Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: UPVAkrRoXBsLSZdHl9NO8I5za7wVIORn6tQTlaC9rn8=
Subject key identifier: E2:2E:A6:D3:FE:C7:95:5C:CB:98:74:B5:A1:AA:86:65:A1:D5:3A:4D
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019A4EF52725DD74607386647F268DC2606E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:20 +0000
Manifest this update: Tue 04 Nov 2025 13:01:20 +0000
Manifest next update: Wed 05 Nov 2025 13:01:20 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: YL6p7aQPcfMU7tTsi05TnU/xvKcVamC/unqUh/KH2gA=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:27:25:dd:74:60:73:86:64:7f:26:8d:c2:60:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Nov 4 13:01:20 2025 GMT
Not After : Nov 5 13:01:20 2025 GMT
Subject: CN=e22ea6d3fec7955ccb9874b5a1aa8665a1d53a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:63:09:f8:3d:45:b1:5f:f4:a6:39:cb:ad:
d0:8a:bf:0c:ac:9f:3e:2a:81:4d:85:33:c5:73:77:
be:87:97:9e:84:06:3d:4c:3c:d8:b7:1a:64:9e:e5:
60:e5:56:92:3b:68:fa:bd:1a:f6:92:0e:29:2a:bd:
2d:d9:1c:c8:f0:48:18:8a:d0:ae:5c:1e:c1:28:07:
3b:78:d8:6e:79:ac:17:5c:bb:ca:ce:df:36:b1:a8:
da:bf:4d:fd:a7:ae:81:7f:8a:4a:07:b1:ed:a9:f9:
af:08:12:64:2a:c9:9f:42:b5:29:f1:45:39:c4:d2:
0a:34:36:57:cf:cd:d8:33:32:4a:17:55:02:95:be:
ca:d3:6e:c2:49:bd:7e:76:8c:ef:64:18:ba:7a:81:
00:2c:22:ad:76:16:ec:3a:65:20:6a:b2:e2:f5:3d:
57:ff:21:e3:89:88:e1:a4:b5:8d:e8:eb:e5:15:57:
bd:4e:6b:ce:ec:56:5c:6d:bc:b0:b0:1b:21:3d:29:
f8:2b:d2:7f:02:9e:2f:7b:d5:66:a4:f6:72:7a:8d:
8c:50:2a:7c:80:ad:d9:ad:90:5d:85:d7:82:0e:95:
f3:97:c2:0c:69:24:49:99:b0:f0:51:47:12:70:5f:
41:d3:f8:a1:c6:ff:0b:a1:2c:6e:a4:ec:69:43:dd:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:A6:D3:FE:C7:95:5C:CB:98:74:B5:A1:AA:86:65:A1:D5:3A:4D
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7d:c8:c2:db:8e:db:d8:6a:e0:bd:dc:fa:fe:6c:72:6f:de:
ff:09:b7:54:f6:c3:85:e1:38:d9:f4:29:4a:a5:4f:3b:6f:b4:
b1:f4:bc:14:0d:0e:64:fb:f8:8b:a9:b4:33:91:aa:e1:3b:a4:
c8:50:4c:80:ce:2f:15:02:b9:81:b0:6b:b1:b3:96:1b:4f:61:
ca:e9:56:01:a3:a8:76:dc:2d:c1:f9:4e:8a:01:f7:48:94:a1:
83:92:e2:e4:f4:ed:3a:cd:2a:a1:6b:52:12:af:dd:5c:89:9a:
dd:54:38:35:0c:7b:d6:5f:67:b6:6f:d1:f8:b6:79:1c:65:92:
8d:5d:83:70:2e:58:e9:5f:a2:02:d6:4b:fd:ca:38:b1:5a:89:
4e:dc:bb:98:6f:8c:66:43:fb:fd:32:fb:8b:7d:67:58:68:87:
e4:de:e4:72:97:62:a8:bc:cc:4e:a6:af:65:21:70:b3:4f:29:
7d:45:25:23:57:74:18:38:74:47:5a:62:02:c9:93:a5:46:38:
eb:48:1b:2e:6c:5e:0b:c6:de:64:65:41:7f:d9:72:ed:9f:d4:
8d:cb:d3:9e:62:b9:15:b6:59:a9:bb:fd:72:42:f9:d6:74:1e:
d6:29:fc:96:d5:d3:31:2d:b4:bd:2e:5e:4f:7e:bc:bb:84:bb:
35:be:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:33 2025 by rpki-client