
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: diBSPfWYfJdz+Xu5gkvvgbxBTG/7hQ535mc3Nm3XdMk=
Subject key identifier: 3C:08:1E:67:10:58:13:C6:57:37:9E:F2:FC:12:13:AD:D2:39:7E:52
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 0199FC58ADBAA760D4F118540AAF23EE380C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 06B3
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: y32DddHYk+S2Onhxo/SksspfhZ4o4iecuRBYc1MnQqA=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ad:ba:a7:60:d4:f1:18:54:0a:af:23:ee:38:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=3c081e67105813c657379ef2fc1213add2397e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:ae:07:5f:cb:bf:9a:0b:58:8e:6a:0b:a6:
a8:59:00:d3:22:56:83:f1:81:9d:52:b0:8e:88:70:
a2:3b:b5:36:f9:9f:db:eb:f9:8f:bc:a0:1d:da:e9:
74:c2:85:d8:a5:2a:58:e5:da:8e:b5:6a:29:b9:98:
d9:04:5d:b9:20:89:d1:79:50:dc:36:ae:ca:e0:7a:
96:02:93:79:be:f3:38:c5:97:52:69:b3:a9:a2:9a:
1b:2e:bd:5c:3d:75:cc:4d:3e:f2:3f:bb:97:77:4e:
74:7b:19:64:06:70:f9:02:23:a5:f2:85:6b:27:a1:
96:2b:4d:37:c8:bb:25:57:82:e5:db:80:f2:61:04:
31:78:20:7b:11:4a:d6:9f:45:24:c8:9d:1d:d6:47:
05:c5:f0:99:f1:07:67:25:02:1f:d1:5d:ef:8d:3b:
dc:28:56:2e:8f:d7:47:6b:97:d8:aa:ce:b1:c7:d3:
70:d2:a2:3c:a5:f6:08:65:ff:92:96:c5:a4:3e:da:
5b:a0:d3:d9:aa:b0:ad:84:53:7b:fa:99:f0:3f:69:
d4:4f:31:97:dd:af:80:00:d6:ec:30:89:3e:c5:c0:
eb:de:fd:77:a6:c6:bc:9c:b5:02:b4:1a:a5:8a:44:
c5:d7:64:54:ad:ec:57:01:44:01:3c:2e:f7:a5:0c:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:08:1E:67:10:58:13:C6:57:37:9E:F2:FC:12:13:AD:D2:39:7E:52
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f5:41:e9:df:fe:39:2b:f5:78:3a:37:73:68:4e:d8:52:8d:
25:5e:b7:bd:ca:ee:a2:88:ee:21:56:65:7d:f2:8c:6c:6d:ef:
56:5b:c4:b4:41:c3:20:43:9d:7f:97:5d:60:42:bf:51:50:4e:
b4:4d:8a:23:87:e1:5c:74:7d:ca:bb:d6:83:c5:f1:24:4f:05:
6c:8e:ec:7c:c3:5e:3d:2c:87:2f:c5:fd:2e:5c:2e:49:fd:f0:
e7:cf:b6:97:cb:cb:34:d7:8a:78:30:19:f3:83:09:55:13:01:
86:ec:11:64:fb:04:71:a1:b8:e6:00:66:95:24:19:62:c7:8c:
86:97:9d:5b:b7:c2:47:a4:5f:98:cd:ae:b6:d4:78:25:53:21:
ce:e5:b0:86:3a:cc:65:4d:4b:a7:81:64:12:9f:44:81:f5:70:
d8:29:ac:c2:c1:7d:96:46:34:a2:81:de:60:0b:2f:c1:f9:53:
9e:aa:02:2d:ea:ab:e8:52:ea:eb:c2:cb:8c:40:43:77:c2:34:
7b:05:68:a4:d6:b8:b0:e4:eb:bd:92:67:b8:19:73:5f:40:22:
c7:fe:33:b8:dc:f3:b3:ae:c9:5f:4e:60:54:51:8f:1e:5a:f2:
a5:0c:d0:1d:8f:f5:77:26:b6:78:59:b9:64:9e:9f:54:19:d8:
8f:ba:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:49 2025 by rpki-client