Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
File: UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json)
Hash identifier: j/Vlyk7xIgRYIEV50bwTL1QZbxuWByRvQed920JqWMM=
Subject key identifier: CC:27:C9:FC:14:16:AF:B8:34:E3:BB:1B:1A:CC:AC:A8:AA:63:88:22
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial: 019A52631EBE56F1AD462DEEDFB6D094C00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
Manifest number: 0DF5
Signing time: Wed 05 Nov 2025 05:00:18 +0000
Manifest this update: Wed 05 Nov 2025 05:00:18 +0000
Manifest next update: Thu 06 Nov 2025 05:00:18 +0000
Files and hashes: 1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: djOb5Yp+mTB8UifQqOT0BjkWPm3VDfZPxXCUe5BEGss=)
2: XcVo6Gcf-l3iWhZzeOaaEzufuDw.roa (hash: Q8U31mISF8PJJ4X9+WRd+NF2mJCwrseuFFyVkfpjEQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:1e:be:56:f1:ad:46:2d:ee:df:b6:d0:94:c0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
Validity
Not Before: Nov 5 05:00:18 2025 GMT
Not After : Nov 6 05:00:18 2025 GMT
Subject: CN=cc27c9fc1416afb834e3bb1b1accaca8aa638822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:e8:c5:42:d0:c3:b1:80:a9:98:03:bd:3e:
43:3b:79:ea:b2:22:89:37:e6:a6:d3:fa:3b:6e:ad:
3b:62:68:b0:51:4b:36:0d:44:16:a0:89:db:50:ee:
15:ad:b7:35:12:78:f3:50:84:79:72:23:72:89:ea:
94:a8:49:4f:da:75:84:3c:47:ae:ef:5f:30:38:e3:
1b:66:2b:b8:d8:2b:74:26:68:fd:4b:e1:f8:22:4e:
82:82:12:ac:3f:67:a1:cb:f9:fe:d8:90:b4:1e:4a:
84:94:0f:09:a7:5c:c7:f3:27:5e:98:a8:3d:f2:64:
16:51:77:a5:b9:59:0e:f3:8a:d3:8c:5d:5e:b8:29:
98:26:5c:4f:ce:a1:f4:ff:f5:42:f7:27:e7:69:a6:
ec:9d:69:b1:2a:01:b4:4f:e1:dd:6d:14:27:5e:cd:
28:2f:15:80:10:e8:30:c8:d2:16:dc:ec:ab:34:4a:
32:5e:a3:aa:42:80:ea:cc:4e:0e:34:b7:58:b3:a3:
78:4d:01:88:c0:e1:15:38:aa:b9:93:48:82:27:0b:
19:27:32:5d:e0:6d:94:92:27:6e:fd:7a:50:12:5f:
a0:29:30:b7:98:1d:12:5c:60:5b:fc:5a:90:7a:43:
86:9a:8e:0a:b0:cd:8b:ee:36:14:cc:e0:43:d5:c6:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:27:C9:FC:14:16:AF:B8:34:E3:BB:1B:1A:CC:AC:A8:AA:63:88:22
X509v3 Authority Key Identifier:
keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:59:4c:88:82:1a:fa:4a:93:0b:d4:c5:80:55:0c:4f:ef:
a0:74:e1:f5:20:d7:49:52:16:9e:69:66:1c:91:6e:3b:19:8d:
62:30:e7:0c:5a:60:df:34:94:5d:c8:16:76:35:6f:67:38:d8:
fa:26:7f:3c:40:77:8d:2f:49:bd:5e:aa:74:64:8b:6c:c0:f0:
70:12:10:4a:0d:66:3d:2f:c4:8e:aa:a0:4b:4a:d8:96:ad:df:
00:44:dd:af:2c:2e:e9:5a:3a:b7:94:10:4c:ed:a4:cd:93:9e:
9c:03:b4:61:69:6f:89:c2:58:09:5a:2b:23:ae:97:81:fa:21:
f4:16:24:bf:f8:4e:13:26:3a:8b:33:ba:9f:f6:ed:e5:9c:ad:
14:82:a1:27:e2:34:fe:e0:55:47:16:2b:0a:59:dc:4d:14:da:
be:2e:e8:27:98:d0:f6:ea:62:ea:46:b6:53:90:3f:e4:23:ef:
bb:d5:3e:cd:a8:1d:dd:7a:a4:be:7f:2c:ca:b9:85:77:45:3b:
63:70:c9:5a:b7:07:cd:91:b5:d5:c7:f9:0e:ad:ea:a0:b7:ce:
ef:dc:43:22:4f:06:4d:3e:1f:b3:12:b8:c9:40:97:5e:e2:3f:
44:5f:b1:22:28:b4:e5:05:0d:a5:c3:e5:9e:06:7d:3d:7d:4d:
29:b0:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:28 2025 by rpki-client