Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: KshH1YCZxmSzc9+wvt/ZC4MWDoZ+sKvaQK5V49sU4SE=
Subject key identifier: E3:48:C6:DF:6C:A3:EC:78:D9:A6:A3:28:50:3E:64:FC:43:2F:1E:09
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019A51F5370D71D6D2C42A3B629E6135C573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0D9E
Signing time: Wed 05 Nov 2025 03:00:16 +0000
Manifest this update: Wed 05 Nov 2025 03:00:16 +0000
Manifest next update: Thu 06 Nov 2025 03:00:16 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: 1Pam7ScbLPSjggRp2ngX2WIS3+KQ4GDmTj/tLuEhGBQ=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:37:0d:71:d6:d2:c4:2a:3b:62:9e:61:35:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Nov 5 03:00:16 2025 GMT
Not After : Nov 6 03:00:16 2025 GMT
Subject: CN=e348c6df6ca3ec78d9a6a328503e64fc432f1e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:16:50:54:1a:af:1a:c2:f3:99:05:86:d0:
24:60:0b:42:6d:50:53:68:ab:91:5e:90:bd:83:b6:
b0:64:36:de:dc:f2:b3:29:d9:88:40:4b:c9:36:9b:
3f:24:62:35:bd:02:15:27:53:9b:c2:a3:2f:72:db:
37:8f:90:b8:7e:82:73:b3:61:47:13:4c:e0:20:83:
e7:a3:d6:c1:d7:a8:6e:6a:02:7c:57:0e:bc:02:5d:
66:10:af:26:d3:2b:9b:8f:e1:4d:bd:6f:88:4e:15:
66:f2:88:97:c4:d5:79:90:56:45:64:95:20:a5:b7:
a9:03:d9:1f:9e:1f:a0:f5:83:5b:bb:e1:d5:fb:ca:
b3:2b:fd:7d:df:76:2a:06:c2:ea:5a:1c:2b:ae:ec:
02:df:81:be:2f:3c:fd:30:66:d9:70:0a:07:ec:1b:
44:a4:c8:8d:4a:ff:35:01:c0:ad:9a:8a:b1:d5:37:
d0:42:e6:fe:c0:ce:7a:f3:17:98:37:3e:36:e3:ed:
da:25:d8:22:cc:8b:0e:91:60:b0:87:b6:8f:ef:79:
60:b9:31:5d:4a:81:06:84:f2:82:eb:9f:b6:f0:d1:
2c:59:42:09:ad:a6:e3:d8:ec:46:81:56:fb:db:87:
a8:1f:6f:52:15:c4:31:5c:71:17:e8:52:2a:2c:94:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:C6:DF:6C:A3:EC:78:D9:A6:A3:28:50:3E:64:FC:43:2F:1E:09
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c9:e0:43:eb:cc:57:97:1f:67:2d:18:06:3c:64:93:19:d4:
25:a8:fc:8c:64:8e:cb:ea:1a:6a:51:8a:5c:52:29:66:f6:36:
84:0b:62:3f:9e:50:43:64:ef:80:72:8a:13:6d:6a:a0:74:b8:
b2:a9:97:96:f1:16:fe:2c:9e:d9:ad:97:a8:c8:a6:bd:41:14:
df:ab:a1:bd:64:ea:18:e4:bd:46:c0:67:76:97:66:03:f2:96:
08:b7:af:23:d2:08:de:6e:22:21:e6:81:9e:ae:53:14:6a:19:
a2:e9:37:14:38:b3:be:40:4e:4a:43:f1:d0:b2:e6:0f:27:09:
3b:aa:0e:87:79:1e:11:f4:07:b0:6a:5f:8c:73:62:49:66:bc:
ec:c3:5b:ae:4e:39:04:18:e1:c4:16:2c:af:2a:ca:69:5a:58:
27:23:27:60:99:9b:fe:7d:43:ea:f1:a0:d9:05:e1:bc:0e:97:
45:ca:ad:9b:4d:49:e8:62:7c:00:0a:a9:d6:ee:17:ba:ee:78:
29:82:2d:b3:d4:f9:91:c8:35:7f:4c:d0:bb:3a:01:dd:a3:78:
85:41:14:4c:e1:1a:fb:27:e1:37:90:c4:3d:6e:3e:ca:9a:6a:
7e:83:69:a4:59:58:60:b6:a4:79:ef:f2:8b:18:72:de:4b:2a:
d2:48:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:56 2025 by rpki-client