Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: pVtXbwJoz3ccbN/wk7U7bypvLBuzRKEG5rChNVTIt+c=
Subject key identifier: 76:52:AA:0B:D4:6B:21:D5:8B:84:DF:B9:69:6A:AF:8D:6A:46:F6:9A
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 019A0D8274E8F2B4058024D8930475491931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 16EF
Signing time: Wed 22 Oct 2025 20:00:44 +0000
Manifest this update: Wed 22 Oct 2025 20:00:44 +0000
Manifest next update: Thu 23 Oct 2025 20:00:44 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: GY7JaIx12yXuUPNABgdwIa+iZC7zIKFoRq4TfpfvbOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:82:74:e8:f2:b4:05:80:24:d8:93:04:75:49:19:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Oct 22 20:00:44 2025 GMT
Not After : Oct 23 20:00:44 2025 GMT
Subject: CN=7652aa0bd46b21d58b84dfb9696aaf8d6a46f69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:4f:ef:b4:10:2c:37:83:0a:21:d1:ef:45:
8f:c5:f8:69:29:44:01:70:62:de:27:95:e2:7b:8e:
8c:0a:90:50:ec:a6:f5:89:f9:3b:b7:23:a4:1a:4a:
e6:a7:4b:23:27:e3:bd:ac:bd:e6:3f:8f:39:d5:2c:
1b:04:f9:85:ee:ae:ab:c1:eb:45:78:62:49:e0:92:
d1:48:96:08:e4:a8:82:08:a0:5b:84:db:f7:d6:86:
b2:e8:c8:be:57:3c:fb:5b:ed:94:97:0f:dd:b0:8f:
85:dd:4f:f1:ed:ef:a3:74:57:3e:71:ce:75:91:24:
9f:36:9b:b1:49:15:8d:07:75:15:34:ba:9a:e0:c4:
a8:52:45:87:15:db:3c:7a:8a:b6:3e:9a:f3:d3:6c:
b4:7b:35:da:1b:db:54:bd:1f:d8:13:a9:b0:94:da:
e7:d0:e9:18:f9:0c:31:69:ee:f9:75:8c:d3:81:10:
4b:8e:86:c1:f3:c5:75:38:d4:4a:a5:68:07:ae:b6:
f1:07:ce:e8:84:ee:d4:41:e3:ed:f2:a1:dc:5a:69:
3d:c9:68:89:16:f7:88:42:13:48:96:9a:32:40:c4:
43:d1:86:df:0d:88:34:54:97:49:3d:95:f0:ca:35:
6a:e6:60:b7:40:fb:20:7e:67:63:28:99:6b:ae:dd:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:AA:0B:D4:6B:21:D5:8B:84:DF:B9:69:6A:AF:8D:6A:46:F6:9A
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cc:57:be:85:9b:5b:77:75:06:bc:fa:ca:1d:e1:ff:41:3d:
e6:73:45:9e:01:6e:0e:77:94:0a:fa:ff:b3:2e:19:22:f9:6a:
05:de:3e:59:1e:d6:71:86:e3:0a:f9:28:4d:4a:7d:45:71:ee:
62:c1:b5:b1:e4:7e:a8:9f:33:10:2c:aa:28:48:51:5d:57:75:
e0:2a:7f:a5:02:2e:7a:35:8e:08:58:cf:1e:3b:af:a4:41:f9:
23:85:ef:0e:30:d9:ed:03:1b:85:5c:c8:6b:f6:11:28:80:e7:
bb:61:49:4f:72:4f:27:c0:da:93:fa:b8:b2:a2:1b:4e:8b:33:
10:38:a6:26:ec:17:d5:f8:8e:4e:57:ea:78:57:63:18:2b:6c:
f9:7d:a4:d9:5b:87:aa:b1:28:4f:a8:1e:77:9a:85:6e:6b:64:
e2:72:7d:1c:c1:30:7a:71:1a:4b:79:51:7f:8a:c6:22:a5:d9:
7b:df:a3:47:eb:ff:24:03:f3:c6:85:38:96:64:c1:fd:94:fd:
46:24:96:b1:74:f3:eb:c1:45:78:06:10:4c:55:aa:1f:3b:81:
11:ea:f4:5d:73:ae:3c:cc:e3:c5:2b:50:09:f2:12:f8:51:f2:
9b:5e:ba:94:5e:4d:b0:a7:ea:d7:14:63:70:99:54:d4:9b:18:
9e:e4:e9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:03:45 2025 by rpki-client