Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: DZZfisnTyEPsuczAdrBy610Iny9vkU8dR8eJIe8vvqI=
Subject key identifier: 3E:25:3F:0D:3A:DF:51:81:80:B1:AD:91:2F:00:01:3F:35:BB:E6:1E
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 0199FDD942CAFE6974EF979E912EFE816264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 06B7
Signing time: Sun 19 Oct 2025 19:01:37 +0000
Manifest this update: Sun 19 Oct 2025 19:01:37 +0000
Manifest next update: Mon 20 Oct 2025 19:01:37 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: TfZknMUVCuqXIxwIEHMTsjPU7xjqhER27J+dNCgN7Gc=)
2: l-5i9oAqkZlj6BH6-zlLgCi-M8A.roa (hash: 2XZCzXlEs8Y4V/FtjrmGLpKeYJtdxgukjLa0vF1G5q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:42:ca:fe:69:74:ef:97:9e:91:2e:fe:81:62:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Oct 19 19:01:37 2025 GMT
Not After : Oct 20 19:01:37 2025 GMT
Subject: CN=3e253f0d3adf518180b1ad912f00013f35bbe61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:10:a7:50:2d:3e:05:57:10:b3:35:6b:3e:
5a:cc:d6:e8:01:22:c4:d3:90:5e:3b:97:c5:53:ba:
ee:b9:28:45:d5:ec:9f:84:72:3c:06:9e:eb:a3:90:
e3:f3:42:f9:63:38:aa:49:c7:28:8f:59:f5:02:b1:
86:98:ef:76:06:62:d5:83:e2:56:0e:ea:50:08:54:
e6:c8:6a:a7:06:44:cf:87:0d:9e:16:51:57:41:fd:
be:64:e1:88:91:46:cd:90:39:38:1c:03:6a:51:2a:
b6:4d:37:72:ca:29:2b:23:64:87:15:c2:29:3f:ce:
2c:01:64:bc:ef:6d:6d:47:e3:aa:c4:02:16:01:56:
3e:c9:21:16:98:e7:ae:fb:b7:c2:23:41:e4:a4:9b:
3b:06:61:e3:97:06:73:4e:1d:0e:eb:96:c3:2a:6b:
c2:0f:10:ba:7c:43:a3:93:8b:be:9f:f2:5b:42:ed:
09:18:0a:70:f6:04:90:35:44:ef:e9:7a:8c:99:5d:
09:20:45:4b:b3:30:11:aa:74:68:7b:1a:bf:92:17:
4d:ed:1e:72:d2:95:1f:8a:9e:10:0b:c5:ca:e0:f3:
6f:7a:7a:70:57:05:e3:d5:1b:36:3e:1f:ca:a0:77:
5a:57:ba:ca:b0:b4:6e:87:8a:62:fe:18:ba:eb:a2:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:25:3F:0D:3A:DF:51:81:80:B1:AD:91:2F:00:01:3F:35:BB:E6:1E
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:05:13:76:eb:a2:24:83:3b:fe:1c:e6:cd:aa:73:29:cc:6e:
b4:a1:e1:47:46:17:8c:af:68:c6:cd:34:58:11:e4:ab:57:7f:
e3:4b:f1:89:11:05:38:7c:a6:06:af:98:db:59:10:14:e3:08:
5c:58:d4:6f:46:34:27:26:a2:ee:78:54:a9:d3:37:19:93:03:
c8:bb:62:1b:91:31:95:c6:ac:3c:26:c1:35:1d:fc:29:e2:96:
98:f9:c8:28:30:d6:03:22:1c:fb:ff:e3:ff:af:ba:b5:44:9e:
b3:d5:2a:f8:74:13:e1:03:bf:fe:64:41:c8:62:fd:ab:97:24:
e6:0d:4c:c7:ab:db:c5:af:57:95:8c:70:34:23:ac:13:0a:41:
d3:3a:c6:1d:09:2f:fb:79:12:44:86:e5:96:e3:e3:09:79:6f:
ed:cd:1a:60:ea:df:f9:b4:92:87:1c:f1:4b:e8:ed:2e:09:5b:
18:15:13:24:e6:bf:73:6a:7a:4c:48:57:f0:b6:c9:23:5f:8f:
d0:f4:12:c1:09:e2:07:4d:f1:ec:f8:d3:3a:4c:6c:da:9e:26:
a3:4c:b9:9b:7b:9b:e2:71:26:d7:f2:21:59:52:0e:14:53:f0:
a2:b5:9e:f3:9a:e6:43:b7:88:ed:39:ff:b9:a5:6f:76:12:12:
b0:4f:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:18:07 2025 by rpki-client