Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File: UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier: yi3D0cTwfJBDYb/7jM3skNieJXnbqqM3bS0oYSzDXYs=
Subject key identifier: D5:75:AD:B7:A4:1F:58:53:4E:AE:F5:56:0A:E8:51:AC:F3:8C:E3:E1
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial: 019A5451645881333A32E95439F854B73A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number: 05A3
Signing time: Wed 05 Nov 2025 14:00:11 +0000
Manifest this update: Wed 05 Nov 2025 14:00:11 +0000
Manifest next update: Thu 06 Nov 2025 14:00:11 +0000
Files and hashes: 1: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: tObp3ztA5T7ofDorjEc7YIdIkMCkVw96xnxQPIr44Hw=)
2: hoKUli4aEbPshio3YAyMPjWDD2I.roa (hash: LNDSOjwwI6zC2MtTLAkS/ZIKuOM2hHGHi/FcaWDSdts=)
3: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (hash: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:64:58:81:33:3a:32:e9:54:39:f8:54:b7:3a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Validity
Not Before: Nov 5 14:00:11 2025 GMT
Not After : Nov 6 14:00:11 2025 GMT
Subject: CN=d575adb7a41f58534eaef5560ae851acf38ce3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ff:30:c8:45:59:7a:b6:99:b4:14:5e:51:35:
40:0e:e7:7f:ba:7a:7e:c2:e8:ce:69:68:0b:dc:b9:
1b:92:8d:4b:06:69:6b:89:ed:fa:46:b6:a2:98:39:
dc:0c:06:1e:6c:e5:1b:55:80:b4:62:c1:b3:15:6f:
cf:25:1d:03:e3:27:b8:0d:31:20:56:33:58:90:9b:
d9:fd:a7:a1:89:fe:af:0e:12:10:00:78:11:df:17:
94:26:21:f2:87:99:84:e5:b2:2b:66:35:05:51:09:
dd:77:da:5e:88:62:99:37:d0:ae:2f:dc:26:47:15:
1b:25:ab:a6:06:a9:fb:0e:34:20:4d:f8:d8:42:02:
3c:fb:bd:c9:d3:38:0c:6c:e2:27:09:9b:f7:16:89:
a4:2e:90:28:31:44:2d:6c:fa:0d:b0:d0:a0:32:20:
98:c8:1b:c8:bd:54:dd:44:a9:00:98:d3:ed:9c:0f:
6c:8e:94:43:3b:b5:2c:6e:3c:c8:f8:40:08:ed:0f:
e7:82:79:27:6c:ce:ba:72:e2:5e:31:9d:59:fa:f6:
2e:bf:a1:4c:da:41:60:2c:3b:fb:df:d1:a7:ff:6c:
f6:be:60:00:fd:ab:b9:0d:01:1e:9f:e5:b6:0f:53:
8d:75:8c:94:10:b3:88:40:dd:ca:c9:5c:d5:18:31:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:AD:B7:A4:1F:58:53:4E:AE:F5:56:0A:E8:51:AC:F3:8C:E3:E1
X509v3 Authority Key Identifier:
keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:50:e8:53:4c:59:28:9f:01:d7:51:32:ad:a9:32:ca:01:45:
b3:ad:38:6a:d7:18:7f:08:e3:77:a4:9b:72:c1:56:a1:db:da:
11:c3:25:bf:5d:a5:a7:ed:08:ef:c0:4d:42:8d:75:0a:4b:c7:
a8:9d:7a:24:31:c4:9c:6f:16:c7:d8:76:42:55:66:bf:54:b1:
da:11:94:e7:28:52:43:e2:58:c3:26:e9:5a:52:10:01:fd:d5:
f3:2a:11:86:92:28:53:48:eb:fc:c6:84:e5:52:98:28:95:e1:
57:17:c4:f6:a8:3d:d7:a0:59:b6:f0:d1:91:95:62:8f:25:af:
40:7b:27:94:f6:2b:00:5d:c0:ea:cc:ad:f7:01:04:bb:8a:c2:
4f:a3:d8:b1:31:42:63:06:83:1e:75:c3:ec:d7:c1:b2:ce:d4:
f4:86:62:2e:84:0e:ca:5c:d3:23:16:6a:2b:0d:e4:93:84:e9:
f7:76:c3:b1:c5:02:0b:4c:48:0f:f6:5d:e1:8d:20:c2:fb:84:
6c:62:d7:8a:ad:fe:d3:6e:4d:76:5c:0b:c6:b3:7e:e3:2a:c9:
e8:1d:2d:e3:59:17:f0:57:df:e2:a1:ca:8f:0f:73:6f:83:8e:
59:ab:93:0e:ac:ad:79:8a:30:15:80:27:7e:d4:cd:42:ee:7e:
ab:b2:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:13 2025 by rpki-client