Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: s2VKVgRuaJAVjCPzxN0aGNfre61T3KpfmU403I6v5kQ=
Subject key identifier: FB:5D:E1:98:95:80:E6:5D:B1:D3:01:E6:00:8D:A9:39:32:99:0A:CC
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019A24E57C1C877A3AB88B8166D84368FC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 09:00:10 +0000
Manifest this update: Mon 27 Oct 2025 09:00:10 +0000
Manifest next update: Tue 28 Oct 2025 09:00:10 +0000
Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: X1IW6Xyr6T1XCOsp21Bfeq+P/tl9QJGFKdMAOgmbBk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:7c:1c:87:7a:3a:b8:8b:81:66:d8:43:68:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Oct 27 09:00:10 2025 GMT
Not After : Oct 28 09:00:10 2025 GMT
Subject: CN=fb5de1989580e65db1d301e6008da93932990acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:4f:2c:92:3f:ed:25:06:cc:af:30:1a:48:
03:ec:6e:8d:10:1c:93:a7:b9:a1:f0:38:af:57:c9:
3a:c8:e5:8b:4a:28:13:e1:d0:49:97:ea:bc:9c:46:
c2:dd:77:f4:39:fc:96:36:ea:16:32:af:bd:6b:d6:
ce:24:b3:b9:bb:d8:23:9d:3d:8e:81:7a:c2:e0:3f:
3a:0a:29:77:37:44:b3:aa:87:3c:51:1b:43:13:41:
ac:2a:bb:70:84:46:73:16:f7:cd:2a:c7:99:b1:39:
97:86:d9:1f:d8:18:24:3d:6e:0d:bb:3e:d0:79:53:
f0:1b:b6:75:98:4c:9f:89:c5:b0:af:11:f2:e9:69:
2e:34:8c:c7:5a:91:aa:ae:c4:b4:b5:05:55:62:6d:
06:d9:8b:4b:2f:12:60:6b:f9:cc:87:50:1b:2c:2e:
2a:63:c5:37:d6:4b:18:b7:7b:91:81:b6:f0:e1:ac:
ae:0b:0f:c4:ce:b7:ce:a3:1b:3d:b8:15:43:9f:c6:
e8:3a:48:c7:9e:a3:ac:a1:9d:4c:68:dc:72:8f:e7:
b2:1d:c1:be:8e:9f:b6:d2:b5:3a:71:eb:dd:af:21:
d7:4f:9a:33:21:f5:93:39:fe:f3:a3:3d:51:de:40:
85:02:81:95:bf:0e:33:3b:3e:ee:d1:86:d0:3b:60:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:E1:98:95:80:E6:5D:B1:D3:01:E6:00:8D:A9:39:32:99:0A:CC
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e2:14:94:f7:b8:6a:33:89:6e:39:f9:25:e4:b1:f4:f0:75:
75:4c:0d:47:ce:54:40:d7:58:57:44:d3:82:3f:5c:1e:b5:38:
cf:10:18:96:dd:a5:3e:ca:46:14:fc:1f:1d:2e:72:4c:16:19:
d7:83:1e:3a:64:14:14:6d:7a:4f:21:e6:b3:81:5c:5c:7d:dc:
f1:d9:0e:98:46:55:17:e3:4d:8c:40:83:80:13:d4:29:af:51:
68:21:0b:3c:48:00:c3:51:71:5b:7c:e7:6f:9f:4c:d7:1b:02:
fa:1e:6e:9d:24:86:78:1d:7f:4f:b2:44:99:0b:2b:32:e8:24:
a8:7b:7f:e8:22:53:32:76:20:e4:47:8e:10:d0:54:1a:ff:45:
6b:7e:b4:7a:8d:99:af:bd:e4:9b:fb:38:64:58:65:17:05:30:
9c:92:26:f2:da:d9:a7:a7:b4:4e:83:59:ff:2f:0f:06:3a:dc:
50:4d:e6:d3:b4:cc:fb:fb:94:ac:aa:28:ea:55:a1:22:92:9a:
6f:56:68:28:9f:eb:88:4f:98:a5:cb:b7:bd:a4:5d:3d:b9:45:
3f:23:49:f3:61:51:09:d7:43:f5:ac:c2:f1:a1:97:75:cb:46:
14:a7:de:a1:e8:7e:59:25:dc:ba:86:b7:80:ba:fd:9f:e1:94:
46:9c:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:35 2025 by rpki-client