Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: WaCUG2VboGHCCY8flgvG6evd86GlZFsAlITEj9+OtWk=
Subject key identifier: 4C:FF:72:97:10:69:97:9C:DE:25:17:95:16:DC:68:0D:BF:7F:27:FF
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 0199DE16AEA85F5B0C20466646570CB8415A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 16D3
Signing time: Mon 13 Oct 2025 15:00:52 +0000
Manifest this update: Mon 13 Oct 2025 15:00:52 +0000
Manifest next update: Tue 14 Oct 2025 15:00:52 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: kaRBuKO51z6zADEVGGxuQGhJpTh1YRpwhYIHfXsfuTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:16:ae:a8:5f:5b:0c:20:46:66:46:57:0c:b8:41:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Oct 13 15:00:52 2025 GMT
Not After : Oct 14 15:00:52 2025 GMT
Subject: CN=4cff72971069979cde25179516dc680dbf7f27ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:de:0f:7f:40:2c:1e:b1:23:dd:da:29:f1:
c0:62:1a:80:54:31:a6:bc:a3:70:d2:29:5f:df:ef:
63:67:a6:c2:68:ff:44:5a:85:85:f9:13:6d:08:17:
29:02:8e:c1:ad:d2:09:c1:04:38:3a:67:f8:7c:70:
16:f1:54:5e:bc:67:0a:d8:d3:37:4c:9a:02:5d:11:
b5:b5:c7:b9:4f:eb:f1:29:96:d0:a3:dd:05:6c:b4:
47:87:dc:22:ba:70:f2:c9:5c:37:49:d9:23:3f:f9:
48:45:b2:1b:19:6e:b5:3e:e7:cd:44:a8:a8:97:d4:
23:cc:48:6e:ec:f6:5d:45:72:ae:48:96:c2:e0:cc:
ef:f8:a2:ce:c4:b5:c0:ee:d4:4b:38:73:7d:dc:07:
66:39:16:48:74:65:5c:52:65:0b:87:5e:9d:88:2a:
5a:44:03:d2:7e:3f:58:46:98:aa:6b:c5:d6:52:c5:
24:1c:30:03:07:03:07:1d:97:70:83:19:86:25:51:
13:62:70:71:9d:3e:2c:cb:38:59:dd:54:7b:74:9d:
31:b4:34:dd:f4:57:30:ff:07:3b:96:54:35:6a:86:
38:07:8e:d3:c7:32:f3:5a:ef:63:f3:ff:22:65:ec:
50:e6:d9:8f:d4:46:a4:0e:8b:3a:34:55:86:2d:78:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:72:97:10:69:97:9C:DE:25:17:95:16:DC:68:0D:BF:7F:27:FF
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:72:6b:75:ae:ca:26:4d:b8:20:a0:5c:70:5f:a4:4a:69:
ad:b3:53:e4:e6:6b:07:97:43:71:1a:97:ef:7f:c4:d7:16:1b:
b5:7a:7e:8b:6e:b6:b1:f1:74:ab:9b:e3:3e:e1:ec:f9:11:bf:
e8:ad:b3:f1:ff:fe:71:d8:f4:b8:f8:e1:8f:57:37:f5:41:ca:
8c:b5:dd:ce:e4:b4:b9:38:7c:cb:b9:8c:a4:0e:46:a8:f9:e8:
30:ce:18:9b:c7:00:57:bd:69:e4:8e:bc:29:55:b0:56:c6:64:
6e:f0:cc:de:da:40:62:77:a3:7a:6c:fd:f7:05:8d:7d:ed:64:
b1:b8:b7:79:be:bf:cb:73:65:6f:8b:1f:02:ad:e9:de:84:62:
15:90:8b:0d:a4:12:af:4d:2b:c6:b2:0c:98:e8:9c:04:bd:c3:
f8:fa:fe:ed:53:03:0d:07:b1:76:31:41:ef:ef:82:68:b5:a1:
02:0e:1c:dc:78:6a:29:e9:3f:0f:e7:52:b3:ad:d0:af:ab:72:
be:08:cc:6b:84:36:e9:c7:f6:c4:34:f8:ea:04:7c:3b:0f:06:
02:9e:46:16:34:1a:81:ee:46:74:4f:87:04:49:ef:f3:06:ba:
7e:e2:ea:f9:68:c9:07:e8:1a:b0:53:ad:93:a7:b6:77:71:bb:
b7:0b:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 00:54:02 2025 by rpki-client