Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier: 1jsjRK/63WnWjZ8N9cqBJBo5g2v4UvAbcNASYM8wBDo=
Subject key identifier: 9C:37:A1:B5:85:44:18:2C:DD:45:A1:7D:D4:A8:38:B2:8E:8F:81:93
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 0199FBEB0F58DE25A087477612F520632BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number: 0AEF
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (hash: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=)
2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: MjYAAdv5M+fSEY9ckTIHTT2QOByMsfJK9hUySQfQseM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0f:58:de:25:a0:87:47:76:12:f5:20:63:2b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=9c37a1b58544182cdd45a17dd4a838b28e8f8193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:ef:e2:9d:73:5d:e7:66:e3:b2:18:d3:c5:
da:fa:51:4e:d5:82:a3:20:27:9f:74:6e:34:1c:64:
1e:8d:a1:dd:3c:59:43:9b:2a:1f:43:e6:7d:d7:f6:
17:c6:ec:5e:2c:9e:24:b0:4d:82:b9:45:e3:7b:59:
65:74:53:ee:15:b0:26:bd:6b:94:d0:5b:36:c8:93:
65:94:85:64:66:bb:6b:2b:b6:b4:b2:bc:ab:6b:f8:
78:c4:4b:4d:75:c8:7c:48:36:10:ad:d9:2a:79:42:
6b:b9:8c:c4:96:38:4a:14:0c:b8:56:df:c2:63:40:
f1:cc:16:fd:10:de:3b:48:d8:fb:18:f4:e2:77:79:
a5:ea:43:6b:22:9d:6e:42:98:b4:1a:0a:7a:de:d9:
e6:23:82:3c:b7:38:c8:78:f6:15:59:eb:87:9b:46:
38:43:af:15:d5:d3:f4:64:fe:09:90:43:69:f8:7b:
ad:2d:44:35:20:35:75:9d:f7:05:8b:f1:51:4f:7f:
a2:04:65:38:db:3b:3f:b0:86:64:c4:84:c6:ac:ab:
fd:0d:99:db:71:75:ef:ff:12:45:d4:dd:f6:a0:c6:
3f:24:4d:f4:91:67:67:95:8e:9e:65:6b:43:26:1d:
4b:78:5b:ad:d2:f0:7f:a5:41:89:c7:aa:17:68:3b:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:37:A1:B5:85:44:18:2C:DD:45:A1:7D:D4:A8:38:B2:8E:8F:81:93
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:58:34:06:46:34:16:65:2c:2e:11:bf:59:4c:cb:3f:c1:44:
4b:72:04:e8:69:df:91:20:ed:ee:e3:41:2b:89:99:20:90:03:
29:a9:55:60:bb:b1:21:b4:af:20:cd:72:91:58:02:ec:bb:ec:
2f:98:a7:a7:85:12:94:00:18:74:de:37:a9:f7:26:35:b7:4d:
e9:dc:7e:65:fb:28:76:40:be:27:e3:c7:ec:be:4b:ce:7a:bb:
77:ef:e3:a7:8c:75:70:5a:5d:f4:8a:63:ac:35:f6:1f:07:b0:
47:ad:e2:e1:c6:23:aa:df:79:55:2d:58:1b:67:9a:6f:3f:8c:
a4:a6:66:bc:d5:99:18:af:e6:51:3d:4b:31:d4:ae:2a:56:b9:
f5:f8:00:2c:4d:be:e6:2e:61:d5:53:df:8f:ae:ca:57:a7:bf:
10:44:ff:43:9a:9e:4e:bd:5b:7d:19:05:73:5b:4e:ff:29:c7:
43:a6:3b:49:d3:ca:23:b3:b3:60:d1:e6:10:7b:62:56:2c:a7:
a2:81:84:09:89:15:80:f1:87:df:0b:34:c4:aa:67:59:fd:d0:
28:5e:ff:2f:0f:fd:a7:31:af:65:91:57:5e:18:4f:f3:4e:40:
70:a0:e2:bb:08:b6:be:be:4a:70:48:dd:d3:7d:ae:1b:55:e8:
fd:28:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:34 2025 by rpki-client