Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier: EJ8rpJVd7iFTC8nYe9H80LQ3lurOTGHqwjvu0tNcKQk=
Subject key identifier: 19:63:EB:D3:0B:14:65:3B:5B:66:51:77:CD:0D:B7:59:FC:09:98:5B
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial: 019A7112A526EFAA34EA2F603593A61614E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number: 05EF
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (hash: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=)
2: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: awnC7Q2xYBPTuVKBbqLzVk0iuPzZ1kyowKcfbtndmz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a5:26:ef:aa:34:ea:2f:60:35:93:a6:16:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=1963ebd30b14653b5b665177cd0db759fc09985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:7b:22:c4:44:f3:ed:55:5a:1e:59:4f:7a:
b2:04:6c:48:69:96:f2:da:69:0a:9c:20:1c:e3:93:
ac:36:a4:b3:78:01:15:9c:10:d3:00:48:ad:4e:42:
d1:cd:e6:93:d8:6f:88:45:0f:4e:09:fd:27:16:31:
75:a0:69:42:93:44:f8:11:42:97:fe:78:5b:41:e6:
a8:05:bc:fe:de:bd:5d:d5:40:7f:77:a0:3b:ec:6c:
8a:85:75:35:58:92:ef:86:ea:b0:93:e2:41:3a:52:
0a:14:af:4c:ad:ef:b2:93:fc:0a:1e:ef:68:5a:af:
92:80:73:d1:18:c0:07:d0:9c:6c:c1:6b:3e:6e:83:
4b:5b:dd:85:2f:d9:d3:99:e3:ca:41:bd:ad:89:6f:
cc:02:5f:f6:80:4c:29:4d:6a:c9:f3:8f:51:9d:27:
9f:6e:12:e1:18:2d:c7:a1:f0:db:ce:d4:e8:3e:b7:
2d:af:36:3d:1f:25:64:bd:10:b1:59:9b:8c:bc:d2:
c0:07:d4:2b:8f:60:9d:81:e4:a6:e2:78:bf:31:78:
b7:2d:f6:a9:3f:b6:61:9a:29:89:da:88:2e:70:99:
da:35:4f:e4:13:04:2b:01:71:ab:4c:c0:6a:e2:0a:
5b:50:de:4d:8f:01:51:bf:3c:37:37:af:5a:a6:ad:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:EB:D3:0B:14:65:3B:5B:66:51:77:CD:0D:B7:59:FC:09:98:5B
X509v3 Authority Key Identifier:
keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:46:40:59:ad:3c:75:d8:eb:b4:a6:d8:42:35:3e:48:da:6f:
ca:42:e6:de:29:43:bc:77:ef:10:c9:f5:20:8e:3d:bf:32:ee:
f0:0b:7b:77:f5:4b:7b:77:59:ee:93:6d:63:9a:7b:bb:34:22:
76:1b:bd:57:54:50:fc:e6:c8:d6:b2:79:b5:6c:f6:18:98:e7:
9a:e4:8b:73:58:3e:ce:89:84:e7:27:f2:a1:cf:b4:39:5c:3d:
1a:8a:3d:a0:75:93:c4:f3:b5:5c:78:37:10:31:43:21:4d:79:
80:b3:5d:e4:48:8e:e9:bd:6c:6b:66:ca:e4:5f:06:3e:87:47:
ec:7a:d1:0b:a2:8c:e8:98:21:2f:cc:b9:f3:da:48:c9:b7:9f:
95:17:4f:de:c1:27:6d:cf:dd:10:f2:da:ff:35:6f:ab:13:cd:
d4:f5:6c:06:36:cb:78:55:e2:1d:cf:82:fb:d4:1c:ad:53:63:
a5:be:b6:14:e2:1b:4f:a0:b2:1e:b7:03:2c:c5:e4:64:59:34:
39:ca:11:5a:3f:ce:f6:74:35:a6:9b:aa:87:04:b7:de:4d:8f:
2d:99:fa:fb:ff:a6:b2:40:1b:7f:75:a8:c1:59:59:70:4a:01:
54:f1:2a:db:e0:a6:49:43:8b:b3:86:60:39:87:06:bf:53:87:
39:33:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:28 2025 by rpki-client