Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: WRUTRvugadonVSXlvWiVWoq0IW0gCjCJ+6w+GnO5O7I=
Subject key identifier: C7:73:95:E4:D0:93:9D:EA:3B:8D:35:04:49:42:03:2E:AC:01:BF:2D
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 019A706E76AB6E450815E21AF12AD877CF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 01:01:18 +0000
Manifest this update: Tue 11 Nov 2025 01:01:18 +0000
Manifest next update: Wed 12 Nov 2025 01:01:18 +0000
Files and hashes: 1: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (hash: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=)
2: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (hash: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=)
3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: jIMCopTNxIdPN6BZRBDN8P+AtB9dV3ngmzW3u2P+acE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:76:ab:6e:45:08:15:e2:1a:f1:2a:d8:77:cf:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Nov 11 01:01:18 2025 GMT
Not After : Nov 12 01:01:18 2025 GMT
Subject: CN=c77395e4d0939dea3b8d35044942032eac01bf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:f7:b4:e1:cb:6a:7d:b1:ff:6b:e1:2b:c8:
e4:37:fc:be:fd:23:09:d8:da:1c:fc:e1:67:e2:9b:
0b:5a:be:f8:f0:9d:0b:b1:1e:01:4a:58:20:09:ae:
52:7e:c9:d3:0b:c1:56:e9:b4:7b:22:c8:84:63:07:
c3:a0:c4:18:b2:21:b5:7d:4e:3d:38:41:da:1f:35:
f6:a8:bf:fe:fe:9a:a9:3c:9d:c7:36:d0:f0:84:27:
cd:72:b7:2c:ec:34:bc:5b:40:fd:fb:79:ec:93:33:
2a:08:38:c2:39:fe:92:0c:ea:e5:b6:3b:71:fd:4e:
e2:ef:4b:5e:c8:64:6a:7e:cb:1e:e1:fe:c1:4c:58:
10:76:99:20:07:81:94:66:d0:93:c5:79:74:d5:9d:
07:c6:69:32:04:39:b5:83:be:86:d9:28:75:81:f3:
fb:45:89:f1:9c:48:94:c1:d1:0d:53:82:82:14:72:
d1:d7:48:67:e0:87:cf:20:20:8f:a3:1a:d4:29:a4:
7e:d1:ce:72:97:8f:c0:3c:e6:73:09:df:5f:1c:5a:
56:89:be:d6:f5:90:b6:a5:38:6f:26:f5:4d:cb:13:
a4:54:3a:08:55:a0:1c:11:d4:3e:87:60:97:92:8b:
8b:0a:d8:3f:28:0e:0f:db:bf:04:24:df:f1:9d:5b:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:73:95:E4:D0:93:9D:EA:3B:8D:35:04:49:42:03:2E:AC:01:BF:2D
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:73:1a:39:77:1a:aa:5b:ca:a9:93:3a:98:4f:3f:f8:36:89:
8f:5b:42:01:6a:9b:e0:89:5d:8b:4e:b5:62:86:3c:75:91:f2:
7f:d1:f7:ef:2f:98:8c:be:e3:47:ae:3d:12:f7:0a:e1:10:6b:
a2:a8:90:0f:fe:5f:9a:0d:d8:cc:2c:1e:30:d6:f0:f7:57:68:
8f:8c:7f:e2:04:5b:71:5e:79:1d:41:96:93:53:5c:4b:08:d3:
30:64:77:aa:b5:b2:7c:9c:f3:63:91:20:aa:1f:16:98:59:47:
30:a6:7e:02:8f:a4:b2:d1:cc:79:ce:b5:c9:40:f2:50:8e:b7:
27:6d:fb:89:00:60:d1:88:a8:8a:12:c5:54:1c:46:60:f1:de:
98:16:38:b1:f1:e7:fe:0d:8e:9e:da:94:2c:80:03:1b:36:eb:
e6:c5:ba:73:b1:af:26:2e:02:f3:bf:9f:57:f7:30:9a:f4:99:
91:de:b0:8b:6c:ee:ab:b7:19:94:4d:16:01:e1:9c:bc:64:b7:
bf:90:79:9d:ee:fb:56:2c:e5:e2:74:d6:ea:67:b2:e1:05:0c:
e1:c4:70:92:f7:5e:bf:29:72:dd:98:d1:a2:40:c8:36:4f:02:
c2:5e:a9:2c:7f:92:54:b7:ef:3f:0f:0a:e9:fb:5a:76:c6:14:
55:86:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:17 2025 by rpki-client