Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier: TMV3clpDFACCtEpAHH3rMr3kZjh8yCi9Up/HeFtFVMU=
Subject key identifier: 35:A1:EF:B5:3C:B3:1D:52:98:0A:6D:98:D8:B3:4F:C3:BB:38:EF:84
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 019A51BEA66099E58942710E52A46B3EE9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 02:00:40 +0000
Manifest this update: Wed 05 Nov 2025 02:00:40 +0000
Manifest next update: Thu 06 Nov 2025 02:00:40 +0000
Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: v5s9bg5xsryuzxhN8QZY3vJuJX8s9D11aD8lO0fylwc=)
2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=)
3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=)
4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a6:60:99:e5:89:42:71:0e:52:a4:6b:3e:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Nov 5 02:00:40 2025 GMT
Not After : Nov 6 02:00:40 2025 GMT
Subject: CN=35a1efb53cb31d52980a6d98d8b34fc3bb38ef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:24:5d:8d:a6:6c:eb:ef:de:0a:81:dc:13:e3:
4a:af:8a:2c:26:c1:ac:c5:f4:7a:48:81:7f:f6:b7:
ac:6e:9f:74:f7:18:a1:89:38:95:3e:2c:3d:49:d3:
63:9c:4c:22:6b:91:6a:73:39:cd:ac:40:5d:0c:38:
2b:8f:2f:19:c0:f5:8d:c9:ea:df:3c:97:74:d9:f5:
78:5a:d5:b0:44:fe:e3:ff:61:56:12:31:85:eb:c0:
a5:14:d2:f0:cc:ce:c2:15:c8:1c:9c:88:8f:85:be:
b1:43:20:89:10:ef:dd:8d:6b:19:2e:56:5d:ba:f3:
2b:9b:60:d7:ae:96:10:8c:4c:51:a0:36:20:81:42:
71:4e:24:d7:c8:19:67:8f:df:65:1b:2d:e7:99:71:
cc:00:4b:a8:56:85:ef:d1:f3:72:e2:88:77:f4:1e:
99:b0:19:0e:b8:aa:2b:af:0d:f2:50:8d:02:ba:b6:
31:f9:65:a0:8c:96:64:80:64:92:c1:03:6d:9d:b0:
f5:58:31:a5:46:dc:9c:ca:ba:30:6e:d7:38:e3:2c:
22:e9:32:ff:5f:80:1e:2d:58:47:c0:90:a3:69:8e:
cf:11:ac:c2:d8:ef:ba:69:f0:e8:55:5b:da:fa:05:
85:2d:88:2d:34:6f:bc:15:e9:3e:4a:20:49:f6:20:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:EF:B5:3C:B3:1D:52:98:0A:6D:98:D8:B3:4F:C3:BB:38:EF:84
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d4:56:d3:88:c6:93:f7:e2:29:ed:8b:ba:e2:0d:85:48:b4:
a4:7b:0f:ac:ed:94:67:20:59:af:97:f6:f4:d7:d5:84:ad:a6:
cb:f3:99:0d:dc:f0:77:89:67:be:f0:c3:47:08:e6:81:49:14:
ba:7f:4e:6c:6f:34:88:db:72:a9:3e:1f:52:a4:d3:c9:a4:3d:
46:f1:33:1c:7a:70:6f:e0:a8:89:73:09:e7:95:0e:c2:66:37:
e5:81:89:5d:82:2f:05:06:81:3a:96:d1:ad:c9:f7:0d:69:ee:
9a:1c:77:1d:42:50:22:e3:09:9a:a4:f0:a6:93:70:cd:ce:42:
c4:f4:48:46:d7:05:b0:52:1f:fd:b5:d7:ec:a0:5a:44:41:d1:
07:d7:dc:23:95:57:ab:e4:af:72:66:cf:4a:d3:aa:f8:75:3c:
5f:b4:11:1e:b9:ce:f3:2f:16:14:98:50:2f:9b:4c:e3:ed:27:
82:d4:96:2b:b3:6f:b3:65:21:05:7b:9b:8f:a4:b6:6f:cb:a5:
52:92:a9:da:07:57:7d:4f:4e:f3:3e:85:fd:80:b9:56:6b:b3:
42:81:e7:6c:b1:f3:23:3c:ac:01:12:16:31:fa:b5:aa:4a:95:
2d:08:25:a2:9c:9c:78:eb:73:4f:70:c9:45:27:ea:38:5d:c3:
0e:89:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:17:44 2025 by rpki-client