Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: yC7YllEizLzAsma7GCindBFc0olZO/5GL9MbbryyDEk=
Subject key identifier: A5:5E:86:D5:ED:1E:89:D0:70:49:06:5A:26:FA:4A:B5:25:48:E6:20
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 019A4F992E484CEF0595CDDCEC3781801A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 15AE
Signing time: Tue 04 Nov 2025 16:00:30 +0000
Manifest this update: Tue 04 Nov 2025 16:00:30 +0000
Manifest next update: Wed 05 Nov 2025 16:00:30 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: +6A33tOPgVQyGzeBrXxlssaZjGCuto4ng91x8Z73URk=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:2e:48:4c:ef:05:95:cd:dc:ec:37:81:80:1a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Nov 4 16:00:30 2025 GMT
Not After : Nov 5 16:00:30 2025 GMT
Subject: CN=a55e86d5ed1e89d07049065a26fa4ab52548e620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:3d:2d:27:fe:a9:e3:d6:8c:8f:f7:c4:6c:
c5:22:71:0c:04:20:03:7d:55:85:fa:61:23:5c:82:
48:d5:b3:8d:94:65:3a:83:7a:6d:da:17:d2:f2:9e:
19:e6:ff:51:30:8c:d5:d7:6d:fd:4e:61:a5:64:40:
1c:36:30:32:6e:6b:c1:20:3f:50:93:18:ec:76:7f:
98:57:64:35:8a:0d:d2:d1:b5:85:69:f1:2e:88:6a:
47:84:7a:94:9e:55:b3:8b:10:83:49:58:39:4f:b6:
ea:63:7a:7e:cb:67:00:56:11:5b:df:a2:c4:3c:f7:
b7:9e:81:ae:7d:51:8a:bc:89:32:9d:02:72:e2:36:
42:5b:c1:57:be:0e:56:28:78:67:28:22:49:4e:98:
5e:41:63:04:17:a1:3f:28:55:2e:c3:34:6c:04:08:
73:d7:5c:5f:61:40:35:c7:53:51:40:1f:d2:f0:e0:
05:20:28:62:64:e1:f5:12:5b:cf:ba:70:fb:4e:af:
b6:ab:a4:ff:8e:3a:a4:c2:3b:31:6d:df:4e:ea:93:
9e:9c:2b:9f:d2:a1:ce:80:48:ab:2b:83:ef:45:b0:
76:f5:31:73:64:a3:d9:45:60:ac:d8:1c:ad:06:f1:
43:c4:78:f5:49:40:a6:c6:fa:99:9d:ad:94:6c:83:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:86:D5:ED:1E:89:D0:70:49:06:5A:26:FA:4A:B5:25:48:E6:20
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:b9:52:92:80:5f:6c:9e:24:41:db:11:1d:af:2c:a9:af:
35:73:69:32:29:be:04:87:15:f1:c5:f5:fd:d0:30:51:cc:39:
62:99:f4:5b:28:04:06:14:60:10:7d:11:c9:aa:ff:79:9f:e7:
fe:bb:be:c7:51:d1:c1:5d:88:dc:ec:c7:b6:ba:08:cd:3b:21:
f1:3a:39:c2:a2:13:bf:e6:4b:91:28:fb:d8:ca:46:c5:a8:e3:
be:85:9e:30:46:d7:47:d1:de:b9:9b:0f:27:75:2e:22:05:35:
ee:a8:7c:8e:e2:7f:91:f9:ef:36:f3:cf:27:5e:a1:28:85:a1:
8d:a7:34:67:75:3f:a1:81:d5:b9:a6:e5:94:12:2c:a8:e5:06:
89:86:e5:39:05:18:70:83:1b:98:ab:e4:bd:7b:a4:60:01:2a:
c7:0f:8d:79:f8:f1:9f:9b:8a:e0:9c:eb:44:c3:92:f2:4f:98:
9b:e8:05:f5:1d:ef:8f:d0:a8:42:60:3e:33:52:ae:99:42:7e:
08:e4:8c:37:bb:77:3d:1c:02:77:bb:55:13:61:a0:b7:c9:22:
0e:57:d4:a5:73:b7:6a:0c:51:6a:56:3b:5a:bf:3b:9f:c4:7d:
9f:62:16:64:e1:be:b8:3c:4e:4e:06:1b:df:75:2a:4c:b7:65:
1a:91:36:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:18 2025 by rpki-client