Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: dYuxfKQm4RnDa70tEIZ/TpM5UgSxAYhymcbgkKnQ8X0=
Subject key identifier: 42:D8:F4:65:A2:5F:7A:0B:73:E7:56:68:1D:43:6B:1E:81:53:F0:0F
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 019A5074E5E71DCA9AE373F29FA43F97F8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 11D8
Signing time: Tue 04 Nov 2025 20:00:29 +0000
Manifest this update: Tue 04 Nov 2025 20:00:29 +0000
Manifest next update: Wed 05 Nov 2025 20:00:29 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: 2UVsGPVZkc3AjF/L/lfk1tR7gVgbt0R56q5lBYPAQpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:e5:e7:1d:ca:9a:e3:73:f2:9f:a4:3f:97:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Nov 4 20:00:29 2025 GMT
Not After : Nov 5 20:00:29 2025 GMT
Subject: CN=42d8f465a25f7a0b73e756681d436b1e8153f00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:24:53:3e:d0:89:fb:77:32:a6:3b:86:fb:
dd:00:d5:fb:61:4b:4e:3d:1f:a3:b4:90:14:8c:ec:
fc:17:e2:55:fb:bd:cd:54:9c:1f:5f:4b:01:87:1c:
b3:77:a3:87:1e:90:56:82:6f:39:00:61:87:8e:37:
0f:1e:4a:ee:5d:5b:9d:3d:75:fd:7d:90:8c:c3:e8:
a6:90:0e:7a:40:38:58:a3:d2:10:31:50:2c:6d:14:
a5:01:9c:c0:c6:78:d2:fd:21:d8:c2:de:cf:91:c1:
88:02:58:59:d8:81:f8:42:13:24:35:68:1d:61:99:
c6:5b:18:1e:63:23:3e:10:cf:cb:06:b1:7d:27:fb:
17:a7:1e:b3:56:40:5f:d5:99:7c:94:d1:33:9f:97:
2d:8d:e9:b1:3d:71:34:73:82:19:76:92:ac:7c:6c:
96:fc:c5:41:6f:a8:a4:be:24:c8:3f:64:31:1b:35:
f5:29:73:6d:9c:4d:74:a2:9d:46:c4:62:39:a9:76:
78:70:bc:b5:9c:2c:11:0c:7f:3e:d1:66:c6:27:d2:
b9:5d:38:03:5d:d8:3e:cf:3e:3d:22:5e:98:bf:78:
bc:d4:07:94:07:6a:d8:10:30:10:15:a1:ef:6f:61:
fa:03:5c:c7:a5:6b:c2:f3:08:c7:0c:54:01:da:18:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:F4:65:A2:5F:7A:0B:73:E7:56:68:1D:43:6B:1E:81:53:F0:0F
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1e:7b:4e:92:8d:38:e0:6e:c2:cd:8d:e1:c9:ac:9c:51:e4:
66:9c:d6:9a:f8:92:97:97:a5:3d:bc:2a:bb:d8:f2:de:ed:f9:
09:07:e0:50:51:6b:ec:bc:46:86:6f:56:99:4f:f9:f9:1f:24:
68:a8:96:3e:1d:6f:a2:b4:14:6a:69:d5:23:4c:a3:08:dd:67:
af:ac:9b:63:52:60:ae:60:c8:9c:c0:4a:eb:bb:49:32:d9:f6:
c7:d5:d7:ec:90:ca:2e:72:ce:c1:51:d3:fc:98:7d:7b:12:80:
09:34:af:2b:c6:9d:1f:e8:71:7d:a2:94:c3:ea:78:1d:ff:8e:
0e:ab:4b:3d:32:9f:af:d7:b4:9f:ce:80:5b:f3:08:86:7c:30:
f8:39:fd:b2:45:51:47:72:ed:a0:03:cc:ed:0f:2c:db:81:8d:
a2:cf:eb:07:52:26:f7:c5:74:49:28:c1:2a:56:9e:2f:3f:3f:
25:cd:3d:74:e1:86:15:3b:1f:16:ea:cb:d7:04:ff:92:3a:16:
cb:d1:a6:e9:86:a1:24:f5:6d:2f:9c:9d:46:da:d6:20:96:db:
0e:66:e5:75:1f:68:e8:51:d5:6f:c1:e6:02:6c:10:8e:42:a3:
d6:f6:ba:00:6a:c0:21:6c:46:22:70:fa:78:4f:4b:24:dd:7b:
0c:6b:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:13 2025 by rpki-client