Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
File: UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json)
Hash identifier: vFrrsL0bcQIYMRj/n08h75+4Wt0yjJogJAPGrMuLEOQ=
Subject key identifier: 01:1C:2C:30:E4:08:BE:7D:E5:81:D3:0A:BD:5D:28:81:56:69:1F:98
Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Certificate serial: 019A72259E67E424FB314814D5596E857010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: PKJMCBFHp3GoME3zaOw3K8O4f8g.roa (hash: VdafeTRYhwONwWw7fBt7vi6QA2+aLrk8KggdCEObnJ0=)
2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: 1b9sIbcgNQuXifH2OzpdnbTRYrYDYeQtBOyBnupsdFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9e:67:e4:24:fb:31:48:14:d5:59:6e:85:70:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=011c2c30e408be7de581d30abd5d288156691f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:06:27:d6:aa:47:a5:40:65:74:82:f1:b6:2d:
06:6d:da:e9:fd:e7:46:53:fd:ff:61:9d:40:00:8a:
36:81:7e:90:6a:bb:7b:53:6b:b2:f9:67:8d:0b:2e:
d4:52:60:7b:8c:10:62:8f:f3:93:65:20:74:b0:a2:
7a:70:26:5c:1b:4a:52:83:c5:68:80:c9:ad:e6:d6:
7e:35:fd:e5:3a:29:df:83:23:03:90:5c:6a:c2:9d:
41:ca:7c:61:9d:c4:5d:6b:9e:a2:cd:93:07:2f:bb:
30:39:bb:1b:58:f2:de:26:de:4b:b8:10:40:2e:9f:
b7:fa:a2:84:70:d4:18:b2:1e:3d:a1:01:5a:53:85:
ce:28:d1:6e:10:76:f7:70:94:0a:eb:3d:c0:62:07:
9a:c0:29:c1:b2:a0:af:c1:80:cd:c9:37:91:eb:0f:
43:4d:25:ff:29:79:22:d5:92:6a:81:05:e8:94:1d:
3f:e4:78:69:cb:d7:7b:48:61:04:35:01:8b:f0:ff:
d6:a7:de:df:f0:f7:ed:b9:53:f0:41:95:b8:7c:8b:
63:50:f4:8a:73:c0:50:f4:a5:8e:fb:40:be:9a:b9:
67:c3:9f:11:8c:8d:88:54:90:31:64:61:5a:33:29:
49:23:84:6d:eb:d7:aa:02:b6:a3:cd:05:cb:75:9f:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:2C:30:E4:08:BE:7D:E5:81:D3:0A:BD:5D:28:81:56:69:1F:98
X509v3 Authority Key Identifier:
keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:06:81:db:03:2c:16:ae:af:42:76:ba:8f:da:8c:1e:2f:
cf:64:38:ed:d4:77:2e:24:13:2a:0d:c7:d3:c2:ab:7f:93:41:
c3:8c:29:ee:e7:6a:70:55:69:bc:b7:8b:36:f9:03:1e:e3:3f:
f5:4e:d6:8b:76:e3:28:eb:a0:77:15:fd:c7:32:3d:91:82:81:
44:8e:87:11:84:b8:7f:98:c3:b6:cd:46:8e:36:2d:6d:5b:02:
5a:fa:2b:a0:e0:00:ac:d8:4a:94:b1:89:c5:e0:58:57:15:92:
c4:6d:03:f6:27:a9:4a:d7:c7:61:90:b8:da:3e:ac:93:50:a9:
25:a2:91:e0:39:0d:5d:84:3a:4b:c3:05:0c:2f:3a:55:4c:a6:
e3:10:ef:5a:65:5e:08:07:d6:61:a4:00:d5:8f:36:96:c2:2b:
42:c3:53:e1:1e:6f:c3:fd:b1:58:97:a3:f6:89:42:b2:8b:a6:
eb:59:c1:e7:a5:ff:6e:50:cc:d9:cf:27:11:56:8c:53:ef:5d:
70:e1:23:7c:26:aa:3d:1d:c8:23:56:6c:3c:be:86:ca:35:f7:
81:a8:84:64:69:fb:2c:60:62:38:49:8a:06:56:7b:ba:25:39:
26:96:d6:51:4c:1d:0b:c8:2a:8c:51:69:fe:33:a9:38:97:9f:
59:61:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:55 2025 by rpki-client