Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier: 3U7IBBELOQE4z/gYVcfndoaUJE4H7bq9EdxpMeDq+y4=
Subject key identifier: 82:74:4F:71:F0:0E:D9:F0:8E:54:1E:47:A7:3D:45:81:F9:79:DE:3E
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 019A4F62BCFC538AA5255935D7CDBC819222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 15:01:02 +0000
Manifest this update: Tue 04 Nov 2025 15:01:02 +0000
Manifest next update: Wed 05 Nov 2025 15:01:02 +0000
Files and hashes: 1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: 7mkmYIFd33bQuZkEo/RWVK9p2QhGOMwYN1T1L7IGhts=)
3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:bc:fc:53:8a:a5:25:59:35:d7:cd:bc:81:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Nov 4 15:01:02 2025 GMT
Not After : Nov 5 15:01:02 2025 GMT
Subject: CN=82744f71f00ed9f08e541e47a73d4581f979de3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:2f:62:92:bd:7a:d4:04:2e:46:4d:15:27:
8d:1b:28:ff:1c:f7:15:51:f7:19:15:5d:f7:11:2d:
4c:c9:41:d2:26:f0:9a:71:a9:d1:0d:2f:cd:87:e1:
30:f7:80:b5:91:1a:77:82:fe:8d:f7:47:84:d3:09:
11:f6:9d:a1:8d:a0:41:d9:bd:c2:f5:33:60:68:b9:
10:0e:1c:b6:8f:aa:54:a8:d2:81:f3:64:ca:b0:3b:
17:18:d9:b0:42:79:04:ec:86:ff:91:dc:74:af:88:
dd:a8:11:ec:c6:b6:86:6b:a9:07:ca:a9:ba:2b:3a:
64:20:21:ed:4c:43:fd:05:fa:dc:8b:1f:2e:40:83:
f0:5e:e3:c8:4e:38:a8:5a:1e:57:71:f3:52:3a:89:
9d:4c:e1:92:8b:cc:8d:05:ea:68:f6:de:8d:ef:e1:
cf:00:6f:f7:aa:3e:22:66:82:9b:74:e5:92:27:6b:
b2:ad:76:b4:84:27:c8:f3:2e:57:4e:5e:1d:92:e3:
d3:62:19:fd:f4:f9:44:e2:95:5b:40:8f:02:cc:87:
55:0f:02:3f:5f:16:fb:46:a2:b1:6e:92:de:57:96:
12:4f:ec:65:05:16:fd:ef:ec:80:c3:d7:a5:a3:85:
35:ab:b6:f9:20:3a:4e:e8:bc:b6:ce:85:f0:4e:22:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:74:4F:71:F0:0E:D9:F0:8E:54:1E:47:A7:3D:45:81:F9:79:DE:3E
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:7a:6e:94:e4:aa:55:6f:c0:44:2f:ef:6e:f9:ae:ec:72:
36:2e:c4:64:bd:bb:78:c9:3e:ff:1f:9a:da:d8:8e:e8:63:58:
db:56:3d:39:be:66:d6:fd:69:20:68:96:c1:e4:bc:55:6a:d5:
ff:a1:7c:1e:a9:39:7e:b0:d6:08:3f:a8:99:da:e2:91:cd:9a:
99:a6:7b:6f:14:6f:58:3a:86:c8:5a:e3:f4:dd:3b:9f:2a:c5:
2f:21:74:73:2d:5f:2c:97:ab:c4:65:38:7d:2c:7c:55:c1:85:
4b:0f:09:ce:e2:ea:40:85:8e:3d:c9:80:62:f5:35:02:79:e0:
af:cd:86:c6:32:e5:e4:52:b7:2a:ca:b0:91:b7:f5:d6:53:95:
24:8f:13:0d:72:7a:e5:70:7c:a8:bd:e6:2d:02:fb:4d:f9:eb:
8d:4e:99:a1:39:7c:3f:2c:6a:00:83:34:7d:2e:c1:d1:3f:a1:
5f:4c:ca:22:75:ef:48:e9:b5:a6:e4:0a:c0:36:54:53:0c:26:
5b:60:57:54:a9:97:34:57:c3:17:46:fc:1f:d4:66:ab:0b:4f:
3f:2c:09:c9:4d:2a:09:26:0c:46:45:65:c3:4b:0d:69:ae:85:
a4:c5:03:8c:35:76:78:59:e7:8e:97:e2:0d:30:80:65:06:87:
36:e1:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:38:42 2025 by rpki-client