Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: Nwa0Ug2mmj8c4e/IMdqn5dol08ctEf6g8sgDdTBaz3o=
Subject key identifier: 54:47:D3:17:C7:C0:99:27:90:CE:5E:8F:77:55:82:7F:8B:28:30:E8
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 0199FB7C72FFD12FB9E60AF7B7A2A8DE5D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: vreRLEBeceIfNDdv+ZtvKiKEP5kxeR5ohoKlk/gMsaw=)
2: l-hCkKbGiTfZLiw01nyzAqx9RrE.roa (hash: eNnspbPwHy2/o3P/VfKyhFa9HsXh1TKY3mCuqf0R7X4=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:72:ff:d1:2f:b9:e6:0a:f7:b7:a2:a8:de:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=5447d317c7c0992790ce5e8f7755827f8b2830e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:0e:1a:24:3d:c1:74:95:0d:64:32:fa:41:
03:83:8c:1c:b5:11:44:c0:fd:03:78:76:77:e5:18:
83:38:e1:e2:20:ae:06:bb:ff:df:98:ab:54:11:74:
c9:c7:0e:49:85:ba:84:8f:98:75:e0:3b:d1:95:fa:
64:61:b0:14:e4:c5:79:cd:b3:bf:e0:78:96:9f:3a:
13:1e:fd:4b:d4:bd:b6:75:e3:db:de:27:b2:ef:74:
0e:dc:a5:eb:e6:98:d1:8f:d2:8d:bb:32:86:d9:ee:
ac:29:18:df:57:e7:fa:23:26:ec:83:ff:55:c7:9d:
45:ee:40:d9:de:ed:ce:5c:6a:69:64:bc:29:00:85:
cf:2a:8c:46:a6:77:73:28:f4:5d:68:53:7b:90:f1:
2e:ba:94:bd:df:46:00:b1:b5:50:2d:d8:c1:0a:80:
b1:dd:c2:c7:e2:44:48:77:2f:bc:aa:8f:a6:44:32:
8f:58:1c:83:bd:ea:19:ff:00:ba:f5:99:e4:e0:cb:
69:3a:23:34:ef:63:7d:98:eb:2f:73:bd:9e:2b:7b:
e9:67:19:38:b0:5c:84:25:87:8c:16:9e:40:9b:54:
2d:55:79:78:4a:b9:25:22:76:a7:45:27:c2:ab:74:
02:e4:bc:7f:ae:8e:fe:55:7c:f2:ab:26:c2:34:c3:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:D3:17:C7:C0:99:27:90:CE:5E:8F:77:55:82:7F:8B:28:30:E8
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:38:a1:70:5a:d0:3a:c9:82:2b:13:3a:a4:42:8e:dc:8f:2b:
16:ac:03:3d:f5:c3:f0:84:e1:43:e2:de:b6:9e:b1:69:1e:b5:
3d:18:af:5d:74:b6:c5:e2:a6:bd:73:d3:c4:29:06:c7:b2:b3:
cc:1d:05:ea:74:06:24:c3:71:dc:6e:94:93:28:23:ce:ac:17:
07:83:2f:ee:4b:aa:20:a8:96:3f:3e:c9:79:d1:e0:77:53:82:
d9:3f:bb:34:ab:84:29:25:de:bd:76:bb:45:f9:23:fc:fd:6d:
70:37:78:9a:fb:54:1e:a2:0c:9a:c5:de:4e:be:fa:4d:65:ee:
8e:9d:ed:27:39:62:a5:62:ce:68:e8:82:3a:16:68:d3:89:2b:
6d:97:2f:e0:9e:eb:f4:88:38:37:30:f9:de:fa:99:c5:39:04:
2b:52:c3:4e:62:36:b1:a7:e2:60:46:ee:e2:72:d0:5e:30:9e:
f7:45:d1:0a:6b:23:73:6a:e5:a7:d4:1c:ba:43:8e:ad:a5:89:
ed:96:04:f0:d7:dd:3b:26:76:f9:01:c8:d4:9e:96:55:bd:2e:
31:49:00:d9:97:79:38:0d:1b:2c:4f:e9:b3:9e:64:4a:e5:69:
82:61:c1:43:d3:7e:00:15:7f:28:0c:8b:d8:0c:fe:6c:42:a0:
e2:70:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:57 2025 by rpki-client