Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File: UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier: aMBzXoVcV/epKWiHRrXam/UcOGHeIsbD0PJR3zFtH6k=
Subject key identifier: AA:FC:8B:6A:DA:E9:6B:75:68:E5:CE:1B:4E:6F:A2:AF:FA:DB:9B:71
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial: 019A5187707AE94C2642A621408FA11023BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number: 109A
Signing time: Wed 05 Nov 2025 01:00:21 +0000
Manifest this update: Wed 05 Nov 2025 01:00:21 +0000
Manifest next update: Thu 06 Nov 2025 01:00:21 +0000
Files and hashes: 1: 8g7txje9SoqKQ2otzBwN4bLks6E.roa (hash: jScybjiDRqy1KfNxgfGU+W1leoiKzswBB30SIf7izkk=)
2: E4EhM0-kA25MP39S_T3GJCpO3Pw.roa (hash: hTsswn0ssoYNPfeB4crcap6/QoIOzl9xyRnuZFRerT0=)
3: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: 7Tqz1Jtjfh1ahex7t/bmVsuFWGIURx9kxR+8ZAVbbRM=)
4: XAWoF1o6RF-O0CnxEu5_WiGXOA0.roa (hash: HOK/I+6RekhxtoM3dVSYk41KWy3U6Z5NuhquO1H0w+A=)
5: xRvop4eDwIlWec9OLfdUtV2OZS4.roa (hash: dMqiD2K0LVdcRyi1ti46JUn48ZtCTxuc9WQCXxg9omI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:70:7a:e9:4c:26:42:a6:21:40:8f:a1:10:23:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
Validity
Not Before: Nov 5 01:00:21 2025 GMT
Not After : Nov 6 01:00:21 2025 GMT
Subject: CN=aafc8b6adae96b7568e5ce1b4e6fa2affadb9b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:29:c4:db:52:ea:14:77:ce:74:6f:9e:1a:
cd:6d:27:fc:d4:24:ce:5e:30:a5:28:48:fa:24:ff:
0f:5d:6a:dc:c3:6c:ca:0f:10:9f:08:f7:4b:f0:fe:
ce:22:22:2c:5d:88:49:1d:75:cc:08:44:fe:a6:2e:
7f:92:b4:d5:b4:1b:14:2e:42:ca:86:95:60:6c:2e:
bc:fb:82:08:7d:9d:ce:24:ee:5d:69:52:4f:b8:84:
1e:4f:d7:2e:bf:42:c2:c0:84:b8:2a:4f:fe:1b:8b:
76:e9:0f:dd:79:2d:36:67:47:e1:16:a0:de:70:06:
50:63:33:08:1c:54:ac:fa:eb:cf:1d:8d:fc:4a:f9:
f4:d5:f4:66:e9:47:ee:44:cf:4a:97:02:b8:b1:52:
2c:4f:74:14:3f:2f:13:03:b9:d0:f9:2d:47:2c:ad:
6d:c9:11:62:bc:03:60:f5:be:c3:e7:29:e3:76:41:
44:c6:66:77:1f:e7:d4:53:97:32:b2:d5:08:97:67:
e0:19:5b:40:7d:b9:18:46:38:88:ce:8f:4b:d3:3d:
fc:aa:27:40:70:df:33:f1:14:6e:7a:20:a2:10:71:
56:e0:b5:02:6f:f8:41:9d:78:0f:0d:0b:8e:54:26:
64:f3:31:6a:41:73:82:6c:53:df:77:b8:2d:79:7f:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:8B:6A:DA:E9:6B:75:68:E5:CE:1B:4E:6F:A2:AF:FA:DB:9B:71
X509v3 Authority Key Identifier:
keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:8b:48:f5:71:02:a4:a2:63:2e:86:8d:10:40:25:d1:df:
c8:d1:20:49:70:04:78:89:51:04:fa:5e:cf:fd:b2:d3:c0:16:
99:3a:2e:4b:78:98:35:f2:2d:69:06:0c:27:5d:45:52:93:8e:
52:16:da:cc:ae:f6:3e:d2:a1:e1:f2:67:ac:1e:a4:8a:c5:6c:
cf:56:5a:9b:c2:51:04:3f:17:93:a3:95:33:d5:37:e4:d0:b9:
00:f8:91:fe:09:52:11:54:14:bd:02:8f:c7:fa:1a:f3:d6:b2:
96:88:71:b8:b4:b4:f8:8e:c1:12:c0:f6:0c:b7:22:9b:57:55:
02:ee:c0:a1:6c:1c:85:3d:60:7b:4d:ef:6f:94:8f:58:c8:e5:
6d:21:41:70:24:23:bd:b9:c5:d2:70:1d:00:65:21:5b:c8:83:
77:dc:a1:98:59:58:e0:59:59:b4:4f:b2:78:9d:82:3d:c4:38:
22:7e:8b:6b:a4:8c:78:a8:37:3f:fb:55:2c:ff:72:d5:2a:94:
0a:42:ad:a8:9b:b7:2a:14:4b:9a:cd:6d:62:5d:ee:6f:10:d3:
20:8c:f9:17:90:27:d1:93:47:13:e5:39:d8:05:75:dd:ec:1c:
07:0a:22:3c:c1:f8:c4:56:4b:22:c6:ce:72:f3:16:f2:5b:8a:
25:57:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:28 2025 by rpki-client