Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier: 2sA6rwXBSLbbvlD+SBdVqo20BGJ/KxDiDBLB0PlnD1k=
Subject key identifier: 05:AC:C9:D1:4B:97:7F:AD:FC:6C:29:18:7A:F7:3F:69:58:74:8B:8C
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 019A71B82109862023308618901C0F4A3992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: oXoh/VXVp1TAATzyj3e70Yx/1bZ6MyHsoKB44Dj0FlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:21:09:86:20:23:30:86:18:90:1c:0f:4a:39:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=05acc9d14b977fadfc6c29187af73f6958748b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:fe:5d:af:8a:9a:13:ab:44:fb:20:87:fa:
e0:2a:77:f4:d0:96:58:1f:87:4e:98:ee:88:7a:ca:
0e:cf:ad:38:c5:da:2f:e2:52:76:55:8e:b9:6a:0f:
8a:27:bb:14:50:9d:d7:ee:b3:ef:a8:6f:29:d8:2b:
03:18:b9:be:c2:aa:8c:8f:09:38:68:ee:74:90:42:
0f:61:39:96:c2:6e:ed:6e:6f:de:0e:ed:67:a5:eb:
44:4c:15:68:e1:78:06:f6:09:6f:d1:f1:a4:b1:bb:
1f:d3:8c:ca:02:20:07:af:8e:57:8d:46:ab:6d:3e:
94:14:fe:bc:df:32:58:f6:0b:f6:0f:d2:66:fe:19:
4f:bb:c1:55:b6:fb:2c:84:01:b1:0b:9d:6d:e0:3d:
ab:fb:e7:2e:3c:ce:37:bd:29:36:ed:97:4e:49:10:
36:7e:72:49:c1:5b:6d:d8:d5:dc:68:b1:41:54:60:
4e:60:19:be:f0:47:6d:4b:8d:a8:fa:53:a3:f8:98:
68:d6:06:3a:a9:6c:9e:b7:e4:fa:7f:25:14:e1:14:
99:cc:76:aa:e4:55:fb:b5:7d:be:25:11:6b:b4:12:
09:d1:bf:9a:2a:d9:b7:38:88:43:a9:f9:d9:b7:7b:
cd:bb:35:96:b9:e3:1c:8f:48:a2:a1:bc:e6:05:d2:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:C9:D1:4B:97:7F:AD:FC:6C:29:18:7A:F7:3F:69:58:74:8B:8C
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f2:a6:6c:a3:b0:9c:fd:4d:4b:c2:7b:14:0d:b2:4b:f6:16:
23:59:44:c9:1f:ec:2d:06:c6:03:4b:6c:dd:9e:ec:8a:7e:a6:
0c:5b:dd:0d:be:fc:2e:54:f5:82:26:c6:4a:2c:3b:3d:4a:d0:
60:af:7a:d3:83:94:1d:69:3e:19:1d:9a:7b:b1:e9:ec:43:07:
03:00:9f:63:b6:b1:44:0a:85:c1:73:c8:bd:f1:17:be:5c:25:
c3:fb:36:5d:86:f8:49:ba:b6:46:94:be:ff:fe:77:13:2f:70:
24:d2:74:b5:13:df:32:09:48:0e:f3:71:48:2f:bc:19:ad:1c:
ff:d8:c1:d4:49:ec:86:49:98:5f:da:f3:a0:10:da:75:2e:a3:
f1:09:24:47:f9:42:e5:07:c4:68:3b:f1:18:8e:db:61:e1:e9:
3b:a3:0e:92:d7:2b:88:56:f3:3e:81:e5:f9:77:1c:88:d2:65:
0d:cf:db:26:32:b3:60:99:74:7c:4e:0b:30:b5:9c:c2:46:2f:
29:17:28:af:5d:73:6d:e4:17:ae:84:f0:dc:b5:4d:37:dc:be:
1e:ad:b5:e3:d8:99:96:84:ec:bd:b3:6a:43:2e:b9:dd:68:bc:
08:79:0a:1f:33:a5:3d:7f:0d:27:d3:88:42:0c:eb:f2:7e:59:
9d:92:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:46 2025 by rpki-client