Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: EXM55UVaZ6ZofZBBDMoEWV6Z/2G4KOSYEiOCR/BlGsQ=
Subject key identifier: A8:A5:76:AF:BF:F5:95:8F:F2:A7:0A:9D:5D:78:D0:BD:75:4B:F8:03
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019A4F6292A41DBD460A845F56296C4BEEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 1553
Signing time: Tue 04 Nov 2025 15:00:51 +0000
Manifest this update: Tue 04 Nov 2025 15:00:51 +0000
Manifest next update: Wed 05 Nov 2025 15:00:51 +0000
Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: fZFi2a2Id+l1qdETgZr6lsWG5B+IFrihBk3QcJ49GJ8=)
2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:92:a4:1d:bd:46:0a:84:5f:56:29:6c:4b:ee:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Nov 4 15:00:51 2025 GMT
Not After : Nov 5 15:00:51 2025 GMT
Subject: CN=a8a576afbff5958ff2a70a9d5d78d0bd754bf803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:6a:99:04:48:e7:cb:8c:36:af:90:e4:ce:
30:ea:e9:22:95:b8:31:11:de:43:bd:44:dc:d2:92:
3e:15:b2:c1:89:c5:4c:08:1f:dc:47:b5:26:22:08:
d0:a7:fc:f6:cb:fa:bd:e2:e2:2d:22:b2:e4:de:9d:
91:4b:99:da:51:01:d4:77:42:06:f1:71:14:16:9d:
58:1f:4c:ca:d6:c6:21:1d:dc:e9:b3:3d:63:35:af:
8a:d4:4a:e1:41:60:77:31:9f:c9:84:e6:56:ba:4d:
78:a0:de:ba:f0:0c:30:17:57:26:ee:66:9c:b1:4f:
bf:dd:d6:5a:f8:05:99:60:77:a3:8f:48:06:36:f7:
e2:2f:09:bf:00:67:ec:d1:f6:91:9c:26:fc:3c:46:
62:ab:39:b1:3a:ea:f8:2e:d6:fc:88:17:e7:9a:3f:
eb:50:e3:3c:f4:d1:31:a0:02:66:69:ae:62:f1:eb:
98:38:02:56:de:5b:75:77:fb:60:7d:59:8d:31:22:
58:d1:2b:7e:f6:3a:16:cb:56:c0:af:08:90:bd:64:
15:8b:30:dd:3b:b7:d3:87:36:20:3f:cf:51:fb:e9:
bb:8d:ab:44:49:89:c6:26:e1:85:d5:6e:e9:8d:4c:
85:04:1e:a9:97:55:87:db:12:8f:ea:59:08:29:fd:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:76:AF:BF:F5:95:8F:F2:A7:0A:9D:5D:78:D0:BD:75:4B:F8:03
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:65:62:2c:17:63:5e:a3:06:f1:40:4d:6f:60:6f:e7:b7:53:
a9:9b:29:8d:e7:86:29:07:05:66:06:79:78:55:ca:63:eb:70:
b3:9c:7c:23:1c:b2:e0:be:7b:22:1a:94:f9:aa:b2:7c:13:65:
bd:8a:70:84:a8:a5:7f:fb:e9:d7:49:38:01:64:1d:c1:6b:91:
f4:d7:95:64:a6:a8:d0:b2:68:f8:0d:fd:4a:a9:fb:6d:bb:08:
44:47:52:60:30:a9:bf:c3:f4:ee:c6:aa:9e:bd:ed:e3:02:72:
70:0d:d5:8a:fb:27:e7:a0:fc:22:3f:a2:03:0a:d4:47:68:56:
40:b7:3b:e0:5b:6a:c8:11:0f:aa:e3:ad:27:e0:d1:c4:9a:a0:
db:d8:7b:16:dc:14:54:df:1f:94:6c:5c:58:43:44:7e:54:b9:
c7:65:dc:39:b8:79:d4:85:71:24:10:4f:f2:0a:ca:2b:98:fe:
99:58:26:4f:3f:eb:a0:41:58:46:3b:35:53:09:23:1b:73:28:
7b:ac:1e:9f:bd:53:83:2e:c5:ee:89:d2:09:7c:56:51:9a:be:
65:34:c3:cc:93:05:cc:cc:00:58:b3:60:94:e9:b8:71:ac:20:
86:c2:1d:01:93:d5:4e:72:a6:0a:21:48:bf:c6:ac:4c:d9:5e:
4e:4f:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:58 2025 by rpki-client