Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json)
Hash identifier: VvEvQ7oKzPqVldPJ9nkQsQFQnXOlJOGBv8QNbTk/YSk=
Subject key identifier: 7E:7B:D5:C1:B6:53:A8:3D:A5:BA:66:9D:29:9D:5A:12:78:74:8E:82
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 019A006C88E8DAD76B24C535420431687208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
Manifest number: 1427
Signing time: Mon 20 Oct 2025 07:01:44 +0000
Manifest this update: Mon 20 Oct 2025 07:01:44 +0000
Manifest next update: Tue 21 Oct 2025 07:01:44 +0000
Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: MR3luksnKo1CxAWxrVFCRk0cDsuTmFZgMx+LtTENOBk=)
2: ysJps6pTqYBp8hRsJvvn2nSnB6Y.roa (hash: xFEzrUJlVVBWEtFecNObcV0TMloS/XizxOFPtUYtswE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:88:e8:da:d7:6b:24:c5:35:42:04:31:68:72:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Oct 20 07:01:44 2025 GMT
Not After : Oct 21 07:01:44 2025 GMT
Subject: CN=7e7bd5c1b653a83da5ba669d299d5a1278748e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fe:cc:4a:8a:81:00:98:8d:a1:2b:1d:12:c7:
f5:84:3d:c1:e3:be:17:35:bd:7e:08:da:db:6f:98:
06:0a:5b:9b:50:af:a7:e6:b7:e9:3d:0b:4d:03:a5:
7c:3d:da:25:12:83:c1:eb:77:e8:c0:5b:73:76:c5:
a1:25:db:46:bd:17:c4:f2:8f:cf:de:8d:46:78:3d:
01:0b:a0:5c:9d:8a:99:2b:f9:99:af:43:9d:ca:d0:
7f:ad:46:c9:26:0f:18:d5:7b:c4:d3:3a:6c:f3:32:
02:a0:2e:c2:d0:7d:de:f3:52:60:99:02:ed:cf:d4:
92:b8:94:2e:3c:7e:8a:d0:a0:57:91:40:c1:f1:e6:
21:49:ec:ea:5e:0d:b3:f0:6e:98:57:40:0e:a0:c3:
f2:2e:c4:ca:96:9f:d8:32:d2:a6:52:40:45:9e:f5:
f6:5c:04:ee:23:7b:a7:56:f4:86:6c:6e:0a:5c:1d:
6c:00:e3:14:2b:b2:1b:9b:db:4b:dd:79:4c:f1:aa:
f7:12:77:cf:3e:28:e1:06:41:fd:0c:67:fb:00:c4:
d8:5e:55:1e:93:3d:f7:e6:55:ff:6d:11:73:61:04:
4c:04:6a:3e:b8:9d:58:96:cc:26:5c:08:ca:d3:25:
11:51:c5:a7:b6:05:4b:85:10:c7:62:58:a1:0f:d3:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:D5:C1:B6:53:A8:3D:A5:BA:66:9D:29:9D:5A:12:78:74:8E:82
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:53:3b:95:70:68:70:21:58:44:54:48:c7:f1:1b:fe:9f:6b:
e7:c0:80:9e:c4:e2:1a:f8:1c:92:45:e1:84:82:ff:17:00:5a:
15:3a:49:cd:15:59:8c:77:e1:6d:0e:76:9b:07:e7:f1:50:42:
0f:02:1b:85:d7:7a:fd:ec:24:b4:3f:13:80:45:5d:30:ad:c3:
ee:b2:f2:df:9f:26:0c:43:e2:be:05:0d:33:29:e7:c9:6c:82:
9f:bd:b3:e1:02:58:26:2f:03:a6:63:13:f3:ef:50:e4:b0:ea:
5a:1b:2f:a2:c0:75:8a:7b:06:df:a3:56:b0:7c:1d:7b:12:5f:
d6:66:40:e4:60:93:1d:6d:d2:a4:94:6e:94:33:37:e1:79:41:
93:f8:da:66:61:d0:f5:02:38:c7:1a:b5:9c:2c:b2:51:c2:62:
35:b5:84:13:5b:7a:5b:a6:3c:9e:c3:b5:ef:81:af:1a:fb:a5:
cd:35:24:13:e3:7b:75:01:5f:a5:a7:1c:0d:ff:b0:d0:3d:b6:
54:f7:4e:3a:ba:27:6d:0c:22:90:94:d0:09:c4:f1:d1:32:52:
c7:c9:cd:2a:75:be:02:66:fc:d6:d2:0b:4b:2c:01:74:89:1f:
68:b6:d3:08:15:c4:0b:39:10:e3:ef:ef:28:f0:07:0d:48:47:
9c:b7:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:54 2025 by rpki-client