
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File: UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier: AD2TO19aKbpQ8PbJ++XuqWrvuk5OLeJ+0zHpbDWZaP0=
Subject key identifier: B7:2A:D2:9E:53:BB:0F:44:D5:55:83:97:22:37:F3:88:88:F9:BA:55
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer: /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial: 019A24E6167EC9A845341E41209DCEE80FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 09:00:50 +0000
Manifest this update: Mon 27 Oct 2025 09:00:50 +0000
Manifest next update: Tue 28 Oct 2025 09:00:50 +0000
Files and hashes: 1: ItAhk8tTQvcjVOfd2ZjjCY2sPlM.roa (hash: tBwTK3AlOibQ9wY0xT6yXbWiv26AdFO4IuodNfy7Vq0=)
2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: bhJ61ijLxKio+fK0eYKqGIgVY1VKGBxNtBtEHEwSedc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:16:7e:c9:a8:45:34:1e:41:20:9d:ce:e8:0f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Validity
Not Before: Oct 27 09:00:50 2025 GMT
Not After : Oct 28 09:00:50 2025 GMT
Subject: CN=b72ad29e53bb0f44d55583972237f38888f9ba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:de:18:2a:83:60:df:d1:95:b2:6f:d3:f3:
ad:d6:3d:3e:c1:72:6d:28:64:5f:62:b4:be:48:bf:
18:08:14:f6:8b:3d:60:25:f9:f4:3c:d2:66:90:fc:
21:52:3d:ed:6b:bb:a0:7e:60:23:d6:ad:8f:94:28:
83:8f:0c:d1:55:a8:e6:1d:01:d4:f7:c5:d2:a2:fb:
9f:ba:39:f4:ef:4c:d6:13:b6:66:fc:ab:f5:a7:6e:
cb:cc:85:a1:08:c5:18:8d:60:9f:4c:c5:1e:3e:6b:
98:31:f5:8c:f3:49:29:45:ee:8e:ef:9e:8c:20:8f:
5d:44:27:66:43:51:a4:ff:ff:29:9b:72:6a:90:d5:
10:35:2d:dc:8f:76:0a:3a:cd:57:1f:e0:99:2a:ca:
88:bb:bd:3c:73:24:62:80:b0:bc:37:30:b4:f9:48:
75:8e:0a:3f:9f:c9:04:0b:33:88:bf:5e:4a:60:0a:
72:a7:58:b3:47:ce:ab:e9:2f:76:fb:21:99:61:22:
f2:65:47:f2:45:c6:83:29:1c:c8:46:b2:b2:ef:4d:
c5:c3:f9:56:b3:dd:6c:1a:7e:b9:44:e0:75:16:ac:
ca:26:c0:1c:24:38:03:ca:47:e1:52:36:4c:ab:90:
70:9e:c8:3b:d4:4e:98:33:21:dd:2d:83:50:d9:b9:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:D2:9E:53:BB:0F:44:D5:55:83:97:22:37:F3:88:88:F9:BA:55
X509v3 Authority Key Identifier:
keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b5:93:70:cb:37:bf:aa:3e:b3:04:33:dc:7f:cf:a7:21:4b:
1f:2f:97:c1:b4:0c:19:54:c4:bc:08:bb:9c:51:d6:d5:44:d3:
16:10:09:22:c6:17:48:64:49:bd:f2:83:5f:27:3e:c8:05:48:
f9:09:1b:60:6e:9c:db:f9:01:7c:cf:ce:6e:8b:19:97:3d:85:
a2:bc:5a:c4:7c:cc:30:13:62:16:d5:21:62:40:b6:27:16:27:
f7:81:69:89:14:41:5d:7e:f9:86:7d:27:79:0f:e2:35:9f:5d:
6a:4b:e5:ea:0c:c1:15:73:0f:c9:06:ec:77:49:69:a5:9c:76:
a5:f2:52:f3:8c:97:0f:ed:26:b7:6e:11:15:2a:4c:6f:57:52:
5a:f2:fa:d7:38:37:8c:a8:86:31:d9:70:85:c5:6f:85:33:d6:
90:bb:aa:b5:15:ce:fe:57:a5:26:f6:74:45:76:6b:85:b4:7e:
8c:f8:3d:df:bf:09:04:d5:da:3c:68:2d:e3:bb:4c:5e:99:b3:
f6:47:a8:93:f7:96:59:fa:1b:1d:ae:70:97:88:35:e2:4d:79:
af:88:fc:49:d4:7b:ba:aa:47:69:ab:74:e2:85:95:b4:ed:1e:
ce:d0:fc:a9:56:be:56:8b:7d:51:2a:e6:28:45:d1:66:64:7f:
67:74:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:43:38 2025 by rpki-client