Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: 7OssV5hch6IZS4TTerPTlTAwONe7f4DDD2ygYsuONFI=
Subject key identifier: ED:9C:F8:9A:D6:50:A3:DF:60:19:32:B9:DD:9E:6B:BB:D3:1D:F2:A4
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 019A7225E70C012F3FA4E64EEFA64D2AEF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 1714
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: jFAwa69q0MNiu4Q4d8SjaoEvdqD1JG/MQcoroLw3XuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e7:0c:01:2f:3f:a4:e6:4e:ef:a6:4d:2a:ef:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=ed9cf89ad650a3df601932b9dd9e6bbbd31df2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:d6:f5:a7:65:0d:e9:8c:15:21:93:dc:55:
40:22:f4:37:87:21:81:c8:35:5f:b5:98:47:3b:46:
02:c1:2d:c1:ce:84:b8:34:3b:8e:ba:5a:99:87:1a:
cd:7c:c8:ee:ff:1f:51:39:39:7c:bb:3e:97:0a:f7:
be:67:07:f1:6b:f6:56:ac:89:92:2a:e7:50:f0:b5:
ea:16:0d:49:62:f1:7e:bc:a2:62:c0:92:2c:52:f1:
7f:99:a1:d8:a9:92:c4:a5:8d:33:3a:81:ed:e6:a8:
d8:c6:6d:16:60:40:6c:c7:28:79:28:58:8e:76:12:
ff:05:5f:eb:a9:7a:94:a8:85:30:65:1e:20:23:e7:
24:08:3c:22:11:6f:51:16:3f:2f:c8:73:04:ea:d8:
31:1c:ac:73:d1:7d:4d:bf:bb:2f:07:09:29:49:6a:
29:a3:52:cf:24:33:81:b0:98:2c:5b:df:e6:a9:25:
55:da:c6:fa:fc:be:a6:db:58:0b:1b:22:ab:02:ef:
ee:d6:a7:61:37:da:b2:48:3f:85:0a:69:c4:14:51:
ff:a8:9f:16:78:0f:64:1e:65:90:74:c2:c3:3d:78:
fa:9d:5b:71:e6:88:5d:74:16:4d:d3:55:7b:a5:cc:
e6:cd:1c:ea:e1:07:a5:be:ba:b0:70:cd:bd:bc:90:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:F8:9A:D6:50:A3:DF:60:19:32:B9:DD:9E:6B:BB:D3:1D:F2:A4
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:74:2c:c8:f3:e8:3e:fa:b5:b0:3c:62:e7:4f:b2:91:03:11:
7f:6e:6a:30:b3:cb:ee:f0:32:34:dc:0f:d0:f1:78:77:70:3b:
f9:77:23:0b:8b:24:5c:36:ba:db:92:37:36:72:e8:b5:04:08:
b3:c4:69:f0:47:ff:75:8e:93:68:0a:c2:96:7c:62:39:b9:42:
99:41:7f:5a:d3:be:92:b8:f2:50:da:6e:68:48:27:bd:10:ff:
1c:1f:3c:13:36:d7:1a:c1:c1:c0:be:ef:f7:11:c1:23:0c:2f:
a7:cf:fc:df:4c:18:7b:ad:ba:c2:ee:95:aa:65:bc:7d:a1:2a:
97:d3:87:e5:ec:88:e3:a4:f6:cb:26:2c:51:65:0b:bb:c8:d2:
52:75:28:98:9d:35:7a:e3:0f:72:73:c6:7f:a8:15:5c:f4:1b:
18:0d:68:17:06:44:56:e6:cb:e4:4b:d1:d3:83:4e:73:43:bd:
31:f7:8f:75:43:16:b6:b0:87:32:e8:ba:3e:48:2d:14:cf:12:
db:bf:60:f4:ba:ea:82:bc:a7:57:06:ba:b3:1e:0a:c7:39:53:
af:6c:7a:4c:3f:bb:eb:0c:8c:0f:50:7f:3e:68:d5:f2:99:f5:
ab:6b:68:e5:ca:12:ed:65:bb:76:9d:2f:8d:25:3e:d2:84:f2:
da:ff:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:04 2025 by rpki-client