Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: OAnc47qHhlXCiibnbvKc5KDESVa99eMzyh3L3u2Mh1E=
Subject key identifier: 9E:6C:E0:D8:5E:CE:FA:FC:C5:CA:2C:12:C2:7C:22:D7:47:8A:98:BC
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 019A209AEA1C8BB44AA65EFED5F27D536CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 16FB
Signing time: Sun 26 Oct 2025 13:00:14 +0000
Manifest this update: Sun 26 Oct 2025 13:00:14 +0000
Manifest next update: Mon 27 Oct 2025 13:00:14 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: RCsy+icuNr6CTOy6Ohc9v5KGFB8SVBPuQ30DcN0A+vk=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9a:ea:1c:8b:b4:4a:a6:5e:fe:d5:f2:7d:53:6c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Oct 26 13:00:14 2025 GMT
Not After : Oct 27 13:00:14 2025 GMT
Subject: CN=9e6ce0d85ecefafcc5ca2c12c27c22d7478a98bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:39:6a:e0:5a:64:56:76:1f:50:c3:92:ae:
3f:27:76:52:4f:5c:7c:55:e7:80:5f:2d:6b:6a:83:
9a:60:5f:e9:c9:a3:1c:79:4d:00:b7:93:1d:fa:81:
3f:fb:3a:d6:d7:c9:1e:82:52:7c:59:ae:c3:74:75:
e6:9a:56:4c:61:1b:41:90:3d:dd:cb:67:88:70:14:
f5:bb:e3:bb:ca:d6:bd:64:ee:db:bf:f7:4e:fc:52:
05:48:5e:cb:d2:20:a7:de:e0:b2:45:b9:5a:d1:95:
81:01:00:1a:18:ea:00:1f:fe:bb:6e:46:83:9b:08:
2d:23:46:0b:0b:98:e5:76:d9:b1:2e:5e:46:b1:a4:
c6:a4:8a:4d:cb:09:99:22:ae:dd:3e:d8:9c:a1:33:
ad:b1:ce:e0:f8:9c:7c:db:9e:45:e5:aa:64:07:cf:
1d:27:47:7a:e5:87:98:c6:01:f8:20:57:8a:01:b2:
9f:d9:25:ac:a2:f8:ff:1e:6f:54:4a:51:09:40:be:
92:bd:e8:b8:8f:4d:77:d0:6a:0f:ee:ce:6d:42:e3:
e7:9e:01:88:e9:91:01:cb:75:4e:3f:11:ce:68:42:
a4:e8:bc:cc:f9:b9:10:64:37:42:7d:3a:93:6b:4a:
8b:08:cf:5c:51:94:bf:e8:76:bd:4f:f6:92:f0:a2:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6C:E0:D8:5E:CE:FA:FC:C5:CA:2C:12:C2:7C:22:D7:47:8A:98:BC
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f9:c4:56:ba:c0:2b:ce:bc:9f:07:43:44:2e:ea:42:be:91:
4f:ea:83:36:48:8e:16:06:ef:16:77:5f:ab:8c:59:34:9c:cc:
49:ae:ac:2e:94:1d:65:53:c8:63:e2:26:0d:49:ed:8b:17:6d:
3f:ec:79:18:37:e6:61:61:02:a4:e0:a9:8c:12:5d:71:9b:4a:
27:9e:18:4b:cd:d0:db:2b:8c:4c:59:2f:87:fa:68:36:be:76:
56:c8:b4:0b:52:b9:68:d6:70:a9:96:97:a6:80:c7:be:1d:1d:
5e:d3:7f:f2:3d:2a:e5:ef:13:41:c9:ec:13:09:c0:7c:83:24:
37:35:c1:8c:a8:79:d6:54:cf:c8:0d:34:38:a6:00:83:7c:3c:
d2:92:20:f5:bb:7f:c1:2c:7b:83:c6:aa:02:e9:a1:c4:0a:b0:
0d:ba:27:f0:f7:a2:fd:44:1e:bb:a4:37:91:f9:e1:f3:b8:be:
95:aa:ab:67:01:1f:4f:83:71:2a:ab:cf:5c:8f:61:f0:af:0d:
64:af:d1:b4:00:4a:27:50:cd:ca:d7:b4:45:ef:d2:08:a3:bd:
e2:f2:73:c9:6f:1b:c1:06:88:62:3c:bd:56:8c:f6:92:e4:f7:
4a:2c:97:09:0a:bc:1a:5e:d4:62:03:e4:a8:d8:20:3e:b1:1f:
d9:c5:9a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:42:00 2025 by rpki-client