Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: HnBBoDu8Ggn0bzFk26HefNmPTVzXXzb26tBWR9p5R9M=
Subject key identifier: 79:0C:0B:17:EA:5D:F1:70:17:5A:03:E7:F9:B9:ED:21:1D:C3:EB:15
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019A4EF401D8ACCF0C6E0429ACC495B999F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 1334
Signing time: Tue 04 Nov 2025 13:00:05 +0000
Manifest this update: Tue 04 Nov 2025 13:00:05 +0000
Manifest next update: Wed 05 Nov 2025 13:00:05 +0000
Files and hashes: 1: E_VTiATzUgc2DhxvquhHUq4XjMM.roa (hash: QY5XIJ7ljEf/JGfsfFT7Yois/7EOyZU9vkUnS75efNE=)
2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: NafcAlOVFU4nlR6aFo7CPCG+w0W0XoIE/7UBdzI72KY=)
3: wCetPnuHXvivZcvg-nB5WG2XhQ4.roa (hash: 4Yh74lr3J9wyGwv+2vpPjVGwW6ZzDVQ5vG1BmfHb1Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:01:d8:ac:cf:0c:6e:04:29:ac:c4:95:b9:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Nov 4 13:00:05 2025 GMT
Not After : Nov 5 13:00:05 2025 GMT
Subject: CN=790c0b17ea5df170175a03e7f9b9ed211dc3eb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:5a:64:0d:37:e7:40:4d:b7:7b:f5:e2:53:
b7:88:5b:b2:eb:0d:9d:fc:af:89:0a:f3:35:e2:4c:
7f:c9:11:bf:fa:0d:ce:e3:9b:b0:15:7a:d1:87:fe:
97:66:06:51:2b:06:24:ec:51:f4:60:62:d9:b1:73:
f6:62:c0:e1:8e:3d:f6:c4:6f:02:43:21:b3:2e:a2:
79:f5:00:7b:0d:70:e8:1b:0f:d4:2e:91:e0:2f:0e:
73:fd:d8:51:3b:e1:81:a9:5b:1b:16:ab:6c:93:4a:
63:8c:d5:1e:0b:08:18:1d:af:11:a7:a7:60:8c:87:
a8:e3:dc:5b:6d:84:11:e7:f7:be:8f:cb:51:00:bd:
15:52:26:3c:10:92:5b:fa:b8:a4:63:d7:ad:23:ab:
0e:c7:4d:84:f8:27:67:52:01:28:b0:b9:cf:fd:7c:
27:a4:2e:f1:3b:94:03:37:db:71:98:2a:e3:c4:34:
08:dc:ae:c1:a6:a7:6b:82:f6:0c:a0:f7:f3:23:0a:
22:10:28:4b:bb:b8:90:14:9f:24:e9:64:eb:75:7f:
29:a9:cf:10:31:5b:3d:68:40:94:1a:96:57:5f:89:
fa:d5:85:f7:00:ad:68:14:73:17:ec:08:16:42:52:
7f:f2:15:14:ed:d2:cd:ca:f3:f3:e9:f6:c4:5e:67:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0C:0B:17:EA:5D:F1:70:17:5A:03:E7:F9:B9:ED:21:1D:C3:EB:15
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:59:b3:77:96:51:34:b6:3a:2e:d1:bf:1a:ba:79:11:0b:
6f:ad:45:8c:93:b1:79:83:40:77:70:99:b7:e1:c8:a7:a0:8a:
71:35:b4:f2:35:c2:70:e7:c5:73:f8:46:d2:07:e8:90:0e:f0:
48:30:d5:36:78:af:3e:da:fa:cf:78:dc:ea:a5:29:89:78:37:
72:c1:ab:63:c6:2b:dd:95:c6:0f:4e:da:a6:cd:2d:dd:1a:5a:
27:47:82:34:10:ed:a6:0e:88:a7:08:12:88:c1:df:5d:59:ea:
a0:70:1d:43:e4:69:c4:d2:c7:b6:a1:6b:c6:b9:c7:09:63:da:
ec:b7:53:02:90:ba:90:6b:50:9b:95:ce:33:c0:5f:1b:c7:cf:
7e:7c:95:da:1b:26:6e:4f:92:7b:3d:49:d5:be:14:11:38:93:
76:f4:8c:b9:f1:6c:39:f0:39:d1:8a:3b:d4:65:1f:1e:a8:5a:
54:1a:8c:2e:da:dc:6e:4b:37:09:54:4e:41:af:a3:7c:1e:e5:
96:d0:2b:37:07:ce:64:19:06:f3:15:87:e3:85:f0:16:9d:9c:
61:4a:3e:8c:16:08:ce:e6:65:05:18:66:e8:16:a7:cc:c6:c3:
35:52:76:96:f2:ed:63:5c:e4:0d:02:d7:8e:3a:25:5b:ba:20:
84:e5:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:49 2025 by rpki-client