Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: 48YDXXGq9kkHJCvWoUYwJqklSWxr8H/6ejeHXdVq9bM=
Subject key identifier: 5D:D1:7A:56:AA:13:F7:EE:18:A8:4F:F2:75:40:A8:40:EF:F5:20:52
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 019A4DE1EA49B3E1D1CD4CD58CE1460070AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: b5wK4NrK8cCX+ehGHu1dw8PYNF2C9ESTy/5b+4LvmO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ea:49:b3:e1:d1:cd:4c:d5:8c:e1:46:00:70:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=5dd17a56aa13f7ee18a84ff27540a840eff52052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:38:4c:30:79:03:42:00:fd:f3:05:11:8f:
09:04:ca:91:61:08:56:16:ba:ce:f6:d4:21:f8:be:
d5:2a:ef:1f:43:ca:14:e9:3f:5d:02:4b:7f:3b:57:
03:68:63:30:57:3c:10:2d:3f:9c:68:fa:95:22:22:
37:03:e5:23:06:a5:09:7a:55:4f:1f:1a:0f:eb:c1:
d7:ba:b7:ac:92:0d:eb:f5:30:33:62:e3:a3:1f:8a:
cf:a9:b4:8d:98:31:9c:1f:34:1d:06:32:48:6b:90:
30:60:f2:d4:1f:54:32:58:66:e8:54:ff:2d:0a:7b:
ff:e3:b7:34:70:dc:22:c2:f5:1f:c2:2b:1b:61:7f:
01:1c:99:38:e6:50:dd:00:49:ac:5c:1b:e5:13:48:
52:46:35:93:90:a0:fc:ec:af:0f:e4:85:4d:c8:07:
6f:a8:b3:b9:56:00:6e:04:f6:b8:54:97:b0:a8:00:
af:6a:8f:4c:23:19:c5:58:5a:fa:51:ee:62:c9:28:
8f:c8:76:b5:19:a2:f1:c4:2e:6e:57:5b:44:51:a3:
54:8b:fb:f7:72:58:64:0c:20:50:60:12:f3:2d:20:
29:3a:64:4c:f6:1a:8c:e7:2b:0c:f3:cf:46:30:79:
fe:54:fc:3b:c4:0a:00:5e:9c:0f:0e:4f:12:d9:5d:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D1:7A:56:AA:13:F7:EE:18:A8:4F:F2:75:40:A8:40:EF:F5:20:52
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:61:18:d9:d6:5f:3c:38:2e:e8:7a:10:0c:1a:b8:cd:39:56:
13:ee:15:19:9b:19:9f:af:9e:40:e2:85:be:03:5a:0f:69:44:
11:53:a0:b6:62:ed:35:20:3e:65:49:4b:c0:35:42:39:3e:35:
5b:7a:91:6c:57:78:97:ec:99:8e:82:a6:6c:ac:2d:17:bb:79:
4a:30:ef:0b:88:82:0d:cc:94:41:b2:07:c5:f2:0f:cf:9d:ed:
0f:6d:d0:03:60:b0:0b:7a:06:84:9a:6d:fd:9e:03:35:59:80:
74:be:63:3d:41:af:9b:e8:0d:b4:62:85:95:5a:18:94:76:ff:
fb:5a:fb:2e:3b:93:0b:9b:4c:b7:4b:f4:97:98:93:16:d8:46:
bd:4c:8f:16:fa:5d:14:58:ff:67:1e:5d:8b:c1:f0:28:9c:eb:
9b:67:5e:7b:32:d5:26:27:ac:1b:50:5a:9b:77:d1:2a:01:3a:
1a:ee:fb:f9:54:7e:92:f6:08:27:e9:83:cd:47:6f:d3:82:c1:
98:06:1d:c8:ff:70:38:6a:fc:82:e5:45:70:54:53:7f:c2:f8:
d4:db:1e:f5:aa:39:00:71:cc:2c:a8:d9:63:b5:b8:a2:9e:da:
95:d0:ce:75:37:e9:4e:f5:b2:be:25:88:9d:3f:3d:63:40:59:
02:61:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:21 2025 by rpki-client