Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier: VI4DgED3IjFI/etRjw8ZnSNMN75xpYTp9m49MMG2RQY=
Subject key identifier: 22:7C:F3:AD:7E:61:4C:1D:22:F5:B5:C6:DA:45:65:AC:54:BF:04:BC
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial: 0199FF22B6D1FA0BE036FD07BB4B22D21C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number: 029D
Signing time: Mon 20 Oct 2025 01:01:29 +0000
Manifest this update: Mon 20 Oct 2025 01:01:29 +0000
Manifest next update: Tue 21 Oct 2025 01:01:29 +0000
Files and hashes: 1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: CaVMZTF8TwdlxO3O1FGdg2Zbo5qhFFH5Nd1n1qR9nKY=)
2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:b6:d1:fa:0b:e0:36:fd:07:bb:4b:22:d2:1c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Validity
Not Before: Oct 20 01:01:29 2025 GMT
Not After : Oct 21 01:01:29 2025 GMT
Subject: CN=227cf3ad7e614c1d22f5b5c6da4565ac54bf04bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:a5:a1:59:4e:bd:a3:5b:e1:a1:73:60:cd:
d4:6e:ee:eb:d5:ce:03:9a:90:5e:69:2e:a2:a6:cc:
83:51:8e:8a:76:12:a0:dc:b7:28:54:37:cd:c9:4a:
f3:07:bc:0f:04:d4:32:d4:41:d5:92:e2:20:66:9f:
ca:9c:5c:02:6c:69:b0:1c:6b:1b:54:42:32:59:c7:
c0:31:92:d2:58:76:7c:50:48:74:73:26:5f:0b:ab:
b3:94:52:9d:3d:02:94:2a:d3:75:3f:29:30:54:f5:
8f:50:82:a8:e2:fb:e2:dc:26:13:39:05:65:47:50:
40:63:3e:12:20:d3:db:39:84:45:bf:b5:e7:00:f9:
7c:20:3b:12:d9:46:1f:85:b4:d9:b9:52:7e:14:27:
fc:79:06:e5:46:1f:00:7e:19:fd:ce:d1:0c:b2:f6:
72:8c:2f:cb:ca:60:8e:c1:11:06:eb:eb:90:11:c0:
48:5c:e7:cd:56:d5:0a:db:32:23:39:ee:3a:67:88:
14:22:5f:1d:4c:db:a7:67:3e:35:c0:02:d1:b5:d8:
d7:47:46:32:81:16:93:65:31:72:58:cd:49:9d:a0:
79:b7:7b:dd:80:cd:61:09:d0:99:61:ff:c3:c8:15:
94:bb:fa:13:f4:07:45:73:5b:f3:ac:e4:6f:cc:83:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:F3:AD:7E:61:4C:1D:22:F5:B5:C6:DA:45:65:AC:54:BF:04:BC
X509v3 Authority Key Identifier:
keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:de:b7:09:11:b1:95:1e:49:e4:6e:50:1a:d4:0a:e2:4b:22:
0a:2f:26:f5:a4:8f:47:7c:a2:2d:68:7f:95:1b:ee:22:0b:82:
c2:12:6e:be:70:cc:a8:ec:0c:69:d8:60:74:9e:66:2d:ff:b6:
8a:af:44:d9:13:64:75:2e:3f:b2:23:52:0c:3f:68:27:77:48:
ef:6e:c0:99:e9:a0:69:73:a9:96:08:71:a6:d0:a6:3b:7a:ff:
ad:a5:48:2d:e6:56:16:1c:ce:48:d2:dd:9b:17:71:9c:0b:ea:
a5:30:cc:a5:41:74:04:70:7c:6c:14:b1:e0:47:6c:0a:da:be:
75:f9:32:41:cd:d0:6c:87:7e:9d:ec:d3:e7:ed:68:f1:ac:ea:
85:7b:94:04:61:a8:b7:65:cd:40:a9:ba:9d:67:11:47:5c:13:
c8:48:4c:cb:35:0c:4a:77:d7:f2:72:f2:57:fd:12:db:a9:da:
88:74:17:38:dd:23:59:ce:d9:07:1c:01:12:7b:83:9f:2d:09:
e5:2b:62:4a:16:39:35:58:d5:87:8e:51:43:6b:42:85:ba:37:
c3:6e:0a:b8:96:a7:6f:4a:a1:03:0d:93:f2:07:75:c2:aa:6c:
86:d6:77:ed:20:7a:bb:48:30:c7:cd:be:c6:b4:26:c0:2a:19:
a2:b9:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:37 2025 by rpki-client