Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json)
Hash identifier: zkkeaMNmM2eKB7nHY/3bcd6VoZ1sqax5q3HzSU/rv+E=
Subject key identifier: BF:ED:4A:50:46:D3:5F:29:AC:D4:D5:70:F0:09:53:D5:E9:A0:C5:A2
Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
Certificate issuer: /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Certificate serial: 0199FBEBB73CCF735391AA83D7195FD062AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
Manifest number: 1443
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: MggUNL8VW9yE4LnaTyr5YJxrDwU.roa (hash: GpA5vo0L4EKCpZl/rQZR5bRixQFok1LnqW2Xg8KUiaQ=)
2: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: bFt9haDlol791yRnzaHQjT5Z2sjXforSr3hhxCOu9Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b7:3c:cf:73:53:91:aa:83:d7:19:5f:d0:62:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=bfed4a5046d35f29acd4d570f00953d5e9a0c5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:fd:12:1b:42:72:5e:71:5a:a7:06:13:7b:
13:52:47:65:68:3b:04:fd:7d:b6:6d:f5:08:01:28:
87:db:8c:2d:54:a6:07:11:72:0a:2c:09:6c:69:ae:
a9:ee:72:e7:1c:5b:62:ae:5e:2b:09:58:9f:ce:96:
a3:05:65:28:62:25:17:76:81:98:44:22:16:ba:95:
e0:12:ea:16:db:9e:17:4b:c3:2c:6a:97:1f:a1:9e:
e3:11:43:c4:6f:cd:03:a3:e8:32:fe:97:dd:ee:59:
c7:c9:c1:ce:6b:50:3b:94:6a:b9:9c:b4:da:e2:8a:
5a:ab:15:6e:05:78:19:dc:90:3e:2c:aa:dd:79:8c:
74:d2:49:b5:04:8b:2b:0e:1d:f2:eb:c2:18:be:87:
22:f8:b2:6e:73:8a:bc:07:34:3a:4d:1f:ad:b4:22:
60:13:c3:ad:c5:c4:23:19:91:f7:72:ca:50:1b:92:
e8:e3:2f:13:db:ac:80:56:94:c2:ca:a3:2f:ab:f6:
58:1c:30:19:0f:b8:af:00:ce:45:5f:ad:cf:16:8b:
52:d0:93:93:a8:c8:5f:30:41:39:57:c0:6f:c7:f0:
36:07:51:cc:ec:1b:6e:0e:5a:fa:8c:dd:c5:a0:9f:
fe:79:49:97:f5:fe:19:e6:9c:11:0a:de:65:ba:ef:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:ED:4A:50:46:D3:5F:29:AC:D4:D5:70:F0:09:53:D5:E9:A0:C5:A2
X509v3 Authority Key Identifier:
keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5f:9d:3f:7c:de:61:26:98:c9:f0:59:fb:39:03:c4:6f:65:
07:54:f2:9b:79:a4:45:5d:b6:7e:92:82:51:6a:40:04:1d:bc:
e0:92:d2:f2:c6:99:25:c2:2d:1f:84:e6:6d:69:3e:a0:c4:66:
60:17:25:c8:5a:e7:c7:03:92:4e:f1:01:cd:14:a6:b2:74:44:
07:5a:14:ea:23:ee:d2:0f:06:5a:f9:7c:9c:d1:8c:33:19:5f:
c9:95:c2:9f:83:a8:dc:b1:49:ac:5f:7c:fe:ad:59:0f:e9:ef:
b2:aa:db:ec:89:dc:33:35:15:aa:e9:69:c7:b1:f1:6c:15:d2:
b9:07:ca:31:8d:4f:35:e0:f5:c0:a4:21:73:7d:8a:22:a2:c8:
d7:5c:be:d0:2c:31:eb:fd:5b:a7:e7:a4:cf:b9:21:9e:76:c0:
14:7c:cf:e5:eb:ab:27:9c:1e:ea:ca:91:2e:b5:ab:b7:cc:24:
f9:fc:c4:01:f5:08:2b:a4:ff:7c:69:9d:9a:1d:c2:30:24:1b:
80:8d:24:5c:74:f6:9d:c0:00:04:ae:ab:7e:e8:f3:6e:c4:f5:
d5:4c:1b:e2:b4:41:0b:52:ec:46:26:aa:bd:ee:e6:ae:16:9a:
5f:d1:1d:ea:10:8c:7a:b9:5c:a3:ca:0e:fb:e9:11:c2:6d:fa:
96:0f:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:16 2025 by rpki-client