Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: j4PGCuSdWGnh/tPkUtLvgxiFBehc28kFGjLUa5ckHAY=
Subject key identifier: 39:5C:81:56:06:CF:F4:8A:30:74:90:A7:C7:62:52:0D:4B:4B:D4:54
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019A5150EEA532109DB8015D913750EC0FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 00:00:49 +0000
Manifest this update: Wed 05 Nov 2025 00:00:49 +0000
Manifest next update: Thu 06 Nov 2025 00:00:49 +0000
Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: 7hhkhLPpgE1uCArsHUF0+zsG9Uw26HZf4U8BPbCdm/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ee:a5:32:10:9d:b8:01:5d:91:37:50:ec:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Nov 5 00:00:49 2025 GMT
Not After : Nov 6 00:00:49 2025 GMT
Subject: CN=395c815606cff48a307490a7c762520d4b4bd454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:cb:fb:e2:8a:54:99:cb:5d:07:3f:89:a2:
be:a3:55:a7:3c:92:56:a5:2f:82:25:d2:b5:0e:0a:
1f:5d:f0:1a:ac:b0:22:31:5f:0e:28:68:48:90:89:
ca:ce:5e:87:27:e2:90:8b:2f:79:d1:72:8c:de:2e:
2d:33:4a:c6:b7:b4:16:21:4e:5b:4c:53:e7:81:3c:
38:c4:fa:73:3c:56:7e:13:d7:e6:2e:c3:5f:7d:db:
e5:f8:ae:a6:66:88:61:fe:3d:49:62:88:c0:e9:62:
ba:40:1b:45:81:0b:d3:b0:3d:80:7e:97:d4:2e:0c:
d3:26:8d:3c:a2:34:74:79:26:ae:13:2d:d0:b4:98:
b6:51:dc:8e:a0:e6:46:ef:ca:9e:a3:33:5d:8f:eb:
87:7e:11:14:02:2e:3f:aa:95:a0:b9:59:24:3b:e2:
a5:b2:00:6b:91:81:6f:81:8a:ef:8d:f3:cf:0a:9a:
46:82:cf:a6:5e:00:be:c9:63:ef:10:83:6a:62:1c:
b4:b1:61:75:9b:34:66:8f:29:1b:61:65:e7:21:d2:
86:80:e7:50:ea:a6:d7:ac:2d:92:ad:2e:57:22:ac:
2f:95:fa:a0:21:99:76:0a:ed:88:e5:6e:ad:c9:22:
f1:69:7d:00:eb:d1:ff:eb:fc:66:fe:31:bc:69:1e:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5C:81:56:06:CF:F4:8A:30:74:90:A7:C7:62:52:0D:4B:4B:D4:54
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:11:ee:27:f8:98:ef:6d:9a:81:9f:6c:b4:62:f5:04:92:bd:
fd:41:0d:2e:ae:9b:7c:4e:63:36:2e:4b:32:bf:14:94:2d:4c:
13:b6:80:6d:b8:d4:2a:a2:18:5f:1a:3b:db:4d:f4:c7:94:e8:
0f:29:1a:cd:26:00:91:a3:17:2e:03:95:58:86:15:ee:85:3a:
1d:0f:e4:80:b2:bb:e5:dc:5c:e0:89:5b:93:08:2f:7b:b5:0f:
4d:ac:8a:e6:6d:3c:db:18:78:ea:94:46:36:60:d7:b5:b5:ee:
c0:cf:eb:67:7c:23:d1:74:3d:2d:33:cb:a4:9a:9a:56:fe:33:
e4:d1:bf:d0:7e:51:50:a2:47:4a:32:19:a2:2c:49:d1:d7:d3:
af:b6:6c:b5:a9:ad:b6:0f:e2:47:ec:be:5b:49:ae:93:79:9b:
8f:76:57:58:b0:e0:17:8a:a2:a0:28:49:f4:e4:79:73:e9:6d:
5c:b9:5e:f4:0e:ff:11:7f:9d:af:e2:de:76:6a:f5:5e:f0:ce:
6a:77:8b:95:b1:00:49:aa:4b:0b:14:08:f1:88:83:c7:3f:13:
5d:58:16:8a:47:3a:4f:7a:64:a2:ee:79:a8:1b:9d:01:b5:80:
6c:49:1d:28:64:8c:b6:93:f4:91:52:cb:8e:9b:1c:e7:06:e0:
62:3b:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:15 2025 by rpki-client