Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json)
Hash identifier: 9AZzEZDmpfO1P3U9fnrmKv9CRgYe7My9HeTzh1enQiY=
Subject key identifier: 40:A0:B4:3F:90:B8:92:0A:0A:EE:EA:06:D1:89:8D:98:52:8D:E8:04
Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Certificate serial: 0199FC213F748B60A2FEAE9C3E4072F8F310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
Manifest number: 0D4D
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: NwhX1fpUUKISwRaP6RgnnH_Cl-k.roa (hash: 46uueaf8TwY6xllVk4bGf8Po+XSFPtY1TUSEHJE8zWc=)
2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: 3zHl4DkaWMJJJG4Ej2JQ4a4Tkph6zAyov3jnf0bSrs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3f:74:8b:60:a2:fe:ae:9c:3e:40:72:f8:f3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=40a0b43f90b8920a0aeeea06d1898d98528de804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:d8:40:cd:f5:81:bb:9e:10:77:5d:28:c0:
8d:32:f1:5e:b9:f1:1d:e0:7a:0c:24:d6:7b:8a:e3:
91:9d:fd:76:4e:ce:63:1e:34:72:50:b4:a1:35:94:
15:07:21:35:19:ef:4b:9e:a0:4b:5e:c2:b8:b3:c4:
1e:3f:cd:34:e2:86:b1:1e:bc:e6:99:cf:93:33:36:
d9:83:24:5e:3e:59:2f:f8:25:bf:84:65:cc:30:02:
c4:7b:f2:fe:50:2c:fe:f7:73:34:94:4f:3b:e2:e7:
4a:8c:7a:ba:96:5e:68:c1:c3:c2:a4:ec:9e:65:ea:
e8:fb:31:08:1a:6e:d0:f2:c8:6f:04:69:42:38:7c:
3a:86:66:a7:4b:ec:67:d4:0a:8a:aa:2f:27:a2:fe:
0d:b2:f1:b5:7c:1c:0c:78:8f:0b:8f:da:83:c1:17:
ca:6d:6b:b1:b1:4e:58:8e:38:d4:e6:75:c1:37:8f:
56:b4:d3:c6:44:6f:de:3a:66:c8:53:f9:78:11:16:
32:e1:26:69:ae:95:02:be:30:4e:f8:c8:03:62:be:
25:3a:ab:83:29:c2:91:da:84:85:ce:50:80:5b:88:
dd:81:80:7f:7c:51:a2:d0:3b:3c:83:14:9a:16:21:
d9:9a:4d:3f:43:67:35:ad:30:39:48:33:59:e7:46:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A0:B4:3F:90:B8:92:0A:0A:EE:EA:06:D1:89:8D:98:52:8D:E8:04
X509v3 Authority Key Identifier:
keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e7:98:48:d4:8d:66:44:8a:57:e0:d6:53:e2:43:ed:7e:01:
81:66:b9:83:eb:65:81:42:25:e3:c2:db:bc:49:b1:eb:35:93:
91:d0:d0:46:74:57:45:fa:c1:e3:07:dd:72:2b:5a:4d:0c:f2:
65:bd:26:e4:25:a4:5f:6c:36:6b:a1:3c:f8:88:41:cc:6f:fd:
6a:40:e7:b7:cd:2d:d5:a0:76:c2:49:68:40:a5:70:ec:a7:90:
af:73:61:bb:79:64:0a:94:e4:57:64:85:1c:ea:9f:3e:e9:4b:
8b:41:93:83:e2:3e:2f:e3:9c:12:3c:16:c3:4e:89:0f:c2:1e:
13:60:e5:49:99:6d:ec:15:6b:87:c7:10:a6:b2:66:85:ad:46:
52:57:05:c2:34:d6:a1:2b:4f:1a:10:3c:57:31:e0:da:13:95:
36:6e:8c:0e:fa:af:ff:9c:7e:3a:54:b3:85:b5:62:f4:ba:e5:
05:e5:8c:8d:89:db:2d:0e:b1:7b:c2:f7:c5:81:da:7e:eb:94:
40:23:e7:ed:55:fa:32:d3:54:b8:53:95:86:ee:ea:4b:ea:44:
8a:83:f9:bc:7b:81:38:2e:9a:08:50:68:8e:7d:bc:4c:a0:81:
5b:2b:ed:95:5d:54:b1:b3:e5:61:c3:d7:44:9a:c3:84:94:e4:
27:5a:89:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:29 2025 by rpki-client