Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
File: UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft (raw, json)
Hash identifier: 6pFc/qlzVIPSCmXqO2X6ULrJYmV1RZi8Py75oR98u7M=
Subject key identifier: 57:A3:1A:D2:DC:ED:39:20:7E:82:FE:36:EE:79:83:A3:C2:58:19:F3
Authority key identifier: 52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25
Certificate issuer: /CN=520536fe776691837728a7fe455a732555b91125
Certificate serial: 0199FC213E4DF46180E6BC9608A7FECADA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
Manifest number: 2D
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl (hash: 4tWTxH/iKt1PHNkpIdj0DuFb2eZigYCJozOxkJWlIUw=)
2: _xpIchk0-7OcmLKE5QqAd5gFe40.roa (hash: W5sNIk34R1s/k3ucndWBk0r/EQrbVh4FhIwqizPc4NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3e:4d:f4:61:80:e6:bc:96:08:a7:fe:ca:da:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520536fe776691837728a7fe455a732555b91125
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=57a31ad2dced39207e82fe36ee7983a3c25819f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:3c:e3:e9:0b:5f:d6:db:3c:dc:ea:e6:4e:
a5:80:8f:0a:0d:03:e5:79:02:3e:bf:fd:44:4c:23:
d0:36:73:fe:2c:8d:77:7e:65:c0:c7:8d:a9:36:f8:
d9:6d:03:01:f6:0f:c3:99:ae:d1:90:13:11:ec:b0:
4e:4a:c8:00:2b:9e:86:02:a9:97:ae:eb:f3:36:c1:
bd:85:74:8a:31:15:5d:a0:ab:18:e3:fc:d5:83:ad:
f5:db:ef:ad:09:b0:69:45:72:6d:3a:a6:55:65:62:
3d:1e:a8:4c:76:5f:86:68:79:ea:62:81:13:1a:75:
db:3d:91:4b:40:69:fd:c7:e8:44:50:36:31:87:ee:
1d:ac:a5:da:9e:d2:7f:4d:54:80:a4:19:56:c4:77:
b6:18:37:5b:62:83:f9:f4:46:12:d4:5b:a0:ad:e0:
ff:08:14:1d:28:59:00:d5:71:0c:ac:80:95:59:08:
8c:f3:14:ad:ee:30:91:ed:16:0c:dc:87:6b:a7:77:
5d:da:67:ba:a4:21:32:9c:b4:19:d0:2d:f2:ce:37:
56:ab:09:50:36:c2:a3:09:16:6d:92:f8:55:36:be:
03:af:8d:1e:7d:b9:e0:7f:cf:69:08:9a:4a:34:d2:
59:2d:29:0a:6a:0a:22:7a:88:67:06:9f:e4:24:0b:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:1A:D2:DC:ED:39:20:7E:82:FE:36:EE:79:83:A3:C2:58:19:F3
X509v3 Authority Key Identifier:
keyid:52:05:36:FE:77:66:91:83:77:28:A7:FE:45:5A:73:25:55:B9:11:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgU2_ndmkYN3KKf-RVpzJVW5ESU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/238548-8d74-4fa4-ad59-58399658784e/1/UgU2_ndmkYN3KKf-RVpzJVW5ESU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:71:ea:a0:eb:72:79:a7:79:d7:09:17:9d:1e:da:d5:96:
e9:12:28:7a:b1:f9:d4:cd:e4:72:f6:67:0b:ce:45:21:ec:d0:
66:2b:67:1d:d9:ad:1e:0c:c7:78:b0:8f:23:84:a4:57:d7:40:
fb:30:f4:0c:2b:bb:14:87:21:e7:a3:b3:3d:fd:cd:7f:c0:71:
c2:9f:fc:f5:84:49:1c:1b:c1:51:37:49:43:b4:7c:ec:04:c3:
74:ba:65:7e:34:47:39:40:57:20:df:3a:fe:5f:04:93:7f:66:
a1:37:97:f1:7e:03:6d:86:77:af:b1:b0:64:14:3f:43:33:8f:
f2:be:d1:c2:5a:2b:a1:b4:dc:cd:b6:66:a8:85:59:26:34:57:
9e:5d:bf:1f:8d:0d:77:fa:70:c4:11:2e:c8:5b:5a:51:7b:9e:
ad:e5:58:aa:62:53:41:22:80:87:79:d3:ad:72:40:db:5a:d1:
37:a8:cd:b0:2c:64:c7:39:37:29:3b:5f:92:bc:21:23:b6:3b:
56:fd:8d:bf:41:39:2d:f5:e7:c2:fb:0c:e2:59:0f:8a:13:48:
76:8c:6c:22:0b:3d:aa:fb:c9:50:56:ec:e0:4d:f3:22:27:df:
cc:dd:f4:9c:b7:32:6f:3a:3d:67:0f:63:7f:84:3c:8e:fb:2f:
0c:71:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:03 2025 by rpki-client