Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: Aj+pyK4wdeNQrkfpJD0e/Fcqa4d0j6oFgchReinsVGs=
Subject key identifier: C1:7E:55:BA:7D:0F:7F:08:76:68:F7:B4:65:75:FB:CA:99:FA:A9:33
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 019A21AD6DF22B5E6334DCBC587B691666D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0245
Signing time: Sun 26 Oct 2025 18:00:04 +0000
Manifest this update: Sun 26 Oct 2025 18:00:04 +0000
Manifest next update: Mon 27 Oct 2025 18:00:04 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: 3FWl/l3kH2VEkos4/LJ2XX/k803hbwrrkrFh9tlMDbI=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:6d:f2:2b:5e:63:34:dc:bc:58:7b:69:16:66:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Oct 26 18:00:04 2025 GMT
Not After : Oct 27 18:00:04 2025 GMT
Subject: CN=c17e55ba7d0f7f087668f7b46575fbca99faa933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:2e:d7:00:00:20:04:a4:8a:fc:6c:6b:18:
8c:b6:e9:ea:f2:9c:0b:ef:c0:64:6f:86:9e:98:57:
9b:ed:e1:a5:91:38:a6:4d:92:a4:1d:f8:bb:94:b5:
b9:f6:88:c4:3b:4a:51:1b:f0:dc:46:78:1b:68:b9:
db:90:e8:59:8b:e1:53:ae:20:80:60:45:94:d2:d8:
ce:17:9d:21:5c:14:02:4f:9f:e2:cb:6b:19:6d:81:
2c:0b:a7:77:5c:b3:38:df:94:05:0a:95:52:dd:13:
3a:92:71:31:a0:37:47:fa:73:de:32:78:3c:a6:86:
27:99:e6:aa:02:93:2f:af:1c:6f:7b:ad:f8:ea:81:
b3:62:f6:7d:34:69:c3:00:7d:8d:a0:82:f6:91:72:
1a:34:2f:bb:80:7f:9e:2f:51:70:01:4a:67:38:fb:
35:ab:2a:b9:55:b0:7d:8b:14:c0:b1:fe:ac:1d:d4:
19:7b:97:c6:b4:62:9f:b6:f8:68:1c:b0:46:f2:bc:
9d:bd:d9:7d:95:58:a5:53:bf:4d:0b:b9:bd:ba:7f:
02:45:1e:bb:22:a8:61:f2:fc:61:0f:af:44:f4:18:
01:90:6a:9e:d3:ab:7f:80:f8:13:61:65:9b:71:be:
a3:ef:1b:b5:e7:1d:da:91:a4:f1:1f:eb:be:ea:dd:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7E:55:BA:7D:0F:7F:08:76:68:F7:B4:65:75:FB:CA:99:FA:A9:33
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:27:d9:00:ac:65:63:40:66:f1:f1:92:34:c3:31:30:a8:72:
69:b7:30:8a:b4:bb:bd:0a:28:d0:14:2d:d7:ff:33:0a:39:2e:
f8:21:62:7e:21:0b:3a:94:e3:1a:3f:67:ee:34:b1:b0:ae:0b:
4c:cb:56:07:4d:20:0e:e5:ab:1d:a7:90:5c:34:c1:00:9a:92:
89:91:a8:08:33:70:3e:3e:1f:57:ce:e2:b5:eb:a4:3e:5a:65:
54:c1:de:f5:a9:c6:24:62:4a:ea:c1:1f:ce:ee:32:83:34:6c:
b5:25:02:ae:14:41:57:2d:1c:bb:5b:b6:4d:6c:88:c6:e0:d8:
46:6f:2b:1c:22:2a:5f:4c:bd:12:95:c7:ec:f5:58:98:96:0d:
1d:68:d5:35:9b:94:2b:fe:32:19:8a:53:15:6f:bc:f9:2b:83:
70:00:a9:6c:7e:7e:81:74:ca:4c:ca:80:8a:b4:17:9b:64:3a:
0b:a9:74:84:42:b1:a1:73:7b:fd:f6:19:ae:b0:ea:5f:0f:b0:
ee:2a:2a:c4:f1:c5:91:82:66:5c:e9:36:d4:c3:31:4a:79:3d:
37:db:3b:a4:1a:67:13:cc:aa:ef:fc:3a:e8:e1:62:76:30:19:
1b:ea:a7:d6:04:48:50:ed:1c:da:bf:6e:aa:5c:bb:61:c6:71:
7f:42:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:51:24 2025 by rpki-client