Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File: UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier: rb0yrJyCVXJ5GpAm6IzOazJpo+qULxDe80hfkla4mlA=
Subject key identifier: 63:7C:53:8D:3B:53:96:D1:DC:CC:1D:31:68:DF:D2:A6:43:EF:7C:EC
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial: 0199FCC61220B21027B17DFAA8D1589AEB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number: 0EFF
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: v24nuTFZKjohjOBTJHnCTWsNKIZZc/mOnyd8r6h8HkA=)
2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:12:20:b2:10:27:b1:7d:fa:a8:d1:58:9a:eb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=637c538d3b5396d1dccc1d3168dfd2a643ef7cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:51:84:3b:1d:bc:57:b4:68:79:83:05:84:
c0:96:3c:bf:de:a0:b2:42:ba:61:e6:e5:59:fd:88:
b9:6e:ac:2d:48:38:41:ef:b7:bf:88:43:98:de:6b:
22:b4:f7:84:b1:4d:be:68:90:ea:6e:e8:d5:b7:fc:
77:a3:31:aa:35:79:e3:4d:30:55:0d:fe:84:f9:29:
10:39:6f:b1:12:c1:8b:05:ee:4b:a9:51:3d:67:ac:
ca:9a:30:24:d3:0b:b8:3f:c1:c7:84:d3:df:c1:f9:
a7:f5:1a:44:2e:89:3e:9e:67:8f:bc:e3:eb:a3:15:
81:4f:27:db:a2:05:74:2f:9d:9a:bf:5c:18:6c:8e:
1e:f5:00:2d:ab:d3:16:73:d9:e5:f2:06:b7:0c:a2:
cb:4e:27:07:3f:d4:27:92:a9:4b:9a:b1:aa:94:58:
ed:6d:11:9f:b4:8e:76:4c:e0:cc:3b:1d:b1:bb:01:
79:a6:8c:e0:25:e8:30:63:2b:93:59:7b:ce:f2:82:
e2:47:14:4a:62:3d:69:ae:75:b0:b9:13:67:20:32:
e7:13:8a:84:2c:20:f9:12:dd:e8:71:8e:3a:be:55:
4b:3b:ab:6b:92:1e:ce:6c:c8:5b:c7:15:ef:e4:51:
73:ff:16:71:14:9e:90:e0:13:14:8c:ce:29:88:e4:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7C:53:8D:3B:53:96:D1:DC:CC:1D:31:68:DF:D2:A6:43:EF:7C:EC
X509v3 Authority Key Identifier:
keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ae:24:66:b6:0b:af:ac:ce:d5:78:a6:71:3f:00:9f:f2:2c:
2a:d5:42:55:86:bd:fd:f6:cb:1b:65:01:78:07:fa:e7:a7:e3:
c9:4c:18:c7:c2:45:22:2e:46:cb:4c:13:7f:4e:0e:18:3e:c7:
e5:d9:9e:13:5d:57:68:3d:67:f2:d9:2c:0d:82:8d:a7:a7:70:
01:4d:7c:8b:e4:80:9a:f0:26:01:22:82:2d:ad:ec:9d:17:0b:
00:82:9f:1f:e5:88:1e:fa:63:e9:53:5b:2c:e9:e2:d2:22:9b:
c0:8f:d2:f9:53:c8:61:15:36:22:42:2a:f8:77:84:28:33:f5:
39:2d:9e:09:99:e7:7a:58:e9:f6:19:f5:62:4d:2c:25:55:12:
c5:f6:ad:05:13:aa:ab:dd:8f:21:79:a5:cd:eb:85:8e:2d:f2:
a6:bb:fd:12:31:1e:16:80:77:cb:f2:57:73:10:c7:3c:9e:86:
19:9c:15:66:68:a7:fb:e4:32:e9:78:07:5d:7e:0a:92:ac:1e:
ad:08:ff:c0:2e:83:d5:ef:ce:1d:5d:ec:2b:85:76:02:c3:61:
5d:dd:54:27:68:ab:35:e3:59:33:48:e9:be:a9:72:2b:2d:3e:
5e:63:e6:3c:0b:b2:cc:e5:35:0b:a1:03:31:2b:71:e0:b5:eb:
79:d8:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:42 2025 by rpki-client