Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: cxWZuVM4cAIIdxXLTzANnTUrlx0V+7ukgdVzKc5tEVI=
Subject key identifier: D5:C7:74:2C:50:32:8B:E5:48:73:2F:DF:37:A0:50:AC:7B:73:03:77
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 019A52D8FCE65A2836A5359DAF4353C37FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 07:09:03 +0000
Manifest this update: Wed 05 Nov 2025 07:09:03 +0000
Manifest next update: Thu 06 Nov 2025 07:09:03 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: /xeUZI8QtrXA9Mo50SldskmCuG+8gPNDKId6ZSnWon0=)
4: dCfw3siXArkTGLHoDyVXC2auKAA.roa (hash: SQrCEBJEirqiW+cvXfiwSLmWhEoZRiFeCKfkOofqd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d8:fc:e6:5a:28:36:a5:35:9d:af:43:53:c3:7f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Nov 5 07:09:03 2025 GMT
Not After : Nov 6 07:09:03 2025 GMT
Subject: CN=d5c7742c50328be548732fdf37a050ac7b730377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:3e:59:06:c3:2f:bb:23:fd:b6:65:c9:d9:
b6:4d:48:db:fb:eb:4d:b6:a0:aa:67:ff:cd:78:19:
f5:fd:0b:80:a6:3d:85:e9:5a:b6:fd:71:f7:1d:69:
d7:ba:b6:09:c0:4e:24:e7:a6:fe:20:23:bc:04:67:
c8:67:ed:52:4c:05:64:46:6e:1d:9a:dd:86:aa:6d:
cb:35:b6:9c:3f:1a:fe:0b:3e:c4:4f:ad:90:b6:f8:
de:fb:73:23:95:d1:14:31:d8:a4:f8:4c:fc:42:18:
70:18:5d:7f:cd:06:68:75:40:21:ca:52:98:57:e2:
87:ec:19:3d:7f:12:b1:c4:c9:c4:a8:09:b0:09:d0:
5e:49:3a:0c:2d:2a:0a:dd:11:bb:a4:41:8d:0d:a1:
2b:fa:f3:85:33:da:45:89:61:a5:9d:e8:3b:d0:f4:
4d:bd:07:ba:86:2d:e7:1e:a5:01:ac:1e:4f:7e:e6:
44:87:97:bb:86:bf:05:54:6d:47:1d:d8:20:8c:da:
11:52:07:d9:2a:64:96:01:6a:52:76:8e:71:1e:f4:
f6:03:b9:33:28:39:ee:2e:3e:b3:e4:3d:2c:2a:cc:
e6:c2:3a:ea:7f:ad:a0:a0:dc:df:d4:60:bf:9e:e7:
bb:0f:eb:12:ee:eb:7b:70:98:f0:a0:e1:8e:2c:9d:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:74:2C:50:32:8B:E5:48:73:2F:DF:37:A0:50:AC:7B:73:03:77
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:5f:47:76:8b:e4:75:8d:0c:55:5a:ea:c6:cb:68:c6:24:
b9:04:3a:eb:da:0e:1b:ae:a5:ef:5b:03:51:27:ca:6a:d1:b0:
68:dc:b8:7b:ea:c0:08:a4:47:cf:20:5e:02:a4:ac:ea:b7:e1:
25:31:46:e0:d7:e0:e0:e9:66:b8:b8:d8:ee:54:44:49:a3:8d:
dd:35:54:fe:39:18:c1:d5:df:75:05:14:13:48:30:3d:03:3e:
a4:f8:60:b4:fd:c6:2b:92:03:44:1b:3e:6d:be:e5:3d:10:11:
c4:4b:a9:06:7b:e3:64:21:39:21:09:9b:3c:9b:99:9f:df:cb:
8f:59:d9:32:f1:e3:dd:6e:57:93:33:b5:58:ab:58:71:b3:ef:
08:80:0b:91:90:79:31:82:5f:d9:e0:fe:bc:81:c9:7d:fa:f7:
0d:25:40:93:aa:73:7a:50:cd:5f:3f:eb:4b:b7:18:ca:a3:5b:
25:a4:5c:94:2d:32:bf:ac:ab:9a:7e:7c:1e:42:f1:dc:53:2c:
d8:f8:91:33:95:69:da:4c:4b:0b:73:26:cf:0e:9f:58:19:aa:
09:b7:77:9e:14:79:85:52:90:38:38:78:e7:35:d9:04:07:03:
e1:17:12:bc:d1:2a:80:a0:92:bf:f2:b9:6d:22:e8:6e:44:cf:
cb:e4:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:33 2025 by rpki-client