Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: OYyrZKS/tFuOLjug0Al2hnSE9OyksKFCdr9Y+1bL7TY=
Subject key identifier: 6C:09:F9:64:8A:E6:E4:35:52:EF:61:CE:C2:57:27:A4:D3:D2:E8:32
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 019A4171030977C1E2769D083168066B3A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 100D
Signing time: Sat 01 Nov 2025 22:01:56 +0000
Manifest this update: Sat 01 Nov 2025 22:01:56 +0000
Manifest next update: Sun 02 Nov 2025 22:01:56 +0000
Files and hashes: 1: MjK_xJG6Hwcb67PomltSWuntrmM.roa (hash: aerGyiTEpiF59FAbfobUyJCn9cR81tY8N4zQCxzZAWk=)
2: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=)
3: TBmGO5t5AH5NVXED3d-86yJ2g-g.roa (hash: S/ggAtC3XkCG9e4NTbC903dmEf8ZwLiR5xsOu4Bo+Bc=)
4: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: BmApnUPlHwM+oYHAbBQOFbDzfKPyLD/sdKVM6ibuesk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:71:03:09:77:c1:e2:76:9d:08:31:68:06:6b:3a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Nov 1 22:01:56 2025 GMT
Not After : Nov 2 22:01:56 2025 GMT
Subject: CN=6c09f9648ae6e43552ef61cec25727a4d3d2e832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:0d:b7:ca:7f:0a:7b:a4:88:64:2e:76:69:
7e:7b:a5:d4:0c:57:e6:63:af:3b:c0:e2:36:80:74:
dc:1e:09:49:19:aa:6b:c3:4f:ef:65:34:86:3f:11:
b9:83:5c:dd:65:33:aa:65:4f:7c:d3:65:fa:c3:fc:
ac:79:c9:85:67:e4:17:43:a8:b9:41:14:c1:45:fe:
52:fc:3c:70:d3:94:88:7b:b3:7d:b1:ea:8f:99:e2:
38:a2:37:c7:1f:eb:4d:4e:7d:ba:3f:30:f2:42:5d:
ff:2a:ef:fe:4a:bc:0a:a0:61:cc:e1:b8:9a:4c:7b:
53:b9:e0:24:0e:dd:4c:eb:57:41:e5:7e:8a:4a:b9:
b1:ea:c6:a9:bf:81:e3:d3:27:16:3f:75:7f:0b:b5:
6f:91:4c:e7:6c:07:91:37:b4:ef:5a:38:f0:6c:a2:
1b:b6:3c:a9:34:9e:d0:c0:12:e0:27:e0:3e:d0:09:
f5:49:5a:d8:cd:92:88:32:a5:58:63:6b:98:5a:d6:
73:e2:02:af:ec:9b:9f:7c:2d:87:30:18:50:4d:b0:
cb:39:99:99:09:c1:3a:c7:38:32:1f:67:c5:15:47:
75:18:b8:41:73:01:39:97:c0:7e:d5:3b:be:a0:43:
22:ca:12:1b:e2:cc:04:14:38:17:3d:3d:c5:ae:74:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:F9:64:8A:E6:E4:35:52:EF:61:CE:C2:57:27:A4:D3:D2:E8:32
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e7:a1:99:cf:b6:26:76:9a:ec:ca:f9:70:72:ac:d9:32:38:
2a:72:c4:c0:5e:6c:2a:fa:14:58:a5:49:89:6a:49:63:38:d8:
ff:7b:16:fc:8a:42:c7:67:55:f9:94:ae:68:56:9d:d2:08:f8:
b7:0a:48:27:65:f1:c2:e1:4f:4a:a8:fd:3a:1a:00:09:da:d1:
93:f5:5d:af:1b:ac:42:e2:89:ff:c1:21:f1:f4:5b:5d:0a:e4:
66:b9:29:fb:5b:64:91:a3:89:db:6f:a6:34:87:e7:56:f9:0d:
dc:65:e7:97:1e:6a:4b:3b:b1:40:3c:3d:96:8a:02:59:2c:7b:
84:71:bf:d5:ec:e7:0b:b5:45:2d:a2:8d:c4:33:8c:20:11:4c:
cc:ae:bf:71:30:81:50:9e:e6:11:ab:22:0b:be:f2:71:2c:ac:
bc:0c:78:2c:da:c2:fa:be:fa:a1:b9:41:14:fb:58:e8:40:39:
81:8f:f8:75:2a:17:b2:00:2b:b9:aa:d7:7a:cc:7e:8a:0c:90:
2a:2c:bb:d3:f5:34:32:df:82:ce:80:9b:ad:a2:8f:1a:f4:af:
cc:54:e0:d0:60:51:f8:07:ac:78:85:d7:62:ae:4d:a0:6f:d9:
99:a3:71:a4:7b:56:64:10:8c:c5:db:95:85:67:b4:39:17:89:
ba:2a:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 06:18:22 2025 by rpki-client