Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File: UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier: V7E85fCkObcMEK2i4AqbPRpDrcsIZLEK+x7Pkv3et6Q=
Subject key identifier: 02:2A:4A:7E:A6:69:7F:F9:EB:B5:6F:3E:C4:CA:E7:98:34:6C:F5:75
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 019A72CA56ED87410FB7A00A4EF010A6C477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:54 +0000
Manifest this update: Tue 11 Nov 2025 12:00:54 +0000
Manifest next update: Wed 12 Nov 2025 12:00:54 +0000
Files and hashes: 1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: 7S9Tdbu9fqTzyEfjyeZdvR/qHrGbXl+29huvnxJMfoc=)
2: kPDeBF3aCTfbB5EVHHC2Wq-wohY.roa (hash: 6WAkgf1xAugeYb/22h6PavosEJNmU15Yes0foRMGr3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:56:ed:87:41:0f:b7:a0:0a:4e:f0:10:a6:c4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Nov 11 12:00:54 2025 GMT
Not After : Nov 12 12:00:54 2025 GMT
Subject: CN=022a4a7ea6697ff9ebb56f3ec4cae798346cf575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:fd:f5:1d:04:6a:83:af:02:3a:31:f6:64:
44:bb:a5:c2:13:47:10:29:6b:83:54:fb:0c:9b:6b:
c0:70:86:6b:35:b7:71:16:42:e4:36:1c:df:9d:94:
89:07:bb:d2:00:3d:30:d3:0f:ce:40:75:0c:2c:79:
80:84:7d:aa:ca:32:8b:77:2f:75:b7:1c:5b:ec:b2:
c7:b4:f0:83:0f:d2:d2:27:e6:60:76:ec:04:e0:c5:
9f:46:b0:8f:37:18:59:5b:11:3d:79:30:9e:aa:88:
2a:63:db:c2:8e:10:46:fc:21:e5:83:d3:6c:49:b1:
db:36:45:d6:1b:b4:60:99:f6:24:e3:4f:97:8c:49:
60:8c:9c:16:ea:a2:a5:7b:ad:ca:0a:5b:2a:f4:06:
d9:72:84:3a:18:61:02:05:7d:63:d2:c2:8e:a2:c1:
ea:eb:d7:9e:00:2d:18:69:b6:87:03:35:8a:5a:e1:
14:e7:e9:3c:d1:e9:02:ac:25:3e:42:de:0f:35:17:
d4:9d:9e:28:3f:4d:bc:de:3d:df:42:5a:96:52:aa:
74:c4:c6:ef:ce:a9:cb:d0:fb:13:89:26:2d:66:e9:
80:6d:86:9e:b7:9a:72:70:23:23:16:c7:a8:15:5d:
14:ed:24:b5:79:17:27:54:51:c3:f0:0b:24:8b:d7:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2A:4A:7E:A6:69:7F:F9:EB:B5:6F:3E:C4:CA:E7:98:34:6C:F5:75
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bb:fb:9b:8d:44:a4:4b:9d:7c:89:b6:31:9a:50:99:28:99:
42:f6:98:91:6c:b8:b8:5c:d5:f3:4f:26:24:d0:46:c8:3b:85:
26:0f:28:64:4f:29:6c:50:21:61:0f:15:f8:36:22:f4:d2:92:
21:f3:36:47:20:f7:67:ee:21:0a:69:98:3e:0e:6a:8a:f7:cd:
c8:9c:ff:ae:f1:e8:fb:a7:52:3a:d1:03:08:16:3a:ac:d7:58:
56:02:d4:fc:d7:53:c4:f1:ff:d0:a2:7d:ab:a9:cf:58:df:a6:
1a:aa:89:43:6a:d5:54:34:08:9e:1e:ec:ba:05:93:67:fc:a1:
5e:dc:95:9b:11:17:18:32:d2:5d:7b:d1:9a:5d:a7:0d:b2:82:
cd:92:ed:24:38:e8:e9:a4:53:6f:84:aa:08:72:04:35:62:b7:
3e:b2:9f:fc:b5:8a:cd:a7:a8:3c:c9:2a:46:d1:47:77:1b:5b:
90:68:8d:6a:1e:c6:d2:a5:e0:8d:c6:02:73:17:45:46:04:cd:
d0:b1:36:12:d9:11:11:6d:87:b7:0e:22:cf:b0:45:9f:7c:db:
80:0b:26:41:76:44:e6:4d:6c:8f:77:ba:e3:8f:83:c0:fa:6b:
b3:ce:f6:b6:18:50:52:5c:54:c9:af:1e:2d:31:fb:2b:05:4e:
60:58:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:19 2025 by rpki-client