Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File: UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier: Y/Fc+kIoH1lBCR/Ped68reEAHrVmaFr18GgnhoLp76o=
Subject key identifier: C1:53:90:FA:3C:BF:45:4C:63:75:12:7D:C0:8C:7A:2A:01:1E:8F:FC
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial: 019A4F6267B0496F07C8D7A595CF5932049F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number: 089B
Signing time: Tue 04 Nov 2025 15:00:40 +0000
Manifest this update: Tue 04 Nov 2025 15:00:40 +0000
Manifest next update: Wed 05 Nov 2025 15:00:40 +0000
Files and hashes: 1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=)
2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: Yq5Jl+UXTJyW2UV2qYAavqAxwATPMv6ev8g/KjWANIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:67:b0:49:6f:07:c8:d7:a5:95:cf:59:32:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Validity
Not Before: Nov 4 15:00:40 2025 GMT
Not After : Nov 5 15:00:40 2025 GMT
Subject: CN=c15390fa3cbf454c6375127dc08c7a2a011e8ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:98:9a:62:8f:aa:d6:96:ee:f4:9d:bc:69:
3a:5c:c7:d3:03:5e:af:b9:d5:d5:5c:f0:f2:d9:e8:
8d:16:d6:32:bd:da:b3:96:64:e3:9d:d6:83:0e:0a:
13:18:3e:b2:7b:9b:67:69:d6:48:7b:0b:0c:d5:70:
dc:d7:99:ac:b7:a8:04:88:69:dc:35:fe:a7:2b:4f:
02:b2:d6:62:4a:3a:b6:7f:93:f3:dc:27:10:59:b4:
2d:c0:04:b3:6c:1b:4e:9f:e6:65:49:83:1c:27:4b:
8b:2e:b3:28:f1:2f:82:31:10:08:33:09:36:53:91:
75:7e:a1:23:b3:da:3d:2b:17:06:5e:ec:73:b8:36:
6f:02:3e:72:78:14:f3:6e:f7:2f:92:8e:5f:98:57:
f5:2c:57:cb:47:88:93:39:e6:84:8a:a3:13:a8:3d:
ee:cc:b8:0a:d5:5a:a1:61:32:ec:c8:14:bb:69:6e:
01:22:ae:00:be:45:65:40:9b:dd:54:7e:e6:01:e1:
05:d8:13:a0:04:9f:03:e5:8d:59:c0:4d:76:4e:52:
67:eb:2a:df:8d:a0:57:0f:4d:4c:5e:a8:f6:31:a5:
7c:06:e6:6b:cc:34:ce:5a:be:a7:03:33:26:73:60:
7e:4c:dc:04:09:80:70:35:07:50:a1:60:c7:7e:eb:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:53:90:FA:3C:BF:45:4C:63:75:12:7D:C0:8C:7A:2A:01:1E:8F:FC
X509v3 Authority Key Identifier:
keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f0:21:f5:21:4c:57:d2:65:4c:0b:8b:96:1d:94:b1:6c:59:
f9:bf:7e:a5:4e:37:51:58:e4:56:23:2d:9e:a7:0a:64:b8:6f:
f7:51:bb:0e:47:81:c5:b8:8a:17:c8:ed:6d:9c:85:01:82:71:
56:35:76:84:5f:b4:c5:d8:1f:aa:af:98:cc:bb:91:67:4d:bc:
1a:3b:39:c7:fc:13:b2:36:bc:23:63:e6:04:6c:ee:77:17:a3:
b7:bb:6f:9c:c6:be:7b:ec:80:0f:1d:74:27:f7:c4:5d:74:d3:
d3:85:06:52:64:02:ec:49:9c:89:34:86:a5:2d:7e:5e:e3:a3:
7f:b2:ab:fc:52:f2:c1:47:39:10:03:b3:c8:6f:cf:6c:9b:48:
4d:50:b0:3e:3c:6b:7c:87:47:07:30:4f:5d:60:45:1f:22:da:
0f:65:07:7b:02:6b:d8:c7:22:87:7f:0d:34:e5:12:b6:c8:80:
5e:9e:68:d3:f0:d3:60:f0:24:c1:da:b7:f8:fb:c0:58:b4:1c:
86:20:2e:c1:56:09:49:c0:4e:2e:31:d7:7a:71:e8:00:4c:b9:
d7:db:ac:51:34:b3:2c:ed:ce:c5:a2:c8:a9:f2:bc:81:5b:38:
1a:68:58:41:68:96:10:57:37:fc:5d:db:ae:1d:fb:a0:7e:7a:
9c:ea:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:42 2025 by rpki-client