Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: cBYx+SZT6LUaH7ztA4ZIqPsxFhx2FUGUf7Xr50czU84=
Subject key identifier: FB:53:8A:0A:6A:D5:CE:22:B8:5E:33:6A:67:23:5B:10:AE:86:6F:22
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0199C532EC433922F24401D42F5BD18F833E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1576
Signing time: Wed 08 Oct 2025 19:01:12 +0000
Manifest this update: Wed 08 Oct 2025 19:01:12 +0000
Manifest next update: Thu 09 Oct 2025 19:01:12 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: FLGnfbvRPSA16/y9N5Az/rGJXd45ZjtJDygpDregXAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:32:ec:43:39:22:f2:44:01:d4:2f:5b:d1:8f:83:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Oct 8 19:01:12 2025 GMT
Not After : Oct 9 19:01:12 2025 GMT
Subject: CN=fb538a0a6ad5ce22b85e336a67235b10ae866f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:19:f5:12:e1:0e:f5:a2:2d:47:8b:41:0d:
10:22:7a:be:47:3a:e1:54:32:60:2d:87:5b:6d:67:
a0:3f:b5:ba:57:24:19:b5:4e:1e:dc:cc:7e:85:36:
ad:78:81:48:55:c8:50:8e:0d:98:19:31:41:96:b3:
57:cd:cc:fd:1f:f2:33:dd:df:7a:ac:14:c4:83:9c:
a5:d2:a2:8a:06:42:92:4e:76:5a:77:8d:fa:a2:d1:
3d:84:67:85:75:b9:1c:ad:5b:fd:d9:65:6a:54:46:
78:9b:64:09:0a:86:b1:c2:92:60:5d:a2:c4:f4:38:
b6:e3:4b:57:8e:bb:e1:d6:e9:3a:21:e4:8a:ad:7c:
0f:88:e8:e0:89:ff:68:aa:73:9c:e0:15:93:59:0f:
22:87:00:ba:cb:3f:21:08:b5:0d:15:76:d2:f9:1d:
10:a5:b7:e3:17:6c:19:f3:2d:55:6b:85:ae:90:0c:
4e:3b:a7:67:c3:be:36:31:26:af:fb:51:26:84:01:
54:45:75:8a:69:02:51:36:a9:b7:e7:71:b4:7d:a5:
04:2f:11:59:93:2a:e2:bb:4d:20:a3:fc:12:22:7f:
00:9b:85:78:2b:8a:dd:da:ae:c7:6f:8b:c9:24:d5:
55:be:99:b0:eb:5a:68:b6:75:fa:34:9c:9c:a5:f6:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:8A:0A:6A:D5:CE:22:B8:5E:33:6A:67:23:5B:10:AE:86:6F:22
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9c:84:cd:27:25:45:5b:92:ad:a9:14:d1:36:1a:5e:68:4a:
10:01:ce:cd:a7:e8:39:21:92:35:82:f4:a2:9d:68:14:23:4a:
31:8c:c6:23:73:eb:cb:2d:27:b2:38:e8:d4:6d:ea:6c:28:cd:
8a:5b:95:92:0a:dd:bf:e0:44:1d:ea:ed:28:d2:2f:fe:24:8f:
04:a7:6a:03:9d:64:ac:29:12:f3:4f:9d:96:0d:53:53:15:61:
10:d6:f9:06:15:17:ad:4d:5d:5c:06:2e:2c:f2:16:22:e4:66:
a7:59:39:d6:45:57:8d:c6:a7:27:e2:ae:40:7c:c7:c9:55:bb:
55:15:a1:80:6f:d9:e7:ac:cd:32:fa:e9:04:45:26:d2:44:78:
41:f4:09:08:d8:cd:e8:a9:e5:a8:2e:a1:47:2a:d8:8e:2b:2a:
6d:29:17:12:a4:2a:3b:4f:bf:53:f3:b6:25:36:c8:b7:7b:11:
b3:aa:ae:20:ca:58:5e:43:50:e2:b6:4f:28:70:0b:1e:41:08:
4b:97:1f:5a:5e:06:08:0a:f8:ab:fd:33:80:6b:00:81:d3:32:
1c:90:45:0c:1c:ea:a7:8e:6b:d0:04:f4:e6:1d:e4:f8:87:41:
c1:14:46:7d:89:90:ba:da:2a:3e:71:70:7e:a9:5f:c9:fe:22:
14:bf:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:11:44 2025 by rpki-client