Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: w3uPVuQWM9ozMtRhSNKkbq3w1rtcomBEQuZG5M1m4+U=
Subject key identifier: B1:3B:12:96:A5:A8:A4:20:26:4D:72:32:0F:7F:C2:1B:E7:65:FF:2E
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 019A4F2B41C659291A06AD0DA0CD9208DEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:26 +0000
Manifest this update: Tue 04 Nov 2025 14:00:26 +0000
Manifest next update: Wed 05 Nov 2025 14:00:26 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: n9mknhvsVX0J8fEtaR5hNmcHfiHr3BZvHDPJO6k/5Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:41:c6:59:29:1a:06:ad:0d:a0:cd:92:08:de:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Nov 4 14:00:26 2025 GMT
Not After : Nov 5 14:00:26 2025 GMT
Subject: CN=b13b1296a5a8a420264d72320f7fc21be765ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:e2:7f:c2:79:15:a8:4a:96:d6:19:8a:f5:
e0:ff:c8:7e:18:79:0c:1d:20:35:9d:a9:a6:25:58:
e7:be:0e:ec:a6:6b:d3:0f:e4:8d:f5:f2:49:35:66:
3f:96:f7:ae:66:70:2c:e5:00:19:40:ae:29:60:32:
ad:16:59:06:04:79:af:86:84:96:78:53:d1:cc:09:
ba:47:aa:da:56:df:ed:7a:db:e3:c6:22:f4:9d:ec:
31:c1:0e:26:2c:4e:86:1d:5f:11:a3:66:20:6a:f5:
48:38:64:e5:3b:b2:62:49:f1:0d:5e:67:4a:c7:f4:
f6:f8:36:3c:9a:27:3d:a3:18:54:2a:0d:aa:c7:89:
4b:77:c7:42:74:65:4c:d4:16:f5:0b:d2:30:e8:1c:
3b:e2:03:35:8b:cd:ff:a4:43:28:9d:dd:b1:68:17:
31:28:66:f9:2a:84:eb:2e:13:f8:67:0e:96:aa:e7:
c6:be:a1:12:92:61:36:c1:24:e8:90:02:9c:80:a3:
a3:f4:c9:b9:65:61:c1:22:e9:d2:cd:dd:22:ed:e9:
1b:c9:6d:11:f6:ba:1f:32:14:79:29:41:5f:29:3b:
eb:58:af:4f:5e:d5:e0:3d:72:ca:1b:bd:fe:17:1b:
12:4a:2c:b2:c5:e2:51:9e:63:91:62:ba:a0:c2:64:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:12:96:A5:A8:A4:20:26:4D:72:32:0F:7F:C2:1B:E7:65:FF:2E
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ae:5c:32:af:6e:32:98:2b:99:e1:bf:ae:1c:da:18:90:c0:
23:ed:59:18:22:9a:73:31:4b:5e:e1:79:a9:78:2d:bb:57:a5:
93:46:4a:3f:a2:8d:ac:71:b7:62:e1:68:6f:87:17:3f:38:a5:
79:50:e1:4d:2b:1d:b8:ac:b1:20:e0:09:aa:8c:67:e0:5b:f1:
a8:e5:65:ae:21:fe:92:39:95:bf:e5:21:b9:20:80:78:78:b6:
37:69:92:1e:4a:51:72:ba:9f:13:db:49:42:30:29:dc:df:dd:
cb:89:da:2c:68:32:31:06:cc:d3:b6:58:a2:e3:80:29:5e:06:
85:8f:0a:aa:ff:e0:67:1c:55:35:90:fe:c1:e9:61:fc:fb:ca:
02:04:6b:1e:83:9a:9f:c4:52:10:dc:f4:92:9d:d6:53:b0:8b:
22:db:4b:84:52:93:9b:3d:a8:32:e0:51:dd:53:79:4d:e2:46:
36:b6:38:ac:24:54:9b:fe:ba:0e:74:1f:81:41:3f:99:ba:cc:
5c:4d:89:74:94:54:cd:89:dc:33:8c:7d:ea:46:0a:fb:17:23:
78:a3:1d:98:66:9b:c8:65:72:87:a4:72:ca:f1:56:e5:da:5f:
96:07:b6:54:90:26:01:aa:6b:fe:68:52:f9:f5:79:09:c2:40:
e4:12:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:47 2025 by rpki-client