Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: pAMgcW5TLf4hmLHr9U3SscKlSFhzEY43bkrlQyOGdUk=
Subject key identifier: 95:16:81:04:56:BD:E4:CC:47:75:4F:3E:7F:4D:A4:C4:0C:B9:F0:2C
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 019A7113570A3355C243F5E8E0A062B6FCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 053D
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=)
2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: zBpIvPyxAv8/Ba1yyuEuuBEOCC9n6sBscli5jeOD4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:57:0a:33:55:c2:43:f5:e8:e0:a0:62:b6:fc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=9516810456bde4cc47754f3e7f4da4c40cb9f02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:64:1d:1f:a3:6f:79:57:ed:d1:b3:10:bb:
35:0f:26:08:20:2b:41:d6:6e:f8:c1:83:ef:f4:da:
90:8c:fa:78:55:88:88:60:8a:34:94:d6:26:6a:31:
ba:60:fd:d7:17:e7:d8:2d:8c:c9:ff:dd:83:04:53:
15:1b:1f:e1:58:42:ce:30:56:f5:19:c9:cf:0e:29:
45:11:b4:13:00:e2:ca:1a:00:1d:06:c0:ef:75:48:
81:cf:d2:fa:45:44:17:97:bc:4a:d8:d2:31:f6:13:
78:be:11:b1:c9:a4:14:c9:0c:49:aa:87:f9:4f:9a:
23:be:83:48:e7:9c:99:51:81:eb:53:4d:9b:37:a2:
9f:fc:10:7a:99:cc:77:58:f8:43:ee:34:c6:f7:c9:
06:21:05:31:fe:eb:42:17:32:60:82:0a:c7:ad:8e:
c6:81:71:eb:e1:c5:80:df:c9:99:14:0a:45:88:b3:
9e:32:49:90:79:e3:7f:97:64:91:b9:c4:1b:d8:53:
2d:70:8f:0e:46:df:60:1c:95:fc:a1:2b:13:3d:5c:
15:9a:45:74:e4:f1:6b:da:97:63:79:e8:03:6e:5e:
6c:fc:6d:58:51:f4:9e:da:f7:f6:f2:56:00:9f:84:
3f:10:74:75:c2:d2:d7:38:da:26:33:70:47:dd:be:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:81:04:56:BD:E4:CC:47:75:4F:3E:7F:4D:A4:C4:0C:B9:F0:2C
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ab:3c:53:76:ff:e5:d7:3f:52:45:c7:8b:f8:97:78:20:62:
85:61:9f:6e:b5:a0:1f:e6:d9:34:65:1c:73:d4:c0:b9:03:4f:
40:ac:aa:53:02:f0:f7:d0:40:2c:6e:a0:9c:9e:f9:ec:a0:5a:
42:6a:20:e2:4e:04:92:d5:a6:ae:6b:9f:a9:9b:88:1c:3c:88:
aa:a8:4c:70:a2:27:69:0b:1f:1e:c5:d4:d0:b7:bc:ec:18:15:
ce:5e:47:5e:99:84:a5:c0:18:e3:c5:82:d6:94:46:ba:27:d2:
85:11:b6:83:e0:39:42:6c:3c:d9:91:a5:44:86:2c:14:23:ea:
96:12:a0:f0:f9:af:32:0d:6b:06:08:aa:23:42:97:40:f1:f2:
ed:17:f2:94:df:bf:1c:7e:88:0a:b1:3a:53:bc:f0:1c:55:95:
b6:af:7e:6c:29:26:01:09:3e:02:23:98:7c:b3:84:c2:e2:3b:
26:69:30:d4:5c:50:43:64:8f:57:ac:3a:df:6c:64:9e:18:62:
c3:b0:9d:b1:c9:9d:d3:74:d6:91:a2:b3:41:50:af:09:82:08:
de:1e:54:4c:3e:22:c5:92:60:35:f4:ab:44:69:b8:9b:30:64:
47:cf:78:9a:e8:e5:cd:32:01:59:d0:e8:61:71:fb:d2:88:9d:
3d:01:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:19 2025 by rpki-client