Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: mOLVcxE6D/Hg6yBn1gSMcxGHtL43DNwrv26I8ZJhsqk=
Subject key identifier: 46:2E:4D:BF:08:1A:12:04:F1:9D:85:3C:23:5B:A2:69:9E:BA:CC:C2
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019A4E86BE29328A8CB6AE016B3BE7454F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 09ED
Signing time: Tue 04 Nov 2025 11:00:44 +0000
Manifest this update: Tue 04 Nov 2025 11:00:44 +0000
Manifest next update: Wed 05 Nov 2025 11:00:44 +0000
Files and hashes: 1: DYFmv5SEYYlddrISWWXVdY1hSCw.roa (hash: TKf7tOlhVLq0cOqQ0nNkYPFgdP68RF3GWaqOQkMnAHw=)
2: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: TThWB93cfAi8naublDuBeYpaeo7z82jmQQoG6Vt58C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:be:29:32:8a:8c:b6:ae:01:6b:3b:e7:45:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Nov 4 11:00:44 2025 GMT
Not After : Nov 5 11:00:44 2025 GMT
Subject: CN=462e4dbf081a1204f19d853c235ba2699ebaccc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:5f:4b:d4:79:cd:5c:00:09:8d:02:15:29:
a3:56:37:9a:69:1c:88:92:9e:31:9b:43:c3:07:5a:
0c:60:2d:df:19:38:2b:dd:57:40:80:d1:31:27:9b:
17:7e:38:e1:5a:21:eb:2f:90:ef:53:2f:4b:26:11:
4c:99:58:54:9a:eb:5c:cb:8a:78:b6:d4:6d:09:fa:
d7:f4:27:01:de:19:4d:23:07:e0:bf:8b:2c:c4:1b:
fd:26:ad:26:6e:f7:01:55:4b:65:75:b8:02:1c:fc:
6b:c3:54:10:f9:45:8f:08:ec:78:33:0f:6a:fa:18:
12:da:de:3f:97:cf:a9:a9:4c:f6:f0:9c:d3:30:62:
d8:6f:03:61:93:28:6c:66:ff:d3:8e:b1:c6:1c:6f:
75:d7:34:9a:6e:23:0a:45:67:33:23:25:85:34:f8:
4c:46:f0:ff:46:a0:c7:f8:d3:53:cc:4f:e2:bd:ee:
20:22:fd:06:e6:4d:4d:08:a0:5d:53:4a:fb:2e:d1:
3e:95:cb:07:7e:fe:bc:e1:36:c3:b8:31:21:0d:71:
d0:7e:d8:d8:e7:8c:76:00:8c:d5:e7:8b:45:fd:6e:
2a:12:4c:0f:17:1d:74:ef:ca:f5:67:ff:d8:a2:64:
dd:66:ee:6c:37:f1:dd:68:21:6d:9d:8d:7d:1c:16:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:4D:BF:08:1A:12:04:F1:9D:85:3C:23:5B:A2:69:9E:BA:CC:C2
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e2:ce:f4:87:db:08:40:83:ba:d1:23:27:c5:ca:69:86:e9:
69:0a:66:f0:47:92:02:e5:ef:44:cf:a6:09:2d:97:fe:2d:b2:
ab:b5:36:51:95:93:8c:ce:47:1a:36:8d:5d:4a:b2:e9:d1:27:
2e:84:a5:19:a5:e2:0f:6c:cf:f4:a3:5a:c4:b9:39:d2:b5:fa:
31:48:37:24:ac:43:26:93:ac:62:54:3f:28:9c:5c:57:cf:36:
0c:56:43:4d:19:fc:90:9d:b9:56:c8:65:6b:45:8f:e6:3b:02:
8f:ec:5a:9f:c0:01:ac:cf:54:61:00:4f:54:0b:0f:09:4b:81:
a7:04:cb:0e:dc:71:c5:33:78:b0:6c:0a:22:af:f4:77:5c:22:
f3:1b:af:bf:f8:c6:e4:80:f0:e7:3f:7f:09:24:45:bb:b7:50:
3b:9c:af:3d:1b:e5:4f:2a:45:fc:be:82:2e:e5:51:5e:43:0e:
5d:9b:32:e8:f3:06:cd:36:b0:7b:5f:79:c6:fd:3b:5e:07:78:
c2:8b:a7:8c:4b:d8:5a:78:0a:da:f0:d4:1f:08:9b:0c:88:3f:
0e:d1:1e:d5:c9:d7:7b:30:fa:dc:59:2b:1a:ae:b2:18:4b:9f:
eb:5f:1d:b4:8e:9a:25:38:e9:55:a8:7b:d3:3d:15:2e:18:17:
36:a1:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:04 2025 by rpki-client