Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: N7zbQMoRpPhvLANRuzHP5nFFXqV/CQkAxo7n3EMtfYQ=
Subject key identifier: 2A:4F:B8:A2:08:6D:7B:BA:C1:55:5B:BF:91:AB:D4:53:8E:4E:16:4F
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 019A01B4F93E1DC2CEF3AF4DF0F9A88F357F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 16DF
Signing time: Mon 20 Oct 2025 13:00:28 +0000
Manifest this update: Mon 20 Oct 2025 13:00:28 +0000
Manifest next update: Tue 21 Oct 2025 13:00:28 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: C44Y6r6bhU1QMoUVBF85oPRM0bbk/18NUtoVMlNSqXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:f9:3e:1d:c2:ce:f3:af:4d:f0:f9:a8:8f:35:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Oct 20 13:00:28 2025 GMT
Not After : Oct 21 13:00:28 2025 GMT
Subject: CN=2a4fb8a2086d7bbac1555bbf91abd4538e4e164f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:f4:07:4b:eb:37:79:54:7e:3c:9f:6d:e1:
61:34:10:76:45:5c:20:f0:4b:75:ad:0d:e8:6b:db:
13:36:90:76:99:13:78:41:0d:8a:30:6e:10:62:b2:
fc:61:22:50:e3:14:52:83:30:5a:dd:58:fd:c7:79:
5b:f8:c9:3a:c6:e8:a0:8b:6b:83:36:d0:e1:91:2a:
16:5a:b2:bb:e7:11:c0:bd:9f:c0:b4:dc:5a:a5:4c:
9a:86:ad:a1:ad:02:b7:83:b7:41:e0:60:52:90:b1:
3d:f3:e0:c5:f9:ad:f8:4f:7e:27:ba:4b:87:1a:28:
5b:c6:f3:4e:5c:a8:60:f8:6c:15:ea:4d:24:a7:29:
a0:dc:0a:fd:05:39:ca:67:7d:4a:af:ac:bb:06:bb:
1a:b0:f9:89:74:3a:1f:04:a0:28:a9:7c:34:43:3f:
78:9f:25:de:34:11:77:a3:4f:13:94:2d:80:f2:7c:
08:00:1c:97:cf:23:e7:fa:74:67:9b:3b:f1:f1:a3:
ed:8d:47:9a:5e:24:4d:20:3b:eb:0a:f1:e5:53:61:
ee:22:2a:a9:ba:27:6d:67:fd:11:ff:55:09:62:fa:
85:0b:5e:c1:3c:62:7e:b9:ba:72:71:df:e1:ce:ba:
96:45:36:e1:bb:49:f7:05:33:2f:11:9d:ea:e1:7d:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4F:B8:A2:08:6D:7B:BA:C1:55:5B:BF:91:AB:D4:53:8E:4E:16:4F
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cb:73:4b:e0:7f:1a:43:d6:89:c2:3d:de:9f:f6:6c:da:8f:
ae:ca:57:9a:ae:a6:d7:39:dd:aa:84:74:ee:ed:2a:dd:74:16:
a6:10:22:32:07:6b:c4:7e:e8:03:65:78:61:81:2d:26:07:93:
e3:23:fd:de:13:06:7d:24:88:53:77:3c:ba:93:d4:30:9c:d5:
ff:be:5f:6a:dd:7a:30:f5:2b:3b:51:dc:e7:bb:83:58:b7:f5:
20:fa:0b:2c:49:b5:d3:d8:c9:7f:f9:d7:e5:0b:d3:cd:c1:53:
8c:71:0b:e5:e2:7c:2f:96:af:d0:26:26:51:6e:5b:3f:76:69:
fe:e2:b1:3e:83:70:af:57:31:3a:4f:e8:69:fd:c3:c5:9a:68:
cc:5e:c7:cd:43:0f:0b:56:7c:f0:a5:e1:0c:46:c5:cc:3c:52:
bb:92:ee:57:5d:5b:ac:27:2c:b0:cc:45:24:1f:ef:b1:fa:15:
d3:a3:ba:a4:b8:5a:fc:72:6f:8e:03:d8:8e:ed:a4:27:8d:6e:
74:55:7f:b7:59:c7:a4:c6:8f:17:0b:1b:39:b2:7f:14:15:1f:
e7:51:18:be:50:0a:28:e9:d6:01:29:b4:b3:46:c4:b8:85:da:
7d:33:0c:d0:b0:30:cc:8d:79:33:00:23:79:24:08:3b:3e:75:
60:6f:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:06 2025 by rpki-client