Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: JlpOU6qMTDS6bF0p50h1cHax4ehAYeVtQ1ib8n7yoPE=
Subject key identifier: FE:4E:5C:E2:C6:44:A4:EE:C8:68:B3:2F:03:69:81:0A:BB:41:C6:BC
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 019A503DCDFE72B5C854297E8C2FF546A65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 1671
Signing time: Tue 04 Nov 2025 19:00:18 +0000
Manifest this update: Tue 04 Nov 2025 19:00:18 +0000
Manifest next update: Wed 05 Nov 2025 19:00:18 +0000
Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: zQ7VtuJcz/nN+DcW237fGLiTp7OOcrjRVHTRbSu6rKg=)
2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:cd:fe:72:b5:c8:54:29:7e:8c:2f:f5:46:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Nov 4 19:00:18 2025 GMT
Not After : Nov 5 19:00:18 2025 GMT
Subject: CN=fe4e5ce2c644a4eec868b32f0369810abb41c6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:9e:05:3c:a7:15:73:73:1a:86:28:6f:24:
f1:58:1f:43:3c:e3:19:fc:63:33:a2:80:c0:93:a0:
d3:a2:c9:7e:28:f5:9b:eb:62:01:32:44:90:23:b1:
97:16:69:81:89:b6:39:5c:7a:39:ff:f0:96:79:74:
5f:2c:3e:71:27:da:2b:dc:08:06:93:d4:b9:d1:12:
b3:c4:76:c1:46:9a:9c:89:c0:6a:67:92:0b:5f:ad:
a1:b8:06:f7:e6:f7:b2:1e:8f:17:90:93:ae:d1:f6:
63:4b:68:b5:c0:44:79:9f:dd:31:fb:5c:00:f6:8f:
5f:36:41:5a:af:2d:fd:6c:8f:fa:11:cf:fc:0d:9e:
e7:05:a9:7d:f5:64:2d:ad:15:ff:28:19:55:7f:84:
cf:8e:d7:14:c2:dd:30:2a:01:6a:a5:94:4c:9d:64:
67:45:73:fe:38:a7:b0:9e:81:09:76:e5:ac:cd:44:
01:29:b2:3e:40:04:d8:a9:6b:3b:b5:44:2c:ad:17:
c5:ef:1e:6d:ff:5a:83:b5:5b:83:19:b0:7a:7f:ef:
12:58:7a:a3:e2:e0:25:39:eb:50:a2:a3:72:54:3a:
88:14:2b:be:93:5d:76:4f:41:54:7f:0f:9d:3f:41:
a9:13:78:8a:3d:d4:78:21:c8:9b:d0:1d:17:16:6e:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4E:5C:E2:C6:44:A4:EE:C8:68:B3:2F:03:69:81:0A:BB:41:C6:BC
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:88:f1:03:7e:51:9b:33:b3:cc:e0:22:56:e4:91:05:14:a6:
e8:62:88:4e:84:c9:7f:35:3b:1e:f8:3b:fe:0d:43:20:d1:e7:
d8:66:cb:5f:89:3e:97:c1:24:8d:06:1a:d9:95:6a:c4:c8:7c:
bf:d4:6c:99:df:59:b3:aa:98:f7:d0:8d:76:d3:92:c0:12:0e:
15:e2:36:c6:20:e2:c5:ca:13:d0:ff:7f:19:82:0d:21:cf:98:
9c:7d:68:20:c7:61:f1:32:27:26:05:0a:d1:aa:0f:f1:7c:37:
05:46:f0:f6:dd:83:ef:b6:3f:86:c3:84:08:ff:76:e3:29:b9:
1d:90:f0:22:5a:c7:d4:d3:7e:8d:e5:cf:5b:d3:2d:55:65:38:
33:58:3c:eb:09:0a:17:3e:84:b1:bd:39:32:05:d2:25:38:e7:
d7:f7:c7:6a:f9:80:62:8c:ad:9d:c2:b4:c8:ec:cf:98:e1:a5:
d6:b4:7a:4a:93:fc:a0:df:b0:88:b8:37:a9:3e:89:c2:b7:c6:
c8:07:69:52:60:e4:d8:4b:22:66:32:75:37:c1:ce:25:6a:02:
64:42:10:33:e1:8a:60:4f:f5:53:cd:a0:53:54:04:72:57:5b:
bb:a8:c5:8a:a7:8c:24:86:43:dc:7f:3b:e0:0c:13:28:35:38:
6a:73:a0:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPc3+crXIVCl+jC/1RqZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNzMzODZmMzY3MjgxODRhYTAwM2IxZDk2MzlmZTM5YzRh
MTJhYTkwHhcNMjUxMTA0MTkwMDE4WhcNMjUxMTA1MTkwMDE4WjAzMTEwLwYDVQQD
EyhmZTRlNWNlMmM2NDRhNGVlYzg2OGIzMmYwMzY5ODEwYWJiNDFjNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMaeBTynFXNzGoYobyTxWB9DPOMZ
/GMzooDAk6DTosl+KPWb62IBMkSQI7GXFmmBibY5XHo5//CWeXRfLD5xJ9or3AgG
k9S50RKzxHbBRpqcicBqZ5ILX62huAb35veyHo8XkJOu0fZjS2i1wER5n90x+1wA
9o9fNkFary39bI/6Ec/8DZ7nBal99WQtrRX/KBlVf4TPjtcUwt0wKgFqpZRMnWRn
RXP+OKewnoEJduWszUQBKbI+QATYqWs7tUQsrRfF7x5t/1qDtVuDGbB6f+8SWHqj
4uAlOetQoqNyVDqIFCu+k112T0FUfw+dP0GpE3iKPdR4Icib0B0XFm5ArwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5OXOLGRKTuyGizLwNpgQq7Qca8MB8GA1UdIwQY
MBaAFFFzOG82coGEqgA7HZY5/jnEoSqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjkt
MGNkZGY3OWVlOTBmLzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xN2MwMmItZDczNS00MWNhLTgyMjktMGNkZGY3OWVlOTBm
LzEvVVhNNGJ6WnlnWVNxQURzZGxqbi1PY1NoS3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIjxA35R
mzOzzOAiVuSRBRSm6GKIToTJfzU7Hvg7/g1DINHn2GbLX4k+l8EkjQYa2ZVqxMh8
v9Rsmd9Zs6qY99CNdtOSwBIOFeI2xiDixcoT0P9/GYINIc+YnH1oIMdh8TInJgUK
0aoP8Xw3BUbw9t2D77Y/hsOECP924ym5HZDwIlrH1NN+jeXPW9MtVWU4M1g86wkK
Fz6Esb05MgXSJTjn1/fHavmAYoytncK0yOzPmOGl1rR6SpP8oN+wiLg3qT6JwrfG
yAdpUmDk2EsiZjJ1N8HOJWoCZEIQM+GKYE/1U82gU1QEcldbu6jFiqeMJIZD3H87
4AwTKDU4anOgOw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:55:41 2025 by rpki-client