Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
File: Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft (raw, json)
Hash identifier: cDbM74QBUQtrhOTFgYiXJr6+vf485QRXxC+KURhxYS8=
Subject key identifier: 24:25:25:D9:D8:5F:F7:2D:35:73:A2:33:41:F6:29:5E:4F:36:A6:52
Authority key identifier: 52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
Certificate issuer: /CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Certificate serial: 019A00DA0B4F9A01EC48615787F94493193A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 09:01:20 +0000
Manifest this update: Mon 20 Oct 2025 09:01:20 +0000
Manifest next update: Tue 21 Oct 2025 09:01:20 +0000
Files and hashes: 1: 5Hag6P9QZzNJGQQPElsAvDoZXrY.roa (hash: sbCnjoQN/zwpc81NILJvfLGG8eJWgqQYFOcEqkbBNRk=)
2: Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl (hash: eTAFpVvJ/57G8HdCFO7cGnh93DubyQgyY0j/mKR46/8=)
3: lQnsuSPRzwbhpl5HgEOQpZDD34k.roa (hash: IPjYSRDjQRK4ZxgGrRlNzR9WIDEqNLvDqZwGEGyoqM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:0b:4f:9a:01:ec:48:61:57:87:f9:44:93:19:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ecb0e85d0b7feea4a82ac9448d47c3ec0af053
Validity
Not Before: Oct 20 09:01:20 2025 GMT
Not After : Oct 21 09:01:20 2025 GMT
Subject: CN=242525d9d85ff72d3573a23341f6295e4f36a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:e0:6c:3b:98:21:4f:d7:65:e4:8f:aa:ea:
8d:5b:2b:b3:f9:21:f6:04:62:82:7c:ab:99:db:e5:
fb:44:c6:bd:b3:a5:a5:1d:bc:3d:e0:55:4a:11:c6:
bd:6b:22:76:ea:78:f0:02:c7:52:c9:b4:51:e0:66:
67:42:6b:43:9e:58:28:1e:95:5a:70:8b:a2:1d:cb:
a8:ef:71:e5:9f:7f:d6:3b:8e:53:cd:67:5a:f9:20:
fa:58:aa:24:cf:db:33:ec:1f:8d:9a:de:9d:b7:35:
c4:fb:6a:d9:6b:10:06:c2:88:30:26:48:2f:3e:98:
a1:34:24:db:90:49:75:53:e5:83:6c:2c:44:5f:9f:
1d:12:6c:96:ae:26:e7:37:a3:2d:29:94:2e:81:38:
61:19:69:99:79:2a:b5:ef:05:ca:c1:f6:72:e3:06:
88:9a:60:c1:ae:36:87:26:fd:13:12:b5:68:44:17:
e0:8e:93:e6:7d:16:3d:76:2a:8e:55:0c:39:c3:5f:
28:9e:ca:59:57:ba:a8:eb:01:f6:52:8a:52:8c:ac:
8e:c3:53:59:7c:ee:a0:52:15:d7:79:e3:01:15:06:
97:85:23:31:1a:6d:21:42:df:64:8e:1c:41:37:bd:
1e:83:86:33:f6:97:18:ec:79:e4:fc:cc:b4:ea:47:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:25:D9:D8:5F:F7:2D:35:73:A2:33:41:F6:29:5E:4F:36:A6:52
X509v3 Authority Key Identifier:
keyid:52:EC:B0:E8:5D:0B:7F:EE:A4:A8:2A:C9:44:8D:47:C3:EC:0A:F0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/db3e56-e832-491d-b530-ca4f66b09068/1/Uuyw6F0Lf-6kqCrJRI1Hw-wK8FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c8:20:e9:b9:41:48:30:a2:a1:87:39:26:79:0e:98:ce:2f:
a6:ac:58:5b:fb:40:49:52:ab:3b:2b:67:ef:51:60:10:32:5f:
eb:39:6d:7f:9e:fb:9c:db:bf:16:b2:f0:83:d6:e7:7b:27:7a:
66:01:1f:c6:2b:d0:6a:a7:79:2a:92:a2:37:8e:d6:2c:6a:ac:
38:84:91:fd:9a:24:89:3a:0f:1a:34:20:83:03:ec:bc:5a:78:
9f:ec:d4:1f:01:72:35:a9:9c:b9:a6:7e:d7:2a:d8:8f:9e:cd:
79:7e:81:09:3f:25:a8:ef:ba:8f:56:cc:a5:32:cd:cf:4b:5f:
d9:c4:01:da:06:52:39:29:de:5e:da:42:6e:82:20:8f:88:59:
f3:5a:0f:fd:f3:af:f3:85:4f:00:32:94:97:17:e5:55:2c:8b:
b6:06:84:4e:46:5d:05:3c:20:30:cb:38:d7:c1:9f:fe:4b:45:
5c:f1:46:da:31:9f:2e:41:b6:a6:95:fd:de:f0:7f:9f:10:d5:
63:31:71:9d:b5:53:f7:32:6a:23:b2:24:fb:99:f5:4a:40:44:
5b:3e:7d:15:ea:b9:d8:38:e8:c1:e3:9a:7a:84:01:1a:3a:b2:
25:96:ed:f6:f9:45:23:4e:99:ac:34:02:8c:56:e7:80:8f:cb:
36:e3:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:23 2025 by rpki-client