Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier: hTzNQaCA2ZqsTaYwlluovlRajizWUAq8WtUOacc8WOI=
Subject key identifier: 60:38:66:AA:4F:FC:9F:65:41:2F:80:A4:1C:E1:00:42:0E:24:FD:F2
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 019A522C741A3EE690B210090CF2A4D996BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 04:00:36 +0000
Manifest this update: Wed 05 Nov 2025 04:00:36 +0000
Manifest next update: Thu 06 Nov 2025 04:00:36 +0000
Files and hashes: 1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: E7Tv/289GRwgfCJTqjtX6qF+FECtPLOltZWFxx35gNs=)
2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:74:1a:3e:e6:90:b2:10:09:0c:f2:a4:d9:96:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Nov 5 04:00:36 2025 GMT
Not After : Nov 6 04:00:36 2025 GMT
Subject: CN=603866aa4ffc9f65412f80a41ce100420e24fdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:e4:e1:eb:f7:db:2a:b5:00:4b:cb:5b:03:
1a:4e:4a:e4:eb:ce:aa:eb:c4:9d:f4:68:8a:ae:e4:
b1:94:99:75:2b:cb:28:e2:1c:1b:e8:e1:44:b3:db:
ca:ee:55:d2:01:09:fa:01:98:e2:14:2f:52:8d:44:
91:5b:25:2a:7b:64:d2:9c:73:9d:1d:6f:18:40:7c:
fe:80:4d:f1:3b:85:c9:19:3e:88:74:42:b5:3e:ff:
f2:d1:b5:aa:a9:3b:49:ce:ee:e8:0c:4b:2d:aa:be:
c4:17:68:92:8d:52:bb:a0:f4:19:fe:be:17:e4:ec:
4b:14:06:55:58:20:44:9a:8e:9d:d5:96:55:f8:02:
cb:d3:76:ff:cc:ce:11:03:1c:81:9b:d0:1b:77:7d:
65:b0:3f:85:7d:ea:26:73:fe:d5:5f:7c:55:25:fe:
e6:dc:4e:7f:bd:31:27:57:77:d1:71:6f:88:d0:21:
61:d1:6f:24:f1:40:0f:f0:a3:03:81:e7:bb:7b:23:
75:92:ea:1f:51:31:4c:e1:a2:12:58:af:09:08:bf:
db:f5:d8:1e:91:4b:a7:91:fd:8b:0c:40:90:9e:3f:
a9:40:50:1e:24:96:51:32:0c:d5:95:a7:09:5e:6e:
bc:45:52:67:f3:a5:d6:f0:98:41:34:78:37:b3:45:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:66:AA:4F:FC:9F:65:41:2F:80:A4:1C:E1:00:42:0E:24:FD:F2
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1e:63:b7:a6:57:62:45:3b:9e:e8:86:3d:6b:be:b5:8f:01:
7b:82:96:c8:49:2b:11:c1:54:70:ce:18:bc:b5:18:06:30:fe:
c4:5d:b4:13:d3:f3:1e:a1:ee:e9:d0:b1:53:94:95:0a:a4:cb:
60:9e:fb:34:07:f8:89:38:5e:f4:24:c3:99:dc:09:86:73:d7:
81:e9:0d:38:df:76:d3:53:4a:6d:7f:f2:13:fe:17:fb:6e:70:
a2:35:a3:28:52:43:e0:7f:97:71:15:27:a6:25:49:bd:48:31:
9f:48:67:ce:65:93:53:89:58:23:ad:47:dd:fe:eb:59:b3:38:
3a:ce:90:d2:13:80:b9:c3:32:42:08:d3:8b:64:5a:01:6a:6b:
86:92:66:16:b4:62:21:4f:58:09:b0:1a:8b:71:7d:cd:97:b9:
c0:c3:e5:5c:34:16:1a:84:32:1c:1a:8c:f5:9b:ac:2b:fe:a0:
bc:f4:e7:00:1d:ed:32:8e:07:d4:0a:1e:46:97:31:23:53:f9:
1f:4d:19:17:9e:98:d2:76:a1:38:65:8a:ab:66:62:1f:87:99:
fa:19:e4:a6:11:5f:ce:48:76:c4:f2:70:f2:5b:4b:31:56:30:
58:42:d2:88:24:2e:d4:c2:16:e7:81:d8:62:cf:87:d3:5b:3a:
60:01:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:16 2025 by rpki-client