Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: jyCyXf6F+VaEcces1TOPdHHdlF/F85nPzWeLo6RtoJI=
Subject key identifier: 38:CF:E4:CE:06:E4:B9:17:E5:65:3E:86:5B:E7:36:60:1C:D2:BC:6A
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019A54BFB3BEAE03B298A7D8687D0D759420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 06E4
Signing time: Wed 05 Nov 2025 16:00:40 +0000
Manifest this update: Wed 05 Nov 2025 16:00:40 +0000
Manifest next update: Thu 06 Nov 2025 16:00:40 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: as7AyuP36s3TpvQs+/u8xiQ+Z7bf7tt5RhbhQ6WTmg8=)
2: l-5i9oAqkZlj6BH6-zlLgCi-M8A.roa (hash: 2XZCzXlEs8Y4V/FtjrmGLpKeYJtdxgukjLa0vF1G5q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:b3:be:ae:03:b2:98:a7:d8:68:7d:0d:75:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Nov 5 16:00:40 2025 GMT
Not After : Nov 6 16:00:40 2025 GMT
Subject: CN=38cfe4ce06e4b917e5653e865be736601cd2bc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:29:ce:58:0d:2c:00:43:94:cf:89:3a:4c:
f8:7f:ea:e5:03:af:9f:16:90:bf:36:f2:ad:3f:14:
0d:b7:e6:df:37:eb:66:6f:e0:5d:d0:e6:7f:50:f3:
50:a7:6a:b0:94:25:82:a2:27:c6:25:d3:1e:68:48:
4f:c3:d5:0a:20:4d:07:ea:87:1a:85:7f:55:13:ca:
a9:a1:69:af:11:34:6f:5b:c0:2a:31:71:eb:ad:39:
43:e3:d2:7b:8e:db:95:eb:65:b2:50:bf:44:31:c3:
82:73:21:65:4a:7d:1a:f8:a0:4d:17:da:61:8a:1b:
00:53:91:32:9d:f6:58:61:b2:77:07:48:61:c8:cb:
3b:e3:c9:16:b5:aa:48:50:f6:39:01:5c:da:79:1b:
4c:5b:bc:7f:56:5d:c7:77:bf:4f:56:eb:82:80:cc:
bc:cb:34:c6:0f:d1:ab:8f:95:15:38:72:6f:be:fd:
0a:f3:e9:43:dc:59:62:bd:d8:77:2d:b4:ce:92:98:
53:c4:56:9e:ae:64:75:a1:18:57:db:97:5e:ec:2a:
16:b1:61:60:71:14:7a:be:a6:02:e7:37:bc:12:18:
de:97:74:99:05:f1:3a:da:fd:a8:12:02:db:c1:c2:
a9:b0:02:3a:b2:39:0a:8b:9e:50:a8:2b:a8:42:d0:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CF:E4:CE:06:E4:B9:17:E5:65:3E:86:5B:E7:36:60:1C:D2:BC:6A
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:86:aa:1a:54:bf:3e:06:ba:ec:e2:25:3a:47:3e:1f:cc:ac:
38:68:83:4d:d7:34:0b:e0:b2:78:f0:35:c8:96:c6:3d:62:57:
9c:62:cc:dc:dc:6d:8c:bf:f0:c7:d3:10:40:41:35:a0:be:49:
e3:c1:be:6a:ea:e1:65:eb:6d:bb:b4:48:6d:ba:0d:2b:f3:61:
ca:e1:6b:20:03:dd:fd:99:2c:0a:0e:2d:ae:9a:ef:da:1c:b2:
03:6d:eb:a9:e1:52:54:d4:ed:56:8d:45:d2:a7:68:0e:c7:07:
b1:5d:5e:bb:86:4e:27:cd:8c:b3:01:14:51:97:9f:64:b2:e7:
71:4f:90:60:9c:34:59:19:3c:18:c7:ae:ba:72:9d:1c:09:63:
82:86:ef:f5:b8:b3:a2:0c:f3:0f:32:fd:b8:93:0b:74:f2:c8:
a4:25:82:d3:d5:64:04:53:1a:2c:1d:1d:8d:f5:2a:6b:a9:af:
e3:52:8f:c4:76:fc:75:62:32:aa:6c:e4:4e:97:23:3d:0e:a5:
ad:6d:fa:d6:01:1a:d6:00:b2:1f:74:88:17:71:07:8d:39:68:
32:3e:74:15:35:3c:67:b4:b7:c5:f5:e3:d6:8b:ff:57:39:7a:
f0:df:34:33:d6:f3:a1:26:4e:91:8e:b5:84:22:e3:d9:da:9c:
59:c2:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:40 2025 by rpki-client