Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier: X80NTEqLQx0Ey3J8S3ECyRSIavX86O7I013fxS3L4tA=
Subject key identifier: 42:0D:C1:52:6A:C5:D4:1F:0B:77:64:4A:8E:51:85:27:7A:EA:E0:CA
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 019A52635C7F184F4D70AA8C3FF1111946BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:34 +0000
Manifest this update: Wed 05 Nov 2025 05:00:34 +0000
Manifest next update: Thu 06 Nov 2025 05:00:34 +0000
Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: DaFBP91RYf27lUBihCt374JKkqSitxyBLAxxddxClUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:5c:7f:18:4f:4d:70:aa:8c:3f:f1:11:19:46:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: Nov 5 05:00:34 2025 GMT
Not After : Nov 6 05:00:34 2025 GMT
Subject: CN=420dc1526ac5d41f0b77644a8e5185277aeae0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:a5:61:75:2d:25:8f:80:47:66:ac:41:fc:
3c:a2:5f:16:83:63:12:7d:ee:26:7c:a5:a0:e0:48:
68:06:bd:a4:ca:d3:8d:3d:ef:9e:07:2f:f0:49:41:
3f:d2:07:9b:77:6b:1f:d5:0f:8f:7b:86:72:5e:42:
5c:c2:4d:b8:ff:5f:8b:29:82:b8:8f:f4:35:09:71:
e9:99:80:b8:63:72:cc:f6:12:1b:53:d6:32:35:50:
90:96:db:6f:18:4c:d6:9a:25:0e:d7:49:dc:98:7d:
af:8a:3d:7e:c9:ba:bf:64:d6:6d:73:48:1e:dc:ee:
78:ae:d0:e2:35:3b:37:37:c9:0c:92:79:21:32:a9:
8c:d9:3a:b9:8e:0d:28:77:18:0a:42:8b:61:35:7f:
92:98:3d:11:59:54:11:67:9b:e7:64:2e:5c:54:27:
83:06:25:1c:04:b9:96:70:b7:4e:eb:a5:81:15:7c:
25:b1:97:83:28:de:2f:1e:3d:fe:e0:83:a4:8b:bd:
48:01:6c:8a:b3:2b:cb:55:09:56:d2:46:a7:d5:66:
19:89:85:f8:0e:c7:3e:85:d5:cc:21:67:ad:e5:d2:
2d:d5:1a:76:19:da:d2:4b:90:3b:de:74:b0:28:86:
2a:19:55:6a:2a:75:37:9e:13:26:04:45:d9:83:3b:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0D:C1:52:6A:C5:D4:1F:0B:77:64:4A:8E:51:85:27:7A:EA:E0:CA
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2c:20:4f:72:ab:2b:5e:f5:3b:bd:ba:20:02:49:b9:f7:db:
e3:b2:36:70:34:03:16:20:74:69:13:84:34:e0:9a:58:a6:19:
76:91:97:79:d8:2a:3f:c8:2c:45:e9:9d:f1:99:0b:b4:0e:13:
19:35:87:ac:bf:d3:56:1c:0a:8c:48:46:13:79:40:24:8a:4e:
5b:c2:ad:a4:a3:ac:2d:06:06:b7:09:d7:e5:f4:ab:65:98:66:
0f:b3:c7:bf:a2:a8:b5:14:a6:64:a7:ab:a6:d3:ac:e0:8e:a7:
36:b6:50:ce:b2:70:1b:08:d9:11:dd:3f:29:55:48:5e:a9:2e:
0e:07:63:47:5a:1b:ec:96:2d:8e:04:44:c8:32:df:f4:31:ff:
5d:12:95:e8:e6:3e:81:56:5c:39:43:63:a1:4e:5b:d8:5e:dd:
b0:7e:81:34:83:69:51:bc:d1:9a:fc:12:ef:6f:55:d0:62:64:
be:31:7c:db:e4:48:ec:27:d2:ee:1a:22:f0:16:00:95:35:f1:
55:b4:4f:cc:04:08:1a:1c:bd:72:d5:4c:03:83:17:5c:40:05:
d7:7a:f0:93:94:ad:88:8e:c3:94:d1:15:3c:a9:9a:a1:03:b7:
48:3b:00:40:4c:8c:ac:8a:3d:ac:51:da:a9:de:e5:26:38:4b:
de:b0:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:40 2025 by rpki-client