Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: 3DjlL7Z/P0IPQKK2tK8L5HUOTHkply/QqTGG7icElk0=
Subject key identifier: 62:39:1A:9A:86:CC:32:52:A2:EF:7A:98:64:4C:C3:39:97:B2:52:7F
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 019A54C0B1B0EC0EEB5CACEA7D070BD83652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 16:01:45 +0000
Manifest this update: Wed 05 Nov 2025 16:01:45 +0000
Manifest next update: Thu 06 Nov 2025 16:01:45 +0000
Files and hashes: 1: KkYiM3e0iOAnAg_yFBFSK_bjJl8.roa (hash: 5A5Vdre+g6oCjMH5zABiFnTSkWahsDuZjsJoxbwHMo0=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: bGR4b5uftuyDcOvriXMpeYMO2rQDb77uQ7ECOyWfiV4=)
3: _Q23PPlL8v2niGzmSooSDUdLWSk.roa (hash: 8JwVrSvS2kxaZsRD1vVjitt0fjw3hWWmjxqgx0yIUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:b1:b0:ec:0e:eb:5c:ac:ea:7d:07:0b:d8:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Nov 5 16:01:45 2025 GMT
Not After : Nov 6 16:01:45 2025 GMT
Subject: CN=62391a9a86cc3252a2ef7a98644cc33997b2527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:55:64:9f:e6:7b:ef:16:90:2c:14:e0:33:
95:db:73:0c:84:0d:5d:2c:04:4c:96:f8:6f:c2:fc:
e5:4c:53:4e:63:fe:95:99:14:6d:f1:4e:1b:70:5c:
ed:76:89:80:25:ac:bf:1c:bc:87:c5:66:35:ae:cc:
7d:a7:66:50:e1:e0:73:c1:50:84:dd:b5:de:fb:14:
b5:d9:e4:f3:76:c1:19:1f:ef:11:7c:b4:06:9c:96:
04:2a:05:4b:11:22:ed:30:35:ae:41:7b:6a:84:ca:
e9:88:3d:aa:5c:25:57:f6:ef:36:e6:df:f8:cc:03:
1a:3b:79:02:7d:7e:b1:a7:8d:d3:c7:1c:db:25:cc:
88:3b:6b:63:f5:98:b3:f4:9b:16:df:b1:76:e9:65:
34:38:1a:40:19:b4:7e:0e:b2:12:dc:d1:bc:40:46:
00:8d:ba:43:f9:47:65:bc:56:4a:9e:3c:46:a6:94:
bc:ab:85:da:b2:42:a1:0f:d6:89:38:db:25:09:a0:
02:69:41:9e:61:b9:51:02:06:3b:98:41:b7:18:d1:
2f:9e:2c:b4:7e:d6:31:5c:4d:5d:bc:b2:55:16:93:
a2:69:28:a9:b0:4c:be:cf:82:5b:40:dd:41:ae:c7:
d3:6c:1d:67:0e:7a:b8:c0:8f:bf:03:c2:a2:36:91:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:39:1A:9A:86:CC:32:52:A2:EF:7A:98:64:4C:C3:39:97:B2:52:7F
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:15:c9:8e:53:c2:f1:1c:15:27:a2:dc:32:f9:3c:ea:e4:a7:
6d:3d:c3:25:0a:7b:28:60:93:77:1c:bd:db:7b:a7:5f:6a:68:
74:69:61:15:61:c2:0a:ee:0b:bd:35:ef:6b:b5:84:12:9b:18:
74:09:10:f8:f9:5d:a9:33:4e:06:39:4b:e0:e6:98:0a:5c:6b:
e5:09:f1:a9:42:c5:c2:70:36:e0:46:92:a3:e7:c1:e0:82:3a:
45:cf:fc:fe:70:6f:55:60:ed:d5:11:f4:a2:56:77:16:f6:c7:
f0:c9:98:ed:f7:b0:06:9c:bc:38:7f:b4:0b:37:41:98:f0:bc:
97:06:44:5c:f5:9f:5f:b7:bf:e8:53:72:4b:22:ef:5b:17:e1:
5b:47:24:0a:b2:8c:7c:04:78:4b:02:53:67:2b:9b:20:d9:46:
f7:1b:23:de:fd:8b:92:49:28:d8:03:b5:82:e5:61:96:61:14:
68:45:5a:20:e0:33:81:c9:37:45:a1:bb:3e:a3:8f:31:b9:5f:
c2:10:63:88:cc:1b:bc:97:24:66:6d:c4:27:ce:9a:58:2d:8d:
d4:ea:ad:56:e8:c2:34:88:96:e9:95:76:f7:0f:8c:d4:80:96:
1a:2b:10:9d:19:4a:9c:f5:14:b0:36:89:6d:a1:06:8b:4a:c3:
12:e3:2a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:29 2025 by rpki-client