Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: wGMZPa6y3JaXNmWbhXFMe0WvZyS5dv7bBJVNkhbOCGU=
Subject key identifier: 4E:DC:79:5F:36:95:8F:86:CD:F6:69:8D:0C:14:63:B6:34:01:BC:77
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 019A4D074DC1C8C424DC4088E692098D6967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 1013
Signing time: Tue 04 Nov 2025 04:01:55 +0000
Manifest this update: Tue 04 Nov 2025 04:01:55 +0000
Manifest next update: Wed 05 Nov 2025 04:01:55 +0000
Files and hashes: 1: MjK_xJG6Hwcb67PomltSWuntrmM.roa (hash: aerGyiTEpiF59FAbfobUyJCn9cR81tY8N4zQCxzZAWk=)
2: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=)
3: TBmGO5t5AH5NVXED3d-86yJ2g-g.roa (hash: S/ggAtC3XkCG9e4NTbC903dmEf8ZwLiR5xsOu4Bo+Bc=)
4: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: +T6nEYRwJbK6sBX6G3+ObEHeEbJK4bphDLAV1tMTacY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:4d:c1:c8:c4:24:dc:40:88:e6:92:09:8d:69:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Nov 4 04:01:55 2025 GMT
Not After : Nov 5 04:01:55 2025 GMT
Subject: CN=4edc795f36958f86cdf6698d0c1463b63401bc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:9c:85:8c:ce:40:c3:36:e0:97:7c:02:36:
63:5f:1c:68:0c:3f:04:38:32:01:81:b9:dd:4e:9d:
11:a1:c4:82:96:4b:a2:16:35:a1:9a:c9:59:bc:56:
b2:8e:ed:20:80:4f:c3:ea:ff:26:4f:eb:42:8d:a0:
45:b5:75:0f:55:63:c3:00:18:be:88:15:5e:eb:c6:
b5:aa:a2:30:23:5d:0d:3b:6a:06:8f:e8:dd:f2:27:
2f:57:3f:42:31:d7:2b:f2:88:d0:f9:f1:9e:73:df:
cf:e2:7b:37:01:56:27:f4:8a:11:c8:0f:19:a3:59:
3d:1b:5b:8e:2e:8e:d1:79:bc:b2:13:9e:fd:53:12:
1c:6b:a6:59:06:cd:0d:4c:c7:ea:52:55:8d:70:09:
a4:6d:7d:91:b2:a1:8c:fd:ef:7b:26:1b:e5:b6:fa:
13:fb:dd:7f:10:36:82:d0:db:a6:76:f8:1b:3e:62:
ed:b1:70:c2:90:93:89:52:09:23:32:df:33:52:9b:
bf:20:ba:28:d0:06:a9:43:04:17:17:ad:7f:4c:12:
8c:94:ba:02:72:4e:b8:2c:a6:57:8b:88:ca:49:e2:
df:55:64:0f:7e:6c:fe:1a:16:02:ca:c3:ed:84:b7:
ec:de:e7:b9:b3:ed:92:10:7a:04:d0:ab:60:03:cc:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DC:79:5F:36:95:8F:86:CD:F6:69:8D:0C:14:63:B6:34:01:BC:77
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:e3:6d:58:f4:73:cc:bf:18:77:51:df:4d:92:20:80:52:
13:7e:6a:6e:9f:26:43:3a:4e:f9:e2:1c:c4:ed:64:ca:3a:9f:
17:1d:67:f8:95:cb:f7:67:b6:66:ca:6a:c8:5f:4b:36:6d:48:
52:02:f4:37:fc:82:e3:ff:94:35:ec:b1:3d:df:ec:3d:69:91:
2f:e9:88:f2:05:36:c7:b4:68:15:4b:e6:89:a2:4e:1b:39:89:
94:a4:2e:b9:7a:83:13:ba:39:05:8b:d5:e3:f8:28:37:af:3a:
81:89:84:e2:06:c8:3c:fe:0c:e0:f3:94:8e:18:32:a9:2c:20:
53:ea:28:fa:23:12:7e:79:b1:ee:35:52:ec:d0:40:8b:90:46:
0d:d1:bd:4c:20:ca:cd:78:5f:4b:85:dd:f9:16:f3:79:b8:17:
e9:bb:fe:13:17:e0:ff:46:fd:14:43:66:c4:82:3f:40:60:a7:
34:89:35:eb:23:f4:35:20:58:ed:c2:7d:41:70:ef:22:f4:10:
c9:c8:4c:86:17:04:86:f4:21:35:e7:3f:53:c4:52:81:a4:d8:
f0:1b:33:3b:31:16:44:5e:3d:63:1f:82:fe:83:20:30:45:f6:
bc:42:50:95:69:00:c0:1f:6b:92:c5:77:6d:57:62:50:57:4f:
5b:2a:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:19 2025 by rpki-client