Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: 5gPuDN3n7Poe82s0dqFXHWPxIPNmGUYYj+jHaZ+V+YI=
Subject key identifier: EE:86:B7:0D:A7:76:44:1D:16:55:EC:93:B8:8A:D1:4F:C9:5E:27:59
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019A4F996456211E52D13D8C6B8F3E37015B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 16:00:43 +0000
Manifest this update: Tue 04 Nov 2025 16:00:43 +0000
Manifest next update: Wed 05 Nov 2025 16:00:43 +0000
Files and hashes: 1: TFo1gtP034QimxoONKR9cO3Rea0.roa (hash: ZbKyuz+8pa9I1RSPWJwZNU5a7S31Y7QOYHmJtNh9TXA=)
2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: f022ao757J0vo0twfjeRYy2OyO+KP5nYrve05dh+//Q=)
3: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:64:56:21:1e:52:d1:3d:8c:6b:8f:3e:37:01:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Nov 4 16:00:43 2025 GMT
Not After : Nov 5 16:00:43 2025 GMT
Subject: CN=ee86b70da776441d1655ec93b88ad14fc95e2759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:61:c6:f8:17:67:d4:59:13:b0:e6:12:fc:
9e:30:83:ed:3b:1a:2c:a4:41:bf:21:5f:e3:97:04:
ae:4e:bc:60:4c:20:bf:7b:e6:6a:9f:17:fa:97:40:
19:be:03:d8:0e:39:76:b4:6f:38:20:af:68:b3:89:
2a:d5:cf:a7:6f:17:cd:f9:2e:d1:51:be:fe:32:2c:
01:89:14:b8:ac:49:23:56:c2:08:01:a1:6f:4f:eb:
3f:ac:40:2e:f8:47:82:df:55:d0:c6:6e:db:3d:75:
eb:4c:30:0f:80:0f:ac:b4:45:94:3c:3f:e7:64:8f:
8a:5f:c4:e5:fa:d4:a2:1a:fb:35:dd:5b:3a:81:62:
75:a5:cd:0b:b0:8e:42:df:ba:a4:60:2a:3e:c4:cc:
d0:d9:3b:42:23:df:0f:6a:e6:77:eb:74:c5:36:f4:
d7:48:38:f1:87:89:14:3d:0a:91:cb:03:bc:2d:21:
e7:bb:75:56:02:71:fe:b7:b0:db:64:11:4f:40:7e:
0e:3f:31:25:0c:62:19:e1:65:94:a3:20:f2:11:f3:
e4:d6:13:21:82:1c:12:0d:da:13:62:85:eb:51:3b:
52:85:eb:b9:09:66:6a:e7:96:9e:b9:b1:86:b7:68:
42:40:18:b7:24:02:c0:3c:7a:e8:07:0a:7e:de:05:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:B7:0D:A7:76:44:1D:16:55:EC:93:B8:8A:D1:4F:C9:5E:27:59
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:5d:c4:c7:0f:f5:88:97:e7:5e:93:39:2f:ea:24:4f:a0:
fc:eb:50:22:b6:e1:5b:df:c6:20:33:f1:9d:d5:55:af:e0:af:
e2:e4:d4:7d:be:4a:30:48:49:0f:16:2e:98:89:ea:97:ff:ba:
21:d5:5f:56:b2:8f:6a:bd:40:1e:bc:db:a9:3d:8f:95:ca:48:
7c:86:ca:50:a1:55:c1:d8:d8:64:0e:83:04:3d:5b:18:1a:ab:
6d:76:6a:70:8e:79:8b:26:3d:53:64:7f:ca:54:29:04:b2:49:
76:53:c4:17:4b:94:e0:ed:8a:c8:0a:2f:26:26:fd:1e:46:75:
04:1e:b7:9f:db:65:74:3b:b3:ea:b9:60:20:e1:0a:a1:e6:7a:
2d:ec:47:8c:eb:e6:46:99:a5:c4:d4:b5:f0:4b:7a:3f:9d:ae:
3e:58:e4:50:9b:9e:91:d2:0f:f8:39:9e:8b:cf:16:a0:e9:ed:
98:fc:c8:6b:ed:27:7e:f3:fb:a4:5f:16:4c:12:80:69:16:4a:
9a:22:eb:5d:cd:fa:22:3e:0b:5d:55:26:06:8e:0a:68:96:2a:
61:13:9d:e7:2f:87:da:51:46:06:32:c6:db:33:d6:1e:7a:c4:
c5:01:40:b0:a9:3e:5d:7f:d9:6b:38:66:42:24:9e:0f:73:e8:
46:49:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:31 2025 by rpki-client