Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: pIpb36Q3dXeS+zaDpxrttMOE0o/W94b4GfveSw9cGKQ=
Subject key identifier: 25:51:93:A3:46:46:43:BD:21:E7:E0:00:67:9F:FF:F6:64:EE:20:C1
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 019A71137186AE01562852F6BC83821BD58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 1682
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: WYsjKuMJnMn8UX3yJm/pUyZnpa/ZypNOJZx9vFVxreo=)
2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:71:86:ae:01:56:28:52:f6:bc:83:82:1b:d5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=255193a3464643bd21e7e000679ffff664ee20c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:c6:0d:cd:66:7e:e8:8c:a0:43:b8:4e:77:
77:1c:60:de:18:fa:c2:92:73:86:92:da:ad:2b:2a:
d0:38:e0:86:fd:61:61:7f:27:7c:1c:94:e9:08:81:
28:f7:f0:b7:7f:44:76:e0:75:31:62:d9:61:c8:8d:
07:ab:33:73:0d:a4:1e:d9:42:22:49:dc:c4:4a:86:
4d:84:63:34:4a:9e:1e:25:2e:6e:e9:6a:a2:d1:4f:
03:88:6b:f8:98:8a:41:8e:6b:92:bb:90:0b:dc:2d:
c9:c7:78:7b:06:3a:fd:ee:56:71:3e:09:f5:82:75:
30:25:44:71:09:f3:01:38:d2:74:a6:d1:d6:84:b8:
79:00:e8:47:26:70:dd:4e:1b:31:38:f6:2a:ae:38:
dd:4a:15:a4:91:d5:24:d2:77:1c:d9:ca:76:f6:57:
e1:9f:98:9b:45:f7:7e:55:96:a4:a0:35:08:02:34:
0f:d1:82:cb:57:3e:5a:3c:b5:6d:8d:1c:ae:18:d4:
d1:2e:e8:34:78:b9:fe:32:aa:15:c4:30:45:26:eb:
16:1f:68:69:1d:9e:8e:93:79:90:ed:5c:87:b8:7e:
40:74:f7:c9:1e:8c:93:15:7b:b3:00:22:a0:c3:f9:
16:b5:e1:7c:c6:7b:ba:ae:a9:4b:7a:1f:6e:8c:53:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:93:A3:46:46:43:BD:21:E7:E0:00:67:9F:FF:F6:64:EE:20:C1
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:02:bd:d2:74:fd:ba:25:20:00:83:27:0e:37:29:c3:ad:03:
ca:e9:0c:ad:02:d3:02:27:aa:1a:9d:77:be:12:ed:b2:99:ab:
35:e2:85:9a:50:cb:6c:4f:df:89:29:8a:5d:95:a8:5c:67:cf:
c2:9d:93:30:80:87:f0:3c:79:58:a0:25:f8:ce:c9:31:45:a4:
88:eb:9d:d6:4a:bc:5b:aa:d8:98:16:e0:70:b6:7d:16:94:c9:
65:92:53:37:0b:bd:ba:97:10:33:e4:5d:50:9e:58:8c:a1:a8:
ed:01:56:1f:36:32:81:9a:c2:26:70:c9:b4:d7:b0:e9:c0:b2:
3b:13:0f:63:b6:8d:74:d0:bc:d7:e5:8c:c2:8d:ef:4e:aa:dc:
00:bf:e4:8c:43:ff:79:6c:c5:0b:5e:8e:b2:f8:a5:97:32:92:
20:2a:e8:0e:dd:d8:73:d7:c2:ad:60:22:63:99:19:73:b4:c5:
66:3d:fb:bb:e2:56:74:80:da:31:ea:9e:9f:7c:4c:19:fd:b7:
f9:53:6d:99:3c:44:aa:97:1a:bb:9c:0a:08:58:3b:fc:ec:aa:
2c:62:95:f5:b7:e7:55:d4:ee:e1:43:57:a8:dc:b6:2d:a5:fb:
92:bd:3a:a6:71:91:34:1e:7f:67:3b:a6:9d:68:a9:c3:81:f8:
06:05:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:17 2025 by rpki-client