Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: LycPQ7W57jE2x+liUp7DEeRtVD9qPF1/P+mWLKQEzGE=
Subject key identifier: 74:56:EB:C2:31:8E:BB:76:2B:59:0B:42:C2:AC:A0:A5:91:BC:2E:9C
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019A145FBE2658D9C50E70722BEDFC5511F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 1700
Signing time: Fri 24 Oct 2025 04:00:10 +0000
Manifest this update: Fri 24 Oct 2025 04:00:10 +0000
Manifest next update: Sat 25 Oct 2025 04:00:10 +0000
Files and hashes: 1: 1WNYYNS7RX-CeZ_6JxRjUdD-q2A.roa (hash: wxMlsJGdNKU4KY3gfHml6end/i1xs49sClefHW/FEbI=)
2: RWBCbOOdbBGTferrrFeH21g0Q-s.roa (hash: OgUeYLtx1plcBJ0e3g1wF6V6jlWOtr/OpNuK7tUONQE=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: j95od1rlQxgB+MoB541FW05O/MsqQTO2lH9ZOkujL04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:5f:be:26:58:d9:c5:0e:70:72:2b:ed:fc:55:11:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 24 04:00:10 2025 GMT
Not After : Oct 25 04:00:10 2025 GMT
Subject: CN=7456ebc2318ebb762b590b42c2aca0a591bc2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:c6:b8:18:67:44:47:e8:c4:bf:3e:28:73:
59:01:d5:48:40:a3:c0:f9:68:a9:3b:e2:38:10:0b:
9d:ee:9b:81:f8:c7:ad:70:e3:88:81:db:58:64:f6:
a8:cf:a6:c6:fe:e9:6d:e5:cf:5b:d8:57:bf:7f:07:
03:d4:1d:08:25:28:d0:5b:87:7c:0e:91:0a:6e:6f:
85:b9:77:1d:d8:6c:81:e2:9a:f3:02:90:67:38:8d:
b1:cb:ef:24:5e:a4:aa:f3:6c:95:42:99:d5:b1:ea:
b9:21:4d:d0:8f:30:05:75:a7:c0:c6:db:9f:27:b1:
20:cd:bf:ee:a9:59:ab:13:5b:e6:ab:ab:8f:37:ee:
a2:6e:e8:23:ac:f0:ca:53:76:5c:c7:15:7f:3d:b3:
44:9e:7e:c6:31:f2:7e:29:f1:56:14:a3:42:67:55:
9b:db:88:5a:12:6e:5c:b8:b2:69:3c:5c:4c:b3:30:
12:7e:a9:df:c5:0d:92:74:0d:87:39:c1:6e:5b:72:
9d:49:c5:a3:47:fa:1d:69:ea:c4:be:70:5b:ee:c6:
2e:dd:e4:7b:91:5f:c6:67:1c:4a:4e:22:eb:68:dd:
70:f2:1b:af:f7:0f:ed:b5:a5:e6:a6:19:9e:4f:49:
04:a1:d0:4a:43:e5:aa:92:49:db:58:6e:15:74:e7:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:EB:C2:31:8E:BB:76:2B:59:0B:42:C2:AC:A0:A5:91:BC:2E:9C
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:49:8c:ec:49:42:ea:1e:5d:c5:6f:30:ec:d1:6b:ac:c3:01:
d7:44:ef:1c:87:4c:13:4a:0c:8c:07:98:ee:01:e6:5d:2e:cb:
af:bd:0d:94:a4:cb:d1:c2:65:c9:18:03:f8:5c:81:00:bb:82:
f1:fe:f0:55:92:9b:87:d3:b1:13:d8:f8:f9:aa:de:81:ac:6e:
89:66:b2:4b:36:e3:8b:de:1e:b6:6c:d8:44:18:51:b1:3e:26:
be:35:73:7e:fa:57:25:bc:c8:af:08:16:f7:19:f7:8d:1f:d4:
cb:82:3d:d0:5e:3f:bb:03:16:95:4f:18:4c:ca:b9:7a:c9:a5:
46:b6:41:90:0b:92:2a:dd:8e:a5:51:28:59:7b:d9:6e:b5:7b:
db:77:7d:b4:d5:7c:e2:18:bf:e8:51:53:db:1b:b4:61:bd:4c:
bf:4f:aa:87:fe:73:ae:92:21:ca:e5:b6:92:da:18:cc:ff:26:
6e:d3:8d:09:45:da:7d:fe:c9:04:d5:81:e8:4c:94:6e:36:eb:
81:b3:ee:5a:4c:ed:09:db:c4:05:65:53:da:aa:07:71:8d:81:
5d:2a:5c:ee:7c:cb:d0:d1:8e:e0:3f:07:d5:0f:59:33:69:e3:
cd:62:21:7d:1f:91:86:af:6d:ef:7f:a4:52:a2:78:6e:cf:1d:
e9:b6:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:54:15 2025 by rpki-client