Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: j1ED9ZVGLV9ZEpvUbA2IqgeHw90NhKHsVH8sR2EBdrc=
Subject key identifier: 6E:51:76:98:8D:CA:B9:21:C0:E8:D3:D1:E6:0B:66:2E:C1:19:08:5B
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 019A4C615FCE16E37BF9D8A5C955DD7ED519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 1020
Signing time: Tue 04 Nov 2025 01:00:41 +0000
Manifest this update: Tue 04 Nov 2025 01:00:41 +0000
Manifest next update: Wed 05 Nov 2025 01:00:41 +0000
Files and hashes: 1: 8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (hash: BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: kaJvzXFLAUmluiwuSVDqJL/hTxgvIcFtlX+F2xZ5bU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:5f:ce:16:e3:7b:f9:d8:a5:c9:55:dd:7e:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Nov 4 01:00:41 2025 GMT
Not After : Nov 5 01:00:41 2025 GMT
Subject: CN=6e5176988dcab921c0e8d3d1e60b662ec119085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:8f:62:5a:77:be:47:e6:89:b8:8b:17:1c:
2f:cf:52:a5:7c:b8:93:61:05:af:fc:41:77:1c:6a:
09:a1:19:63:a2:99:e3:bb:0a:2b:cd:ab:78:12:b4:
29:c1:3a:6f:52:51:62:41:26:09:47:29:24:f1:8b:
1d:15:bb:52:d0:34:14:42:36:4b:6c:c7:3c:cf:95:
5b:c0:f0:57:18:74:1d:31:a2:5c:d8:3b:4b:e9:53:
5a:cb:dc:3c:fe:1a:ce:6c:88:91:cf:4e:a1:42:00:
2d:0f:3f:f0:25:86:de:5a:ae:23:7c:20:bb:c4:6d:
72:15:89:91:3b:bb:8f:c8:f7:44:bf:eb:a7:b6:2c:
76:87:08:8c:5a:21:b5:0b:51:7d:cd:d5:04:c4:86:
5f:dd:8d:09:52:ac:b0:1b:3c:2e:59:f7:c5:80:70:
ca:1a:ce:ad:2d:82:0a:59:11:78:4d:76:93:8c:88:
99:a7:b9:19:59:bb:f0:df:d3:fa:84:f4:84:15:be:
a6:e1:09:57:17:ea:0e:c0:16:6a:39:ad:1f:6f:50:
04:2e:93:52:2f:67:69:1b:e7:a3:1f:fc:40:09:28:
45:eb:e8:29:1a:bd:9d:f2:04:2c:d5:a1:6d:78:b9:
74:f7:fc:51:b1:71:5c:e5:7d:64:09:9f:b7:a1:00:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:76:98:8D:CA:B9:21:C0:E8:D3:D1:E6:0B:66:2E:C1:19:08:5B
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:30:c9:ca:ed:59:4a:9a:4c:0d:2d:82:2c:2e:77:56:aa:2a:
b6:4a:04:1f:62:8e:c5:e2:e9:58:d8:6a:9c:01:65:9a:c1:2e:
b9:15:d8:9a:ef:74:25:eb:93:39:05:c6:33:af:ea:65:d0:61:
f1:8d:96:fd:67:d7:22:8d:53:7c:f8:90:5a:78:ba:56:f6:28:
f4:da:ac:6f:ba:d9:e2:b0:16:ec:ad:77:bd:cb:01:32:39:b4:
1c:55:b2:6f:c5:6d:8e:0d:65:64:03:6d:a2:bd:68:1b:c6:f8:
ef:4c:57:88:77:8a:45:01:ca:c1:fe:b8:03:1f:dc:f6:2c:f4:
51:22:82:28:7d:c3:3d:16:81:74:a7:8d:e7:80:03:b6:c9:17:
39:ed:7e:d4:58:76:52:6a:03:dd:52:4e:00:5a:4c:fc:79:ba:
c2:2c:88:3c:64:41:67:55:e7:6a:30:f9:b6:a3:fa:3b:34:59:
f2:16:4a:70:f4:21:a1:e9:f1:c0:19:ae:02:2a:aa:dc:38:aa:
12:82:bd:2f:21:b3:8b:cb:47:98:5c:ef:04:6c:c9:34:c9:ce:
d6:63:2c:e5:d0:d9:99:8b:9f:35:03:57:7b:d3:48:b1:0f:3c:
54:83:d3:b6:4a:a5:e3:d6:0d:f1:2a:31:c1:44:aa:50:44:86:
ae:26:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:39 2025 by rpki-client