Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier: 1KwqDG992ZPE9qrNCB0TL7RrYZI5nI2dh8R0auB7L/Y=
Subject key identifier: 94:47:44:F2:52:09:DC:7D:C2:44:40:E3:E2:F0:99:F7:6C:83:9B:3E
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial: 0199FC58EE3BBD38908DC6AF3779ECA323DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: TWZkzperwLCX9xep7bDZGpZBNie4DT0VjoIEibRCAlw=)
2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ee:3b:bd:38:90:8d:c6:af:37:79:ec:a3:23:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=944744f25209dc7dc24440e3e2f099f76c839b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:65:db:9c:e8:89:6b:18:e8:6d:d6:9f:a1:
9a:1a:85:4f:6e:a2:a3:de:83:0a:8b:6a:68:2e:52:
6d:d2:35:12:f2:85:2d:9e:7f:b5:dc:2f:2b:35:fb:
08:91:5b:0b:d1:15:d9:29:f6:e6:2d:be:bd:f7:63:
e3:d5:99:39:4f:5f:fc:d2:8c:4d:91:b4:be:d5:ea:
6c:be:23:5a:84:8c:c9:a1:9a:0e:ac:88:db:5d:78:
b4:62:22:c0:88:81:90:eb:36:3e:06:2c:74:5a:35:
5d:be:3e:0c:d3:07:7d:f4:d7:39:ab:1c:11:82:d5:
e1:1e:77:37:d6:ed:a6:3f:3a:e6:23:56:32:fc:42:
7f:ca:5e:b3:d4:2d:72:3a:49:b4:59:44:91:90:0b:
2e:81:e4:5a:30:e2:d2:d6:d2:49:15:11:ac:04:53:
67:b6:e8:3b:15:3c:19:05:91:72:83:70:f9:07:54:
50:89:10:fc:73:0a:64:db:54:77:fa:3b:3b:ce:20:
77:f4:73:80:61:a8:b8:5e:a2:93:a9:aa:13:66:1b:
5d:db:7e:df:0e:0b:ac:da:47:98:70:e4:45:97:53:
c4:0c:4c:3b:60:e2:1f:55:6f:ea:e3:11:d1:f8:57:
39:03:ca:25:d5:bc:71:5a:33:10:48:5a:8d:2f:9a:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:44:F2:52:09:DC:7D:C2:44:40:E3:E2:F0:99:F7:6C:83:9B:3E
X509v3 Authority Key Identifier:
keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2c:c0:41:23:91:b6:9a:16:9e:6a:0c:b9:72:0c:09:22:e9:
f7:3a:c4:5a:25:42:53:eb:ab:6e:7f:7c:29:7f:50:05:98:5e:
b9:58:b1:36:5a:54:c0:ec:c7:bf:bd:a4:44:04:9f:8a:99:ba:
d3:8a:5c:45:16:e1:77:e4:b0:28:8e:d6:c3:46:42:d7:b3:68:
4e:ee:f4:68:e3:b8:b0:fc:14:58:ad:e4:dd:9c:a4:5c:4c:76:
81:ef:9c:8a:34:08:bd:e2:a9:d6:e9:8a:f4:51:bc:a9:6c:b8:
64:02:ec:ff:54:07:8e:d9:b9:6e:74:fb:72:71:9e:34:54:01:
8b:f3:1d:6a:1e:78:d3:8b:54:02:aa:eb:56:31:ef:ed:13:d4:
eb:ce:98:92:56:6d:ce:87:d4:09:6b:fe:ac:91:bc:1c:da:95:
38:a5:33:78:fb:fb:a4:78:fc:78:ce:79:08:eb:1e:cd:9f:95:
7b:14:3c:a3:a5:44:25:3d:ba:a6:03:5e:64:d0:8e:b0:be:d4:
5e:ee:7d:7b:35:fd:5c:4e:48:68:d3:65:64:d8:fe:26:49:28:
c6:da:aa:74:58:bc:da:c7:88:e2:83:98:96:25:2e:1e:28:95:
19:85:c0:1d:d7:8a:e0:f1:eb:68:21:36:3d:a1:85:2c:2b:3c:
2c:67:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:12 2025 by rpki-client