Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier: qnhyGXxyTdvnrjSgahyAUpeOu6mVVaJ7HqraxQhlgcM=
Subject key identifier: 69:0D:76:6F:29:DB:C4:C0:8F:A6:0A:C1:52:46:3E:62:BD:5E:7F:9F
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 0199FC217F91584C69E0AAA057FBC1DECE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number: 107D
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: fSQ8en9QaXBM9MQchroM+sT1lE4W18JX2N1+K+++M7k=)
2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7f:91:58:4c:69:e0:aa:a0:57:fb:c1:de:ce:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=690d766f29dbc4c08fa60ac152463e62bd5e7f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:bf:61:2d:91:ac:d0:0c:3f:10:b3:5a:c1:
bd:5c:15:75:9f:3b:48:08:74:00:d3:65:b0:ee:41:
0d:34:7a:42:eb:30:45:dd:32:a1:93:3f:a0:2c:38:
0e:fa:f4:01:51:e4:6b:6e:60:82:6a:ed:1d:58:00:
50:3e:84:de:03:2a:93:22:a7:fd:fe:80:cd:9b:7a:
c6:de:df:c8:9b:cb:1f:6c:f2:59:41:ef:61:38:32:
8f:59:9e:c7:f5:21:9e:22:c5:29:39:71:5f:72:fd:
ee:3c:d7:69:d2:ea:9f:8f:cb:ec:cd:d8:66:d6:69:
e8:77:d9:20:93:55:93:1e:13:79:85:c0:af:63:3a:
f8:72:63:d7:c3:72:13:0a:10:66:c7:19:fc:b1:56:
07:97:72:41:d1:0a:d1:dc:9a:c7:14:8d:24:c2:f5:
c0:ef:c9:73:81:e7:e1:85:75:3d:43:7b:ff:a5:19:
ea:86:1d:09:35:d5:09:5d:f4:34:17:cc:b3:bb:1d:
f0:bc:06:36:ed:18:30:94:7b:a3:74:27:56:fb:a7:
19:88:25:c0:d9:e7:e1:5c:0a:8f:15:14:65:ab:d5:
49:f4:9b:23:98:03:f3:a4:c2:cc:67:57:09:17:d7:
ff:04:e6:66:2b:68:41:aa:43:97:00:e5:d3:87:7b:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:76:6F:29:DB:C4:C0:8F:A6:0A:C1:52:46:3E:62:BD:5E:7F:9F
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d4:35:b0:e8:c9:1b:4c:79:d7:cb:ab:74:0e:a8:9c:14:32:
47:0a:fc:a7:49:a9:22:67:d3:6d:25:25:43:06:f2:b8:f8:1a:
4a:72:f2:2c:3d:31:d8:db:15:1c:29:f1:3d:e0:98:cf:01:0d:
ea:13:d6:5f:ab:e4:e8:cd:1b:1c:51:54:c1:69:f3:ac:0a:5d:
0e:79:a9:3c:f5:64:27:5b:24:2c:b4:20:b7:f3:6f:d3:c1:f2:
b2:bc:6c:80:0f:80:a7:e2:80:23:64:52:c4:c8:bf:9d:a2:2d:
5a:ad:be:04:8c:2a:06:84:1f:84:31:93:ae:7a:ea:84:20:6d:
b8:3c:f3:b8:eb:0f:f9:ba:bc:fb:ab:b8:a8:44:a9:36:64:eb:
db:4f:a8:c7:81:22:b1:0c:64:57:f7:d3:d9:d3:3c:f4:8c:8f:
ad:d2:b1:42:70:e3:7c:b2:30:d2:7e:ed:cc:c1:e3:79:1c:d7:
c1:72:43:07:34:2a:9a:62:6c:47:b6:25:d4:c3:ec:dd:17:c3:
aa:35:af:9b:d7:aa:a9:66:fb:f2:e6:69:be:2c:11:f2:3c:b2:
92:61:26:11:c5:8f:12:f1:3d:ba:07:a5:45:39:ef:72:53:5f:
38:61:f8:5b:33:f6:5c:04:a4:b1:e0:8a:19:2f:27:04:c0:4f:
73:5f:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:03 2025 by rpki-client