Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
File: UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json)
Hash identifier: liWEBAIG3eiEHZK5S4TjBN5fpQn4Bx2UpYLDI2mX3Jg=
Subject key identifier: A4:F6:A4:BE:C5:D5:5F:07:51:BD:4F:D5:04:41:8E:2B:8E:BC:DD:0F
Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Certificate serial: 019A53ACC99D62C6803C4C8400497299F578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
Manifest number: 013A
Signing time: Wed 05 Nov 2025 11:00:23 +0000
Manifest this update: Wed 05 Nov 2025 11:00:23 +0000
Manifest next update: Thu 06 Nov 2025 11:00:23 +0000
Files and hashes: 1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: 8qd+Bl5e8f3JpdN0Ow4huOWx2wdvteWPWjyMGqxj22w=)
2: dUxtdXIDzjyUlYOtBFzm-wQHLuM.roa (hash: lU+saX5Y8NpUNdHr5ny3vDxig5SKi8AIgZItEb0hTg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:c9:9d:62:c6:80:3c:4c:84:00:49:72:99:f5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Validity
Not Before: Nov 5 11:00:23 2025 GMT
Not After : Nov 6 11:00:23 2025 GMT
Subject: CN=a4f6a4bec5d55f0751bd4fd504418e2b8ebcdd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:96:47:fd:f1:74:de:d2:68:f4:48:8f:77:
cb:fe:fa:60:4d:f8:42:aa:7b:cd:c0:a3:df:a4:17:
5e:e7:ed:a1:56:e7:77:01:0d:07:f6:ef:3a:d1:85:
56:e5:b0:f4:22:50:f6:c0:1b:be:97:c1:f7:82:d2:
9e:e3:b0:58:60:6c:bb:f5:05:12:08:98:1a:e9:7d:
fc:9c:e7:da:e8:1e:72:3d:7b:38:56:d0:7b:43:d0:
22:c5:d9:25:8c:55:b0:8a:e4:d3:07:63:63:46:d6:
88:60:a2:5b:44:6c:64:15:9e:74:24:81:b9:40:2e:
7d:db:87:c6:ad:b7:2c:7c:24:21:6b:7f:e6:dd:58:
e3:94:a8:05:d3:bb:8c:b8:c8:39:1a:f9:d7:35:a7:
8f:c2:1d:6a:a0:ba:00:5e:e0:90:95:ad:89:f9:e6:
c6:53:e5:c1:f0:ba:8e:22:09:cc:78:f1:9f:af:ae:
ae:c2:24:2f:25:8d:2d:f4:16:20:a7:7e:77:30:67:
ab:d4:e1:1a:45:de:71:49:c3:64:a2:6a:34:25:13:
e7:79:84:41:b0:ab:a2:94:b5:b8:cd:32:a8:77:92:
1a:67:e9:d1:ea:17:ba:7a:1a:83:bd:75:a6:b7:c5:
e2:30:f3:32:52:96:a3:ff:d3:05:1f:a4:44:88:f9:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F6:A4:BE:C5:D5:5F:07:51:BD:4F:D5:04:41:8E:2B:8E:BC:DD:0F
X509v3 Authority Key Identifier:
keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d9:a2:80:c1:14:da:f1:95:bc:f4:0d:72:59:29:9b:54:e7:
c3:9f:c4:55:f5:49:b8:e7:fc:32:f7:9b:4f:87:dc:51:29:b3:
cf:c2:55:d0:11:41:4c:05:57:8d:b4:cd:2a:6f:9b:e7:38:b1:
dc:2f:1f:1f:ee:fd:2c:9d:1b:ce:94:bf:10:3e:79:ce:2a:3e:
82:cd:62:a7:82:41:36:43:a4:06:29:17:38:75:0c:bd:25:be:
09:5e:b8:d8:a1:57:de:e8:c6:0f:77:d2:40:86:d6:af:86:0e:
71:8f:8f:74:66:c4:0c:e1:22:a2:90:9d:d5:cb:25:04:35:ed:
0c:c6:ba:05:8e:1e:7e:d9:5a:d6:11:6f:74:f1:bb:b7:f6:f0:
bc:51:57:69:17:45:1e:fb:82:ab:b2:18:21:b9:4b:96:e2:75:
12:1a:16:17:88:24:d7:85:a0:f0:76:28:57:38:e7:af:4e:d5:
bd:ef:cc:b0:90:8a:ea:08:50:77:13:83:b4:2d:0a:58:72:43:
d3:97:3e:38:6f:5c:1d:e3:71:f8:b2:f4:44:57:cf:19:bf:05:
e2:2e:fa:cc:55:13:69:42:44:bb:54:39:47:4f:0e:44:5e:1c:
d2:80:df:59:e4:f6:d7:cc:92:17:3c:84:e5:e7:b9:33:92:a0:
87:10:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:27 2025 by rpki-client