Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: 69CE0Qda1yH5PUOfxbJq4rymDIxuui1oTEu0eLqcick=
Subject key identifier: FD:2D:87:AB:F4:C6:DD:E7:BA:BC:C5:25:F0:F9:EB:C8:82:AA:2C:3A
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 0199FD6B47759D45D211A6DA6E4311B4BF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 11AD
Signing time: Sun 19 Oct 2025 17:01:30 +0000
Manifest this update: Sun 19 Oct 2025 17:01:30 +0000
Manifest next update: Mon 20 Oct 2025 17:01:30 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: 0jIvxdZhuabKPgxOr8vsrQ5yQXn2HFWtbCPf6mTF5Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:47:75:9d:45:d2:11:a6:da:6e:43:11:b4:bf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Oct 19 17:01:30 2025 GMT
Not After : Oct 20 17:01:30 2025 GMT
Subject: CN=fd2d87abf4c6dde7babcc525f0f9ebc882aa2c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:99:78:19:3d:6b:3b:f5:d7:2c:8d:73:1a:
a0:20:4e:ab:a8:f4:7d:7c:ec:81:81:83:ca:f8:2e:
c0:07:d6:54:03:eb:9f:87:d4:be:f8:95:52:bd:57:
f4:70:af:eb:24:9d:4c:8c:c1:ed:03:e4:72:1e:6e:
ae:03:88:bd:e7:f6:e4:c5:73:f0:a7:ad:f7:53:ba:
0d:c6:51:9f:e0:97:ca:af:bc:5b:77:18:68:be:66:
6f:4c:7b:dc:84:62:91:cd:81:b8:6c:19:25:07:42:
69:a5:c2:a7:aa:a6:ac:03:24:40:5a:81:41:6e:31:
8a:ad:8d:50:ae:a2:35:35:5a:ab:eb:88:b6:0b:b7:
ce:22:fb:94:e0:ac:62:6a:a9:0b:7d:f6:86:2a:3e:
a6:1d:ea:7a:4f:93:92:a1:e1:0b:b7:7c:62:26:14:
bb:64:e6:a6:89:f0:ef:b4:b7:93:f9:5e:93:60:fc:
d2:fd:d2:2f:7a:64:6c:17:2f:99:cc:d7:8d:45:8e:
67:e8:3b:d7:f3:de:08:a6:4e:5f:a5:68:b5:18:b4:
fa:77:c8:9e:85:32:cb:ab:d3:15:37:87:21:46:93:
34:48:9f:ac:59:bf:3c:f9:2b:4b:48:20:71:e8:3a:
48:48:1e:5b:17:70:1e:cc:03:6d:a9:fd:d5:7f:bd:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2D:87:AB:F4:C6:DD:E7:BA:BC:C5:25:F0:F9:EB:C8:82:AA:2C:3A
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:32:80:80:6c:e9:20:0a:09:c7:c0:ce:72:8d:8b:01:a1:6b:
5b:de:88:b9:4f:28:59:af:b6:a3:69:e3:e3:09:4d:d9:d6:79:
03:7b:25:09:6b:33:77:a4:f6:dd:2c:14:8d:11:05:b8:4a:80:
32:88:26:56:9e:01:cf:3a:74:74:e1:b3:94:c8:26:22:71:a7:
f5:bd:57:c1:46:3d:69:39:76:08:c9:3a:0d:03:ba:14:70:6a:
2d:18:e8:69:0d:7d:5f:af:91:46:60:dc:08:17:cc:ce:b7:a8:
fa:27:b9:c2:c4:68:e7:3f:50:01:5a:05:95:5a:f7:8c:97:4e:
32:04:9c:b4:e6:43:23:a1:b7:79:84:9c:03:1d:c3:a5:be:56:
7f:33:60:1c:98:40:a9:5f:54:86:f0:0b:65:9c:0a:a8:33:1c:
43:b6:74:40:21:68:1e:c6:95:d6:3b:a8:a8:ab:01:56:0b:51:
3b:54:c0:ed:d9:4c:95:a1:a9:1d:2d:da:1d:03:d1:66:b5:e2:
41:23:71:2c:a4:b8:27:7e:b9:4e:e9:36:53:c7:80:c5:f5:bf:
18:df:d2:b9:58:5a:dd:7e:b1:2e:ae:1d:39:2a:e2:6f:7e:45:
5c:c8:ac:e5:69:e1:e5:19:38:cb:11:40:7d:df:01:9c:35:d4:
9b:dc:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:42 2025 by rpki-client