Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: j20vyw0cwjNvrbSayNMa2PYcYlZ8RCtUOhykC3Vd3ew=
Subject key identifier: 54:76:18:0B:15:45:E1:80:DD:83:78:59:FC:9B:CB:8A:84:CB:F5:37
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019A5119EC46783C23871B1E3BFBA4F94928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 23:00:44 +0000
Manifest this update: Tue 04 Nov 2025 23:00:44 +0000
Manifest next update: Wed 05 Nov 2025 23:00:44 +0000
Files and hashes: 1: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=)
2: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: FnvPyeu7l1QzozDhnRfEoS7g6b4Y/4mnoX306pYA308=)
3: aAPjM_XPDDQsO68mlmOjlIms0io.roa (hash: xF98ssC/+VTcwkX22EdQGZnLSnHebds/QYmj2MMKLB8=)
4: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ec:46:78:3c:23:87:1b:1e:3b:fb:a4:f9:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Nov 4 23:00:44 2025 GMT
Not After : Nov 5 23:00:44 2025 GMT
Subject: CN=5476180b1545e180dd837859fc9bcb8a84cbf537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:1b:dc:56:7d:59:af:5e:27:49:ae:a3:ee:
f0:6e:7c:01:c6:86:8e:7b:23:d3:52:5c:1e:8c:37:
0c:f3:4d:43:f3:77:aa:85:7a:ca:5c:24:33:3d:d2:
af:c3:23:da:85:35:24:1d:d9:9d:d9:ab:ee:30:06:
de:ea:e0:5b:7a:43:86:27:ee:83:72:23:0e:3a:d5:
66:a4:6f:2e:12:77:e3:8e:17:4e:cc:b7:25:3f:0f:
d4:de:3b:8b:51:3f:8e:b8:25:7f:4d:db:3d:b2:26:
df:cf:b5:01:a8:8f:1c:9d:ca:42:71:cd:c0:9c:b4:
8f:7e:f9:de:3a:d4:1d:81:ca:9d:25:26:9d:a5:b9:
b8:f5:c7:64:1e:f3:e3:12:b8:4c:91:9a:a8:57:ee:
c1:8b:6e:f6:86:4f:03:1e:9a:d9:fa:21:48:43:c8:
59:00:14:e0:54:da:b5:df:4a:52:89:bd:9f:44:68:
ac:5f:ec:d7:3b:0e:b3:b4:35:ff:09:5f:f8:2c:78:
07:09:3f:0c:1c:8b:b4:30:6e:e1:8b:bc:15:e3:18:
42:96:11:7d:c1:6b:45:03:c6:18:5e:7c:ec:c8:43:
5e:5f:c9:20:5b:01:e0:ce:26:68:92:e0:02:3a:c3:
09:60:d7:5a:3f:17:47:4c:0b:2f:01:2c:b8:c7:b8:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:76:18:0B:15:45:E1:80:DD:83:78:59:FC:9B:CB:8A:84:CB:F5:37
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:45:be:1f:99:d9:8b:e6:69:b9:f8:a8:94:dd:f6:47:0f:79:
7a:49:95:8e:08:d7:67:16:00:80:5a:29:1d:24:11:80:a8:b5:
ec:80:26:c0:c3:b2:39:6b:d0:55:60:b9:33:41:25:14:d0:2d:
05:16:61:4b:fa:37:20:b3:f8:5a:50:52:fa:6e:19:b5:b1:ba:
d4:ac:bd:7c:f2:c0:ba:aa:50:5f:66:6a:2d:21:a4:72:a7:58:
ef:6f:d6:ff:10:1b:6e:29:dd:2a:33:d6:5d:c1:23:d8:bf:4b:
10:e8:0f:3b:91:99:f3:c4:14:aa:e5:ae:97:38:33:4b:e0:7e:
b9:71:1b:69:56:10:b3:62:b6:f7:8d:99:ec:0a:d2:7f:92:7b:
1a:ea:43:f0:21:d5:48:20:70:44:6c:a9:db:ab:6a:52:c0:b5:
77:57:26:0a:82:3d:a8:12:a4:b7:73:99:df:99:cd:32:f0:4d:
ea:f6:31:6a:03:89:7e:87:a9:31:0a:0c:13:fb:94:7f:9a:1c:
c2:17:51:b7:2c:ac:f5:80:65:1b:37:f0:ae:e3:d9:94:e6:30:
49:e3:c6:69:b0:df:90:fd:30:44:b8:df:75:8b:87:b0:5b:f1:
99:c6:0c:93:47:31:35:14:99:16:37:12:ce:d3:29:74:84:bc:
29:2f:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:04:25 2025 by rpki-client