Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File: UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier: GmlL1vCAAX1hgTHu0xEJZUCS347OSYeAnjKEg6bRSMU=
Subject key identifier: 3C:41:DD:75:8B:F1:47:FC:6B:DF:AF:3A:CE:BD:32:32:51:33:CB:10
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial: 019A4E4F53C7EBC1E3BDF7A050E3E04763A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:12 +0000
Manifest this update: Tue 04 Nov 2025 10:00:12 +0000
Manifest next update: Wed 05 Nov 2025 10:00:12 +0000
Files and hashes: 1: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (hash: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=)
2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: sP+NpZpxYyu9HC7qB1Lqp3bE+oSAqKXtXGPF8rKD69w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:53:c7:eb:c1:e3:bd:f7:a0:50:e3:e0:47:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51626068942586ce95702103bac899d23fcf7242
Validity
Not Before: Nov 4 10:00:12 2025 GMT
Not After : Nov 5 10:00:12 2025 GMT
Subject: CN=3c41dd758bf147fc6bdfaf3acebd32325133cb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:17:39:44:c9:09:6a:f4:7f:0e:9f:60:7a:
58:00:67:b7:ac:80:1d:ef:1a:de:25:90:b2:ca:93:
8e:ac:2e:6d:c5:e4:e4:7d:0b:60:3c:53:49:c3:4d:
dc:f2:05:5e:63:ba:2a:73:63:b8:b2:ef:74:b5:0a:
c5:54:00:b1:1e:ab:c4:da:ed:30:f9:d7:cb:4e:03:
82:09:e1:29:fd:85:6f:ec:74:3d:d9:51:bb:3d:b3:
b5:8b:24:17:ed:a0:65:e7:9a:42:ef:fa:12:df:cf:
49:06:7f:ed:ce:94:62:8e:23:c1:8b:14:e6:c6:c2:
4e:62:a1:0e:87:29:fb:92:f1:7a:1d:e6:ee:61:a3:
43:bb:de:11:eb:e5:dc:00:67:c1:87:24:ea:3a:c7:
ea:93:16:2e:41:bf:bf:56:ea:67:59:8b:3d:c9:ce:
04:3a:e3:6f:3e:6a:7a:20:70:02:f8:8a:48:92:b9:
73:87:40:7c:eb:fe:63:42:b7:00:b6:65:ed:7c:51:
de:4d:0b:95:11:5a:b4:d3:79:67:30:05:b1:b2:e2:
1f:70:fc:85:41:36:51:8a:41:e3:c5:61:f7:90:de:
8c:e8:2a:35:26:87:26:4b:ff:17:28:29:ff:0b:64:
e9:e6:19:bb:fc:3d:d1:3e:c5:99:d3:1f:3d:2b:c9:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:DD:75:8B:F1:47:FC:6B:DF:AF:3A:CE:BD:32:32:51:33:CB:10
X509v3 Authority Key Identifier:
keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7e:51:55:73:9c:1e:d3:3a:d5:ec:eb:37:b0:31:62:c9:46:
b9:52:aa:25:85:92:79:74:b2:95:0b:2e:86:5e:85:42:08:d5:
11:1c:3c:e0:09:5b:28:81:41:b9:03:35:28:88:86:06:f4:53:
18:64:8f:ef:c7:bc:51:8c:d7:40:27:d7:2e:48:36:09:e3:63:
19:48:3d:13:d4:30:4f:e7:be:52:86:42:90:9e:3f:1e:6a:3e:
a1:f8:6e:5f:b1:58:05:62:d2:86:7f:48:83:19:fc:8b:7f:30:
ee:52:ab:aa:40:fd:ca:d5:ca:aa:43:65:64:df:f8:05:fb:fc:
a9:c4:d1:34:e3:f3:e0:5e:58:aa:c8:11:6a:83:22:02:d1:50:
1b:2b:53:22:12:6c:29:51:6a:5d:56:6d:e1:4b:15:ce:1f:da:
fa:21:b7:c0:60:03:0f:22:95:fa:64:d5:5f:99:be:6e:be:54:
b5:8c:ca:84:14:74:cc:ee:bb:c3:31:93:18:a5:bf:ae:25:4e:
03:81:00:15:41:29:6f:cb:74:c1:23:9c:b2:7e:a4:4b:e3:e4:
56:af:7d:5c:dd:14:59:d4:22:09:94:fe:64:fa:5f:44:05:b0:
ed:ba:8f:d6:2b:9b:01:0f:63:69:de:0f:98:3a:1b:05:b8:2f:
a1:61:fb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:00 2025 by rpki-client