Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: npbKz6HAG7x/4IUfTt7Qvuuxowj+FagO6hd5tkVOrjU=
Subject key identifier: 41:6F:57:D3:CB:81:3A:46:D2:77:39:CC:1E:9B:C2:29:25:03:D0:18
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 019A4C6145818F216D94B2E20489E152361D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 052A
Signing time: Tue 04 Nov 2025 01:00:34 +0000
Manifest this update: Tue 04 Nov 2025 01:00:34 +0000
Manifest next update: Wed 05 Nov 2025 01:00:34 +0000
Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=)
2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: govbrk+gXuu6x0udRlT40EehegYV5Ja0ZTV0XQKGlgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:45:81:8f:21:6d:94:b2:e2:04:89:e1:52:36:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Nov 4 01:00:34 2025 GMT
Not After : Nov 5 01:00:34 2025 GMT
Subject: CN=416f57d3cb813a46d27739cc1e9bc2292503d018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:6f:ee:af:36:a3:a6:0b:15:db:93:1f:dc:
69:05:39:97:56:72:e9:2b:96:fa:61:1c:4a:58:d8:
66:8d:6e:f2:5b:3f:1a:83:1c:bd:65:05:2f:67:e0:
36:e1:f9:7b:d0:1a:88:2e:5c:5f:a7:80:93:4d:2c:
cb:14:4f:98:9d:a8:2b:e8:40:15:1f:04:be:58:65:
23:e3:22:ba:27:17:39:1b:1f:30:bf:18:d2:90:a6:
dc:51:c2:bf:aa:08:94:41:9d:22:99:94:87:d1:1b:
b0:bd:fb:72:b7:c3:8a:2e:fd:4e:3e:11:84:76:fa:
7a:82:50:85:e4:87:76:5c:d6:8b:d2:0d:a8:83:6a:
a4:21:02:2b:1f:51:09:42:e2:2a:6b:d0:1b:83:95:
4a:57:4a:ff:cb:5e:a7:2e:c3:4b:cd:a4:e8:3b:9f:
f6:17:bf:8c:b0:82:f7:ab:3d:8e:dd:77:86:7c:3c:
c6:fd:c4:cf:85:c2:62:19:30:82:a3:21:b0:ca:c9:
af:95:68:bf:a0:c3:c0:f7:ef:da:90:0f:c0:7c:5e:
73:06:4a:66:5f:3f:b5:bd:3c:72:32:9e:e0:89:85:
94:ce:37:8f:07:13:6c:98:c1:c9:26:47:79:53:07:
89:8b:31:8c:e0:d1:dc:08:06:52:e4:20:05:cb:c4:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:57:D3:CB:81:3A:46:D2:77:39:CC:1E:9B:C2:29:25:03:D0:18
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:57:06:dc:62:0b:1d:fe:7d:41:7e:e3:9e:ea:68:5f:23:fb:
be:b0:7d:18:e6:82:23:96:d3:43:2c:c5:07:8b:08:93:cc:a0:
17:6a:80:ea:69:7c:3e:25:4f:50:b1:8f:f7:6c:07:25:80:33:
67:28:86:62:fc:83:0f:ed:fc:2f:1f:c2:07:81:3b:9e:0d:4a:
27:80:a8:65:0d:28:d3:65:cf:06:6c:ad:69:52:f8:1d:5d:40:
b6:ef:62:1c:43:c7:d9:3b:fd:7f:64:6c:a0:79:75:b6:29:e7:
99:97:32:d3:e1:e0:77:02:45:85:4e:0f:27:c3:1a:bb:b0:f6:
58:db:23:c5:b2:60:d7:07:b9:aa:26:40:eb:f7:b0:d8:4e:88:
c3:da:0c:3f:c7:f5:80:5b:bb:0b:09:cb:9d:0b:2d:0e:d6:2a:
23:a4:fc:75:0e:6f:20:67:d5:b3:4c:4c:3b:0d:4c:21:c1:38:
1b:56:df:66:a6:bd:0a:96:f1:04:f1:48:b5:ff:28:c4:d5:53:
71:25:48:90:7c:6e:37:af:df:4a:d8:c2:34:77:ae:b6:0c:7b:
b2:13:e4:90:1a:1b:9b:62:6f:14:fe:96:47:e9:ca:16:c6:6e:
2d:05:3c:66:db:fd:36:b0:46:87:3f:70:21:8d:a1:77:35:e2:
7f:4a:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:56 2025 by rpki-client