Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier: kysW6AJUZ938KR5HkTA+ebGayvAD21WWaSiiGn6guPw=
Subject key identifier: 5F:28:E1:A6:07:89:81:FC:87:FE:62:2B:C9:4B:AF:22:4E:AB:3B:23
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 019A4E18C2873F3F104757CEEB395BB3804A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:36 +0000
Manifest this update: Tue 04 Nov 2025 09:00:36 +0000
Manifest next update: Wed 05 Nov 2025 09:00:36 +0000
Files and hashes: 1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=)
2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: ZiUr/uudAYGKH26TPnBTYy6uKIpglcbIOk7Kk/+L0GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c2:87:3f:3f:10:47:57:ce:eb:39:5b:b3:80:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Nov 4 09:00:36 2025 GMT
Not After : Nov 5 09:00:36 2025 GMT
Subject: CN=5f28e1a6078981fc87fe622bc94baf224eab3b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:4b:3a:f3:9f:2a:14:53:da:8e:fd:54:87:
0e:37:01:7d:bd:f1:53:15:44:07:26:67:b0:fe:61:
f0:10:cc:6d:ec:47:d6:34:e9:a6:26:09:73:91:2c:
32:6b:8d:74:40:31:9e:0c:78:c1:0a:72:0f:5f:79:
e4:41:ea:c1:7d:15:7d:0e:d0:06:f6:f4:16:b2:13:
e3:b3:90:1f:a5:c7:77:e2:40:f5:e7:ec:39:03:eb:
44:ed:33:d1:08:73:9b:99:b2:09:af:ca:88:32:a9:
b0:b7:44:c1:18:28:1f:0e:70:80:9a:f6:0a:14:48:
ba:26:44:91:13:a2:d4:25:94:75:9b:9c:0a:6b:87:
66:c5:e7:b1:1c:f9:23:91:01:35:03:fd:aa:1a:6c:
b6:60:25:ea:54:44:38:87:c2:f3:d5:50:db:dc:8c:
6b:1b:5a:d6:cd:82:4e:94:21:28:09:52:f9:d5:73:
dd:a8:65:77:1a:35:5e:4a:e9:eb:34:c7:ac:ca:0d:
ee:65:aa:1f:03:a8:f2:2e:63:17:e6:ad:2c:31:bb:
d4:06:e2:81:c9:1f:5f:e9:ed:93:6f:2b:3e:00:31:
d5:41:07:25:a1:15:5e:49:16:73:16:c6:ba:5a:9e:
c1:4e:7a:1b:5b:0c:27:ab:22:25:ae:3e:84:55:e4:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:28:E1:A6:07:89:81:FC:87:FE:62:2B:C9:4B:AF:22:4E:AB:3B:23
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:ac:39:69:18:29:41:b1:4e:af:bf:80:57:b1:c6:71:64:
da:3b:4f:1a:2b:20:bb:b3:e2:cb:d9:cb:91:61:e9:38:76:70:
b2:8f:08:0a:7f:cb:90:e1:b1:c5:95:56:02:ce:37:a6:a8:c4:
c1:65:24:59:0b:b9:ef:50:1b:d5:e7:2c:4f:f7:88:c2:f8:32:
dd:b3:8f:46:c3:be:8d:63:94:76:68:91:f0:b8:69:5d:bc:49:
a3:e1:a2:d3:6f:f4:96:0f:98:75:4e:da:d0:e3:ea:62:58:fc:
45:02:36:ce:32:87:64:3f:36:0c:8d:b4:d4:5e:3e:02:f7:c6:
d8:9b:74:c9:86:0a:8e:c9:25:be:66:0c:e0:35:43:3f:cd:35:
49:24:7f:8e:86:30:dc:3f:24:e5:60:73:22:4a:25:89:ca:76:
b4:db:20:7c:e1:a3:7a:5d:17:5b:f3:98:45:90:d7:d8:5b:24:
7a:19:ee:1a:86:e0:10:94:19:f4:c5:90:6d:a5:cc:6e:82:04:
f1:a6:96:c8:e1:90:fe:6c:a7:af:29:64:09:fb:85:ce:9b:cb:
0b:58:2a:25:10:b6:14:c4:71:27:ea:93:61:7f:45:5e:29:81:
b1:cb:c5:9f:d0:f4:da:b2:ac:3b:5f:83:58:8c:a3:2a:30:25:
2a:aa:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:21 2025 by rpki-client