Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: JKtowhDLWhm5Ax5s9fNin2CRG01VH+vpHiN1mSFkHE0=
Subject key identifier: 7A:AD:87:82:C0:C9:48:06:6D:6F:5F:87:CC:57:71:2D:E5:BE:CB:DF
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019A258A3F3B1DE3861F4591A903B90EF7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0D87
Signing time: Mon 27 Oct 2025 12:00:08 +0000
Manifest this update: Mon 27 Oct 2025 12:00:08 +0000
Manifest next update: Tue 28 Oct 2025 12:00:08 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: 5yYMyn2eznwGhmkOJPsqhTgXnFtoFi6Edx/9PPnFn48=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:3f:3b:1d:e3:86:1f:45:91:a9:03:b9:0e:f7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Oct 27 12:00:08 2025 GMT
Not After : Oct 28 12:00:08 2025 GMT
Subject: CN=7aad8782c0c948066d6f5f87cc57712de5becbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:81:bf:61:8d:6c:4e:0b:fb:cb:7a:05:a5:
26:d6:62:96:a0:65:e1:57:b9:88:6e:e8:ac:25:2c:
27:6d:7f:ae:4a:69:0e:e3:19:43:fd:41:cf:a5:88:
70:d6:94:bc:47:a2:42:a1:54:16:c6:06:80:71:7c:
a0:85:2b:69:cb:2b:72:1b:0f:33:f7:de:11:87:d0:
54:dc:a3:ad:e1:63:a5:98:1c:37:0c:a9:11:1b:23:
0a:96:a3:e4:33:68:b2:84:3c:0d:5f:ee:e1:6d:bd:
ad:11:e7:6a:a2:55:26:5a:6c:02:7f:40:16:95:c8:
84:eb:28:1b:95:73:64:a0:0e:4f:7e:f6:b1:a4:7c:
99:49:b0:d5:c7:c1:a0:c7:e4:57:b0:4e:d6:18:7a:
bf:8a:c6:1c:e2:b5:b1:fb:63:4a:8b:dc:5f:19:99:
39:7b:bd:3b:fe:03:c9:c7:ae:f9:ff:df:a8:cc:b7:
86:50:3a:19:43:8b:57:36:41:fb:03:6f:b7:5e:c9:
2b:0c:d2:19:d2:44:e6:e2:3e:51:d1:d0:c3:28:58:
37:e2:80:35:f0:12:ae:28:d1:54:1a:e3:4b:60:b4:
06:74:0c:00:61:95:14:50:8d:9b:d5:72:45:91:46:
02:24:52:9e:6b:3a:bd:4a:a6:cd:ec:4d:31:cf:70:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:87:82:C0:C9:48:06:6D:6F:5F:87:CC:57:71:2D:E5:BE:CB:DF
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:3d:9c:20:3c:89:06:85:a6:93:0a:e0:11:44:38:5d:50:
85:10:26:4c:77:69:42:06:e1:05:0f:4a:5b:f2:11:df:95:1a:
36:87:74:47:a5:58:73:b4:fe:14:e0:94:b7:34:40:2b:8c:cb:
4e:01:2e:63:c1:15:44:41:48:e0:a1:72:93:bc:26:f8:6d:5e:
df:e3:4e:25:75:f2:da:14:9e:3c:b3:7d:76:62:bd:dd:fe:5a:
81:fb:1a:be:45:d5:6b:0c:55:13:9b:06:ab:4d:38:ae:b3:00:
d2:ac:91:60:4e:06:8b:a2:a7:77:5c:b8:ec:18:ff:18:3a:7f:
39:ed:80:05:8f:97:c1:b2:02:e6:5b:fb:4d:79:6f:ba:34:b1:
8e:cb:d0:d4:3a:1a:9a:a8:5e:3e:6e:bf:ea:1c:b5:76:08:4e:
aa:84:75:48:c1:2a:83:04:c7:c2:d2:d9:cf:d2:72:ba:84:cc:
bf:e8:79:7b:20:d1:48:eb:4a:d5:0f:f4:9a:de:63:c7:39:19:
af:2c:ba:d6:2d:0c:6f:59:1c:fa:04:2f:10:f0:b5:81:1b:25:
08:b9:aa:b2:6f:16:51:46:22:5f:d7:49:cd:a2:2d:8a:30:8f:
18:01:69:60:d4:d3:36:53:d4:0b:30:25:7a:a8:03:40:71:a3:
be:47:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:51:21 2025 by rpki-client