Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: ycxCCB7jwgkpFuQokKN+kswaS7zKlu1pBecyYTxGkzM=
Subject key identifier: 39:08:00:FF:2D:4E:11:10:DC:68:C6:85:AE:90:38:72:CA:59:C7:28
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 0199FEEBF8F08569B8839D53482CE12B410E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 0233
Signing time: Mon 20 Oct 2025 00:01:41 +0000
Manifest this update: Mon 20 Oct 2025 00:01:41 +0000
Manifest next update: Tue 21 Oct 2025 00:01:41 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: Bsa1QnTS1VZlGOV9hQYBUiptv+BTvkebLYee1ZMNcjA=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f8:f0:85:69:b8:83:9d:53:48:2c:e1:2b:41:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Oct 20 00:01:41 2025 GMT
Not After : Oct 21 00:01:41 2025 GMT
Subject: CN=390800ff2d4e1110dc68c685ae903872ca59c728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:54:6b:85:56:d5:9b:0f:ce:99:da:5b:9c:
00:4e:a9:33:07:d6:53:ce:18:76:e5:d4:18:06:9e:
11:e8:51:73:fd:47:a0:87:f7:8a:8c:4c:ad:9a:0b:
82:33:94:2d:6e:0e:00:16:8a:74:1e:36:44:7e:be:
f2:63:36:cb:cc:86:80:67:03:9d:93:7a:3d:11:cd:
cc:2a:f6:42:14:34:8c:c2:f2:31:b2:bb:05:9d:40:
56:46:42:25:62:19:bf:2b:b2:51:cd:98:07:a8:e8:
dd:4e:8c:cf:e9:04:53:41:ce:ba:be:5f:20:cd:a5:
e6:a7:a8:a3:90:13:69:1f:43:3f:55:09:cd:88:bb:
ba:4a:7d:1b:ed:e1:b7:dd:77:98:c0:44:76:9b:e8:
31:18:ac:33:ff:c1:6b:df:07:88:db:9d:2f:57:61:
d4:2d:8b:c7:b0:db:6f:d4:1e:d2:8d:b9:42:fd:4f:
46:6e:f9:66:1a:78:44:c9:47:a2:db:85:d9:d5:2e:
3e:a2:60:5f:e6:ae:d9:9f:76:0a:3a:6c:5d:7e:3e:
b6:8c:e4:b7:85:de:f1:39:b9:77:d8:62:6b:e9:b7:
d0:98:e1:4f:2e:5d:72:41:f5:0a:69:4b:c1:ba:5f:
ca:b0:ee:ec:78:1e:d7:78:69:18:15:57:13:14:85:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:08:00:FF:2D:4E:11:10:DC:68:C6:85:AE:90:38:72:CA:59:C7:28
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:98:cf:92:34:e8:41:8e:51:23:80:28:d0:e0:1f:80:52:e7:
e3:ff:c7:df:6f:9e:7c:5d:89:9b:60:be:d4:05:cb:31:d7:bd:
db:db:79:ae:bd:3f:05:5c:f2:1a:7e:fc:99:a3:a5:8b:3c:e1:
5c:0a:1e:79:e5:15:e5:fa:9a:e7:c2:3e:46:91:04:a3:3d:a4:
05:a1:76:55:8e:d3:07:43:1d:44:34:e8:da:eb:fb:fa:7c:b0:
78:c0:73:1e:cb:94:ec:9e:3a:6b:5d:23:6a:61:a3:48:ab:d2:
44:70:6a:50:b6:56:a8:66:09:79:0a:6e:90:86:e2:eb:49:7b:
4c:37:82:61:0e:77:c1:09:67:a6:ca:53:19:6f:cd:f4:31:bc:
99:ed:6e:1c:d6:09:d2:ae:d9:ef:70:e2:fb:ad:6b:fc:c7:69:
fb:96:8d:79:41:e6:6f:cf:78:86:6d:27:b7:6b:4c:ef:d8:f2:
f2:98:31:56:f0:9b:26:61:f7:8f:b7:8b:a8:cc:3f:8b:11:52:
50:f2:1b:64:04:d4:90:da:96:a3:fa:a6:1f:18:56:7b:6b:e1:
64:72:73:70:a5:b4:d5:4e:ee:db:3b:a1:e6:dc:26:8a:32:23:
f4:f6:42:6b:58:85:19:08:49:2a:47:9f:f0:3c:8b:4b:8b:fc:
06:dc:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:11 2025 by rpki-client