff:4e:9e:
ea:e7:b2:ae:f1:67:95:68:87:6f:61:e1:95:31:a7:c8:75:93:
c3:25:aa:f9:22:62:dd:ff:42:27:71:31:ce:4d:48:75:ad:5d:
bb:b8:35:f4:85:e8:f5:30:49:e3:a6:28:93:f3:32:55:52:b8:
99:3c:7a:b4:01:87:c0:c1:2c:de:39:25:bd:28:7b:d4:ac:60:
a2:d9:0a:56:03:6a:ce:76:89:ea:b8:88:8e:0b:32:dd:de:00:
4b:75:aa:3f:f1:87:67:28:d8:c0:97:48:63:3c:17:cb:8a:41:
6a:0e:81:ec:30:a7:4a:62:95:c8:7c:af:4e:41:57:ec:67:86:
82:9a:34:fc:51:19:a2:4c:ae:0c:96:d1:79:b4:2c:4e:30:35:
fc:6d:53:35:69:4b:fc:f5:d9:cb:c8:96:19:44:5c:ed:d7:de:
08:c8:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:11 2025 by rpki-client