Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: a4V/CXi0EUm7s8uGcLWuT4XecUdBMbv6rK5JvZV32+Q=
Subject key identifier: 7B:A9:08:91:EA:B7:AE:F6:E2:23:A6:D1:AE:67:65:6D:F9:DA:E2:70
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 0199FC217D6923F41389F23BDB41FE8D9DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 15AC
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: H7kACiOp15ts8SRSkqzhP0kJEovehZY+tVuEa1EtogM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7d:69:23:f4:13:89:f2:3b:db:41:fe:8d:9d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=7ba90891eab7aef6e223a6d1ae67656df9dae270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:43:f8:57:35:82:9f:cd:07:bc:e2:ff:5f:
9d:48:ca:e0:f2:f7:ef:e4:27:49:38:91:ef:a0:0f:
41:81:4a:48:f8:8f:94:42:d6:19:e8:20:4e:af:b8:
e1:be:bc:60:41:84:d4:40:1b:d7:e4:ff:ad:57:ab:
5c:df:a0:ef:ca:e9:c6:a7:5f:32:03:b4:2b:90:9a:
85:a1:31:ce:6c:f4:cc:7d:78:51:78:00:3b:e6:01:
c5:6a:93:27:48:54:88:6c:79:28:78:6b:46:70:f1:
d8:6a:31:6e:9b:c5:aa:37:db:24:1c:3a:5e:67:22:
c5:8d:5d:0f:68:cd:5a:08:18:62:2b:cb:c6:20:9b:
67:96:e0:08:4d:65:bc:51:de:dd:78:98:e2:be:91:
90:4d:95:a0:61:73:9b:78:d7:b6:10:17:58:da:ad:
ad:23:4c:8e:10:68:c0:06:48:8e:5c:3f:82:53:6a:
28:a5:5a:c4:23:8f:f4:eb:42:75:2f:6c:64:58:3b:
3c:d3:52:a3:43:b2:12:7b:f8:27:29:27:c9:13:fc:
dd:92:ca:3f:5e:31:a9:cc:b1:0d:f6:59:f8:3a:1a:
6a:c6:31:01:00:63:e7:98:ec:96:6b:c7:04:b5:6d:
f3:c7:e1:f2:0c:93:ec:76:57:86:65:c4:2f:00:7f:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:08:91:EA:B7:AE:F6:E2:23:A6:D1:AE:67:65:6D:F9:DA:E2:70
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:78:7b:7f:94:cf:73:df:e4:6c:fc:e3:23:74:b3:24:3b:25:
a1:14:e8:c7:75:c3:d9:f4:a2:6e:c1:a2:2e:6a:18:9d:1b:8b:
a1:b8:43:a9:d5:3b:46:04:0f:d3:32:3c:a9:97:f0:7e:dd:bc:
b7:24:69:6d:ed:15:8b:da:d7:ec:0f:a7:01:7c:38:59:7b:e5:
33:9b:53:26:16:ae:8b:f7:22:d6:fd:d6:30:57:fb:22:fb:92:
8d:f3:b0:5d:7c:fd:c0:b7:12:8a:06:ae:0c:4e:df:d4:62:b4:
91:63:7a:fa:e8:10:ab:0f:3e:37:4c:57:d1:03:cd:7e:f2:99:
56:51:22:b2:0d:87:de:8d:9b:c8:3f:00:a2:07:53:e7:23:36:
43:31:9a:85:8c:18:20:0d:9f:d0:a3:8a:a5:a6:08:5f:64:7a:
64:99:06:53:89:27:09:00:f2:6f:26:00:34:50:16:51:2d:97:
36:20:9e:fa:8b:68:84:29:c1:b2:02:6c:c3:b2:a9:55:99:0f:
98:08:68:e1:87:46:20:2e:b5:bc:2c:89:f9:63:7b:81:fb:6b:
f6:07:01:f4:e9:05:ba:35:45:1f:be:b9:9b:f5:82:5c:9a:92:
bb:59:1d:3f:6a:d6:b8:db:13:a6:2a:19:80:0c:b8:6a:c1:44:
0d:c2:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:03 2025 by rpki-client