Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: YFKK5SRjgVb8b6jeeG5qUhYFWI8xRCJooJIkRpliFEA=
Subject key identifier: A5:11:EE:64:82:4B:0D:B1:F4:D8:D9:78:06:48:94:B6:CE:E3:61:2E
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019A1F1AD3973FE65F26B872B0F064EA3F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0F54
Signing time: Sun 26 Oct 2025 06:00:43 +0000
Manifest this update: Sun 26 Oct 2025 06:00:43 +0000
Manifest next update: Mon 27 Oct 2025 06:00:43 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: DxlqaPXZ/dBrCYWwFy8GW7mTgr3Zp38poTF/OXw+zWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:d3:97:3f:e6:5f:26:b8:72:b0:f0:64:ea:3f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Oct 26 06:00:43 2025 GMT
Not After : Oct 27 06:00:43 2025 GMT
Subject: CN=a511ee64824b0db1f4d8d978064894b6cee3612e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:d6:e2:58:65:31:23:e7:22:7d:34:44:28:
94:9a:85:f3:b0:ea:47:13:95:55:b6:97:23:ea:b6:
0c:1f:b4:4b:b2:35:ae:52:c2:7d:5d:47:4e:4b:1c:
66:04:59:f9:10:f7:de:ca:56:61:be:3b:8d:43:7c:
9d:96:e6:0a:19:57:3c:4e:fa:20:1f:4d:b2:a5:20:
99:76:18:fb:15:fa:a3:0d:41:74:d4:6e:e0:4a:64:
8c:30:57:72:16:cb:7b:5d:08:a8:a6:0b:fd:6a:30:
db:b8:b6:38:7b:2b:9a:61:b2:64:ae:ec:2e:0d:e5:
cf:cb:ea:f4:b0:3f:69:ba:be:2a:d5:4c:79:fc:95:
19:47:8a:2c:2b:c7:84:7b:80:14:2f:62:55:67:50:
f6:0d:3d:88:d1:0a:a4:cb:22:b6:fe:91:d8:b4:35:
6d:f3:0e:53:a3:03:57:7c:05:4e:85:2d:dc:cc:bf:
d6:a0:5d:73:5a:c1:c4:1b:37:f9:1b:4b:98:63:5a:
64:61:45:1b:5f:e9:d9:d1:41:f7:56:db:c3:ae:34:
1a:6f:3f:7c:63:0e:be:fe:0e:0e:f0:32:26:07:53:
7d:ca:60:29:a2:d4:1c:1e:4b:87:84:00:43:fc:c1:
f5:7f:36:11:4f:d0:63:95:48:aa:82:07:fe:57:90:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:11:EE:64:82:4B:0D:B1:F4:D8:D9:78:06:48:94:B6:CE:E3:61:2E
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2a:48:da:46:06:3b:1d:02:38:e5:ef:4a:68:29:31:64:9c:
a5:57:5f:2f:a0:6b:1d:6f:4a:4c:48:d4:ef:ac:20:ce:4b:2d:
8c:a7:c6:5a:00:43:13:aa:68:c7:bd:71:4a:ab:06:88:be:6f:
38:ae:3b:eb:78:f1:c9:fd:7a:52:e1:22:64:c7:b5:03:20:b7:
9c:ed:0b:7e:c1:c5:77:fa:c8:2b:f7:ae:c7:81:75:e1:0d:87:
58:a8:9e:91:00:89:67:d2:cc:90:db:b5:3a:03:f6:04:e2:fa:
70:54:b5:d3:53:7f:ef:14:c8:58:c4:5d:a7:0a:43:1d:3d:ca:
c2:f6:82:78:81:7c:b6:e4:43:29:cd:2d:d5:6e:e1:4c:43:4e:
fa:38:5e:89:b5:2f:93:6c:ef:f1:b8:f6:39:f6:6a:13:a1:39:
6e:87:1d:99:8b:55:67:f1:69:66:7f:e1:aa:2c:73:cd:44:01:
74:52:21:ac:06:d7:06:ea:86:b0:71:24:07:44:91:59:1c:af:
dc:67:53:4b:5d:71:4f:3f:62:f7:aa:bc:bc:8e:c9:47:55:36:
5d:b6:fc:11:c2:a4:fb:91:bf:ae:b7:d1:0a:7d:45:43:50:14:
e9:35:52:30:7e:e9:82:e6:21:10:0a:18:42:b3:3e:87:ea:ae:
7f:8b:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:24:07 2025 by rpki-client