Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier: Uvnq2svZIf9ihzK/CB3/U3PSXILDBBsnUR8FcRj5pi8=
Subject key identifier: BF:13:81:41:9D:FF:1E:F4:AA:F8:4A:9F:5B:C1:D7:34:92:58:2A:D2
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 019A066DC053F05B913349E2EF471CFEA1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number: 167A
Signing time: Tue 21 Oct 2025 11:00:47 +0000
Manifest this update: Tue 21 Oct 2025 11:00:47 +0000
Manifest next update: Wed 22 Oct 2025 11:00:47 +0000
Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: FjmMwfOOTAtHFutHwlPaDTBpvTEppN51A2paNCCZjjA=)
2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=)
3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=)
4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:6d:c0:53:f0:5b:91:33:49:e2:ef:47:1c:fe:a1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Oct 21 11:00:47 2025 GMT
Not After : Oct 22 11:00:47 2025 GMT
Subject: CN=bf1381419dff1ef4aaf84a9f5bc1d73492582ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:cd:b2:62:c2:a8:ba:f4:c8:a1:2a:7e:d6:
6c:40:77:1a:f2:6c:7c:97:8c:ef:6a:2f:39:47:5b:
1c:d6:13:e2:87:4a:fa:55:6f:5c:2d:a0:5c:ac:0a:
56:67:d5:7e:6c:b5:28:fe:aa:35:76:da:ca:a7:2a:
c7:e3:56:65:b2:e6:90:cc:2b:de:3a:ef:36:2c:5d:
26:ea:2b:eb:bc:26:08:10:1a:f4:3a:e7:00:70:aa:
61:0d:b5:46:cb:97:1a:e1:28:d6:b8:ae:91:57:c4:
8e:2a:d4:ff:18:57:aa:91:1e:14:65:6c:fc:20:6d:
e8:c8:e4:92:6b:d4:fa:c0:20:77:57:f0:bf:8a:d5:
da:34:04:2e:9d:30:b9:49:d4:9b:89:3a:98:bd:4f:
63:eb:41:63:4b:07:fc:d3:05:cb:f0:3f:8a:eb:9f:
44:52:3e:71:73:aa:b8:ce:9d:7d:71:5a:1d:cf:cc:
4c:34:50:75:bc:46:ac:2f:26:ca:34:22:24:a5:6d:
bf:cb:69:4a:b6:d6:8a:56:f0:3e:20:57:2d:a4:d1:
8b:2d:5d:30:47:2e:5c:e6:99:61:35:0d:a0:63:3a:
17:27:9a:d3:91:02:ff:bf:c2:f9:a2:f3:05:e9:c1:
36:4b:fb:d6:46:54:54:01:cf:48:ed:ec:fe:2e:76:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:13:81:41:9D:FF:1E:F4:AA:F8:4A:9F:5B:C1:D7:34:92:58:2A:D2
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a0:45:88:c7:58:bc:e9:ff:35:65:b4:3b:f0:5a:f4:18:5f:
c0:60:f3:41:15:12:54:37:b5:00:06:4d:db:ba:22:10:f5:51:
f4:03:ac:67:f7:34:40:5a:96:dd:f5:11:8f:d6:44:eb:85:cf:
69:59:4b:53:53:c1:7f:f4:b0:3c:e0:08:88:52:56:8e:b5:93:
cb:ba:08:de:3d:25:22:65:97:59:71:3a:1c:22:4e:1c:e5:84:
79:c1:14:5a:8a:f1:0e:d7:f5:25:1e:20:c1:d6:60:b9:b5:38:
4f:fe:1a:70:a7:fc:05:d4:41:8a:0a:82:29:a4:48:1d:99:fc:
b8:aa:54:7b:c6:49:e7:a4:0c:c8:9a:6a:c4:bc:6e:ff:01:1e:
f2:73:4b:d9:b9:8f:c1:61:bc:6a:0f:d4:9a:81:24:28:b8:7f:
48:6f:a8:2b:04:87:d5:24:8b:ca:2a:1e:c7:50:b5:b4:e3:4b:
d0:a0:90:91:df:96:4f:ba:d4:47:d6:0a:84:48:71:67:0d:3a:
dc:3e:0a:50:f3:80:dc:32:7d:ad:d9:81:48:9e:6d:33:9b:3f:
b1:89:fd:7b:50:ac:1c:16:6c:7b:7e:3b:5b:e8:83:f4:a1:60:
b9:93:04:f0:c3:44:a1:2d:aa:16:06:5e:52:7b:10:fd:3d:7b:
b3:39:1c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 20:50:53 2025 by rpki-client