Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: 0ftThD0G7PAHy6SEzOxIxwV4+qk8v4TgqM4xISO6/30=
Subject key identifier: 22:58:7E:18:ED:1A:FE:8E:C8:4F:D8:DD:37:AB:02:5A:9A:B9:5B:A2
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 019A7293DD9132CF43B62832906FB1399A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:24 +0000
Manifest this update: Tue 11 Nov 2025 11:01:24 +0000
Manifest next update: Wed 12 Nov 2025 11:01:24 +0000
Files and hashes: 1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: C2aCYIiaYDGmm9MFoS5f6SdC/89lDOQenzMfc0GzfCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:dd:91:32:cf:43:b6:28:32:90:6f:b1:39:9a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Nov 11 11:01:24 2025 GMT
Not After : Nov 12 11:01:24 2025 GMT
Subject: CN=22587e18ed1afe8ec84fd8dd37ab025a9ab95ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:31:ad:4d:ba:4b:82:03:fb:e2:16:b7:7c:
6f:f9:b8:c6:e7:32:26:df:c4:0b:54:38:7d:0c:a8:
f0:42:f0:61:1a:3a:42:f7:df:c0:08:e8:fe:ab:2b:
40:e4:9f:44:28:9b:0d:84:99:52:01:05:9f:73:5e:
7f:d2:83:28:34:5e:b5:e3:d1:f3:a7:14:fa:29:bb:
2d:c0:e7:51:d7:fb:33:38:6d:45:8b:53:36:d3:b3:
1f:ea:8a:f1:87:1e:a8:45:9a:32:27:af:62:67:94:
1d:d4:fc:e9:b4:24:b2:1c:2e:b7:bd:b0:3a:91:f7:
c8:3d:2c:7d:47:e3:23:f9:1b:a9:13:76:4d:a2:8f:
3a:d1:30:9a:cc:f4:1d:6d:69:87:8b:41:b1:20:96:
de:e0:54:80:f6:c2:c6:20:07:9a:15:f7:36:04:3a:
1b:1c:74:ef:69:81:66:35:d6:ee:64:4c:c9:a0:e7:
06:a5:bb:be:14:c0:57:ad:37:8b:c9:e2:64:c4:da:
c5:54:36:e8:c4:04:ba:51:d2:d2:62:7d:f2:ff:11:
18:3e:56:67:e4:fe:42:2f:35:11:31:39:87:39:0a:
5c:1f:43:8b:8d:5b:2f:2b:e1:19:bf:3c:4d:1b:d6:
7e:7a:87:b0:3e:09:06:74:f4:1b:01:9a:dc:4e:74:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:58:7E:18:ED:1A:FE:8E:C8:4F:D8:DD:37:AB:02:5A:9A:B9:5B:A2
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:13:b2:77:3a:fc:8a:de:c1:6a:de:4d:80:3c:a2:12:28:
8a:c4:dd:5e:c7:66:5b:6e:44:d3:ff:d2:69:b1:a2:97:d8:51:
99:7f:da:99:e3:4d:87:4f:9b:1c:f0:92:db:a3:d6:8c:df:b9:
52:45:b2:3a:5b:12:d5:a9:85:3f:75:84:ce:55:ec:c2:14:52:
2d:98:7f:aa:db:78:78:c4:bc:ba:51:20:4e:5b:15:fc:b4:dc:
1e:6e:c1:12:1c:9d:93:4f:60:53:5e:ad:ad:ec:48:fc:d6:cf:
d8:64:25:46:26:ef:1b:31:09:e2:98:d9:62:76:45:ea:37:f2:
d9:86:cb:5b:06:9a:e2:5f:ff:89:d2:c1:30:e0:f3:6e:73:f5:
56:59:16:6c:5f:8a:96:7f:09:b6:9c:e4:c4:36:d3:34:32:2f:
c2:1c:48:34:11:f6:76:be:ce:33:e0:3e:c7:a4:bf:37:02:75:
34:e5:16:a5:c0:2b:67:5b:a9:5c:59:e2:1d:34:87:1b:cb:9f:
ca:a2:33:c7:02:97:d1:27:74:77:50:03:c2:34:5b:73:a4:0f:
8e:e0:b7:2c:57:e2:f0:93:46:81:25:f7:9e:fc:39:ea:4c:88:
df:ec:ec:07:5c:9b:f6:0f:61:9f:d4:7e:e4:17:9d:da:00:c4:
c5:e5:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:15 2025 by rpki-client