Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: LY+yp/sl4QgqjWi2Wjttzhy4pkcvw6FoxnkBAr9jghk=
Subject key identifier: 69:24:75:D2:1E:83:68:1D:A9:9E:53:DA:9F:06:54:EA:36:61:46:67
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019A22F74CE3D142AC7D189D5E69C83EAA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 06C7
Signing time: Mon 27 Oct 2025 00:00:23 +0000
Manifest this update: Mon 27 Oct 2025 00:00:23 +0000
Manifest next update: Tue 28 Oct 2025 00:00:23 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: zQn2T9ib+jdUkpC9ykWCZ+BO0OqURhCd3i/fX42T9FA=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:4c:e3:d1:42:ac:7d:18:9d:5e:69:c8:3e:aa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Oct 27 00:00:23 2025 GMT
Not After : Oct 28 00:00:23 2025 GMT
Subject: CN=692475d21e83681da99e53da9f0654ea36614667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d8:a5:98:96:22:92:16:4d:cf:64:50:72:29:
c3:b9:cc:fc:c0:f1:ba:0a:27:69:97:3c:e3:0a:33:
8b:07:2b:02:03:6f:b6:f3:fb:d1:3a:22:4c:e9:79:
39:a9:19:11:45:0a:1e:5d:2a:4f:33:27:b2:ee:1e:
ea:02:70:ae:ad:dd:69:41:47:fe:75:bd:7a:ca:e1:
76:b8:4e:6e:38:94:69:20:41:e3:23:a9:22:78:2b:
ef:30:08:6d:de:95:e2:57:a2:0b:97:5d:36:a8:c9:
39:6d:eb:56:06:80:d2:63:4a:93:ae:18:f8:b4:d6:
a6:49:15:9e:dc:ff:8a:4a:b0:8d:b2:b5:f0:ee:c5:
c7:0d:73:67:a5:4d:08:9d:ac:39:ec:33:b5:b6:20:
1e:9a:76:c2:17:28:e0:30:a2:41:7e:51:77:88:89:
a7:ac:ed:09:a4:71:e3:b0:c6:7a:a6:ad:56:3d:bb:
8f:7e:b0:51:4d:d5:a7:d9:fa:31:94:4d:fc:30:f1:
db:1b:61:ed:8c:59:7e:b2:46:ca:38:a4:63:aa:53:
58:b2:b9:57:8f:12:52:39:eb:db:20:a6:fa:4c:66:
ad:2d:c8:35:c4:59:58:5a:28:0f:9a:75:31:73:cd:
08:35:ac:71:1b:3d:48:b5:36:21:27:ec:c9:b9:22:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:75:D2:1E:83:68:1D:A9:9E:53:DA:9F:06:54:EA:36:61:46:67
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d8:47:87:0f:69:ae:2e:65:72:30:c9:dc:58:95:18:97:96:
a8:a4:b0:2d:b0:17:50:44:db:74:b4:08:fe:93:71:d9:67:f9:
f7:95:b0:22:0b:23:26:33:ac:7a:a9:f4:2f:78:6d:bf:51:af:
70:ff:f4:fa:24:d5:f8:39:99:6f:41:85:85:25:cc:05:a4:f4:
de:ee:20:08:f3:ff:ae:78:0f:66:cd:1f:2d:0f:4d:42:1d:af:
8e:47:95:a4:64:ca:70:a9:46:74:e5:b9:22:13:34:68:c7:13:
6b:f7:92:49:3f:4b:a7:20:e0:ae:fc:83:3d:76:4e:35:4c:26:
16:02:3b:7b:37:53:11:73:9d:51:95:bb:a3:fc:bc:df:d5:bc:
2d:9a:de:75:d9:4f:2e:ff:a3:ec:b7:f8:3f:3c:23:e4:cd:a5:
53:b4:b1:0b:b9:40:e4:94:73:57:c6:d7:b5:66:65:7a:08:41:
25:aa:28:38:68:34:7b:e8:d3:4b:1f:ca:f3:ee:06:fc:8b:c0:
79:26:d8:7f:29:e8:59:12:06:51:9d:35:cc:e7:96:ce:ad:58:
37:8d:8f:69:22:ac:e2:19:d8:42:25:f1:5f:1c:47:79:5d:53:
27:b2:0b:38:20:86:d8:c3:c0:2c:41:72:48:3b:0a:6b:50:82:
61:6f:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:32 2025 by rpki-client