Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier: /IBdDuWMbZEf4Z1M5iMjTzI7z7bYpZwhWIy3kwf9K7A=
Subject key identifier: D2:45:4D:D9:C4:4D:A5:E5:61:77:56:0B:4F:28:12:83:2B:D8:73:F8
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 019A4F61FD83EDAFF23C7759C26BFE4BCD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number: 031C
Signing time: Tue 04 Nov 2025 15:00:12 +0000
Manifest this update: Tue 04 Nov 2025 15:00:12 +0000
Manifest next update: Wed 05 Nov 2025 15:00:12 +0000
Files and hashes: 1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=)
2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: hwjw+i7Xz4IJcLuNtCpfe5bJShC40Ka41JKFZnx/Mws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:fd:83:ed:af:f2:3c:77:59:c2:6b:fe:4b:cd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: Nov 4 15:00:12 2025 GMT
Not After : Nov 5 15:00:12 2025 GMT
Subject: CN=d2454dd9c44da5e56177560b4f2812832bd873f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:18:3f:13:14:db:09:84:c8:80:61:3a:9b:
51:08:1e:59:c1:53:bc:51:91:a7:28:50:e0:6c:9c:
2f:00:a8:53:ac:63:6e:cd:61:30:68:fb:ba:f0:5f:
66:c9:69:ed:1e:5e:60:6f:23:3a:59:6c:74:9b:1b:
b3:a6:62:1b:99:5c:d3:cf:6a:8b:48:77:e3:75:9c:
f7:4b:a8:6d:b6:98:d8:f4:fa:a9:5f:5e:33:a5:2b:
1b:d1:c7:fa:fe:45:65:fa:e9:f8:5e:65:aa:40:f1:
47:a6:64:1d:77:04:b2:aa:af:7b:44:ed:de:b6:0c:
b3:a0:d0:42:c9:b5:3b:d5:b3:0e:28:09:65:81:e5:
9c:75:37:2d:20:f7:4e:a0:c5:4b:1d:1f:c0:2e:f0:
80:f8:54:be:e6:5a:ed:5f:e2:b9:45:b6:51:97:4c:
51:87:67:b4:4d:38:77:4a:5e:28:b3:a8:6b:25:9c:
80:68:cc:07:8a:c1:69:ea:bd:2c:9f:d0:6d:31:bd:
2a:60:63:0e:b1:92:84:4b:bd:51:92:d3:d0:29:50:
00:b2:2e:7b:c3:0e:23:ba:66:7e:87:27:27:92:7d:
91:46:8b:91:01:ec:bf:fb:c2:92:43:ab:a4:d8:31:
a2:89:be:60:49:e4:5b:e7:2c:24:6e:48:63:b0:57:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:4D:D9:C4:4D:A5:E5:61:77:56:0B:4F:28:12:83:2B:D8:73:F8
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:37:7b:53:5b:5e:1d:1f:e8:80:b6:2f:b6:5f:0a:ba:10:b7:
5d:b6:12:34:df:f3:82:63:e6:1c:e5:82:91:66:b1:3a:29:12:
ee:8c:b9:a1:de:d2:3c:03:b4:70:4a:e0:c8:5e:96:cc:c5:90:
d6:db:84:00:24:a7:64:ce:e9:07:93:ac:52:60:44:0b:fd:95:
71:4f:68:84:af:66:13:91:a3:05:58:87:36:e2:78:a8:de:60:
a3:de:bb:8d:3c:89:1e:0f:14:5f:c2:14:8c:cf:1e:bc:cb:de:
7d:d7:20:8d:23:d1:b1:60:70:e4:15:42:76:cb:59:c8:fd:e5:
cd:65:f3:b4:39:18:e1:3f:42:f1:70:e3:8b:75:6f:7f:9e:b7:
4c:ce:cb:e4:dc:7a:bb:98:99:cb:d9:81:24:96:cc:b7:57:79:
d4:21:ca:f0:4c:4a:5f:18:b6:4c:ea:2d:d2:db:67:f0:4b:7b:
61:21:40:3d:d4:06:cb:a6:16:3c:9d:45:3a:23:ad:4c:ff:eb:
5d:e2:6c:1d:23:85:ea:ab:7a:67:a3:b3:0f:1c:31:25:ed:2a:
b0:51:7f:64:04:e2:c6:65:63:99:e4:9a:fc:05:3a:29:24:1d:
c0:99:da:2f:6f:73:14:62:58:d5:7f:7d:0e:e8:36:1e:8e:92:
a7:e2:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:18 2025 by rpki-client