Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
File: UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json)
Hash identifier: /7wD+m9yQBgsmJOS1yQhVnOX1C3+x5BAVdx46JWGyUA=
Subject key identifier: 82:DE:32:8C:1D:7B:3C:F2:EA:AA:1B:EA:3E:57:D1:68:54:2F:73:9F
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 0199FF22A37759B587ADFC31ACD26E97D327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 01:01:24 +0000
Manifest this update: Mon 20 Oct 2025 01:01:24 +0000
Manifest next update: Tue 21 Oct 2025 01:01:24 +0000
Files and hashes: 1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=)
2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: n1TxZNPtcel2rdCoV1hq6axABgwbpCKgXQ3GrHIZcNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:a3:77:59:b5:87:ad:fc:31:ac:d2:6e:97:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Oct 20 01:01:24 2025 GMT
Not After : Oct 21 01:01:24 2025 GMT
Subject: CN=82de328c1d7b3cf2eaaa1bea3e57d168542f739f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:18:7a:24:30:18:5b:79:29:03:b4:b4:14:
5e:bd:bb:34:15:7e:60:e0:63:67:11:fc:84:03:2b:
dd:c6:82:1f:eb:64:5e:da:18:2a:46:51:d1:73:49:
6d:42:12:85:80:4e:13:6e:35:1d:3a:0a:5c:03:2c:
b9:f1:cb:d4:e4:4e:7f:5b:47:34:d9:10:12:7f:e9:
56:12:1f:cf:6f:0f:03:8e:7f:e2:85:f0:a6:5c:87:
38:a8:21:11:57:21:e9:d8:d2:97:ef:4c:a2:d8:fc:
32:9c:62:6c:02:22:1f:ec:d2:70:c4:09:f1:89:94:
1d:52:07:f7:0f:ed:08:85:da:18:7c:a1:89:f3:ec:
f6:b5:f8:c5:dc:5e:cb:55:71:a8:ec:c6:b4:dc:f2:
66:13:36:35:74:1a:3a:c6:17:02:13:7b:00:d0:4a:
23:07:e5:89:63:23:f9:4d:ba:f8:ee:e8:d0:40:e3:
3b:4b:02:d8:f9:0a:b2:c7:3b:b0:6f:d4:ce:36:e9:
3f:24:26:d2:11:f4:f7:26:b2:4e:35:ce:aa:90:48:
d0:8a:d2:cb:e8:00:79:96:7f:ec:7a:48:a6:8e:cc:
5e:9a:b8:73:5d:e7:21:cb:ae:2d:ba:06:34:cd:03:
c9:ff:00:90:14:1a:3c:7a:66:a4:c4:46:ea:9f:7f:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:32:8C:1D:7B:3C:F2:EA:AA:1B:EA:3E:57:D1:68:54:2F:73:9F
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ea:f3:b6:cc:d5:80:ce:97:0b:05:a3:03:0b:d1:ab:ec:28:
79:ec:58:5b:f4:9d:cb:d1:1f:68:53:95:88:14:f4:58:ae:03:
92:7c:d8:ff:f3:17:a3:e8:77:6d:41:9c:48:99:be:1f:91:4e:
89:c7:b1:b4:0e:ab:f9:70:09:bc:b3:93:6a:a2:e9:7a:e4:fc:
3d:09:85:15:1e:61:b4:03:1f:6c:48:71:77:37:c3:7c:7f:92:
48:d2:ac:6b:fd:46:9b:ec:28:cf:80:60:8d:76:18:5f:b1:64:
e6:05:8b:af:a5:9b:85:51:ac:ba:eb:93:33:05:06:4e:2e:77:
e1:9f:7a:20:e9:a5:44:ee:75:39:60:b9:50:63:05:f9:05:6e:
c1:0b:99:7e:95:f0:07:cb:c7:75:17:f3:06:09:ef:f5:67:d1:
e6:40:56:c0:9a:f7:00:ea:77:10:d3:54:ed:9f:ba:14:e8:6c:
27:2a:9e:72:8b:4d:fb:34:60:b5:4d:7a:18:c2:1b:26:15:e6:
76:a4:57:e1:1f:f9:b5:bb:0e:7a:31:d4:19:0d:59:56:6f:e3:
5f:39:b1:4d:2d:66:fd:b9:9e:e1:ff:c2:95:f9:56:ab:0a:69:
4a:c0:96:39:2e:0a:43:66:a3:21:c4:5f:e9:3b:2f:90:75:12:
28:53:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:25 2025 by rpki-client