Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: btRQkJDgdTNZlC5A1YvsMK/Vj5GUo9nPLp+nkr/07Fg=
Subject key identifier: FE:DD:7C:B2:BA:1F:0F:ED:C6:EA:2A:5F:9A:7A:60:90:4B:5B:1D:2D
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 0199FBEBD4F3039BC9CA13C3F4020F62EA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: lxIOfpEebXWD5FjStjbZrZXstmTVPMVNe2UewalWmWA=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d4:f3:03:9b:c9:ca:13:c3:f4:02:0f:62:ea:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=fedd7cb2ba1f0fedc6ea2a5f9a7a60904b5b1d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:f5:da:e1:0a:b5:25:84:8a:94:c8:ff:13:
3b:76:d5:44:05:0f:e7:f8:f3:ac:6d:c9:20:54:29:
9e:f8:50:ee:66:ee:3c:1e:b8:82:87:31:71:79:71:
b2:ee:7c:71:82:1b:aa:5c:ef:9d:8a:e9:5f:d5:ec:
9d:5d:f5:41:53:78:9c:5c:32:27:32:9c:6f:2c:96:
3c:dc:c3:a9:06:8d:78:93:80:5d:dc:77:1b:d4:43:
94:63:0c:f7:dd:e8:71:79:81:f3:7f:3d:38:e8:f3:
d0:c4:51:31:cc:b2:38:46:87:ab:8c:99:34:85:99:
da:cb:88:9d:cb:db:0b:44:b9:35:cc:f4:c3:d5:51:
9e:fc:af:ec:0a:6b:64:44:33:65:3e:58:a5:45:2c:
88:6b:49:6f:3e:0a:95:ca:8c:1f:2f:ce:bc:ec:6a:
d4:6d:31:cd:a1:c3:08:ce:db:d8:a7:09:ed:64:ab:
dd:ce:07:dc:a4:03:32:12:e0:24:8a:0b:8e:4c:6d:
d0:9a:15:f7:de:2f:36:c5:5e:b4:6d:b4:a4:c8:a7:
fd:9c:e3:74:2e:1f:51:8b:38:64:cd:d6:d0:7b:97:
48:31:5d:92:25:a4:75:f2:a5:4b:50:33:bc:2d:dd:
8c:c7:3d:ac:a5:10:7a:09:09:fb:99:ff:ea:48:45:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DD:7C:B2:BA:1F:0F:ED:C6:EA:2A:5F:9A:7A:60:90:4B:5B:1D:2D
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:25:9f:0e:60:41:7f:96:e4:11:39:6f:6e:a4:c7:8f:6d:b2:
15:51:9d:af:8b:40:29:99:59:f3:a0:60:b4:77:b6:ce:c1:e4:
3e:ea:31:dd:4e:28:51:44:aa:1b:50:b6:f9:c6:7f:58:e8:57:
f5:e1:74:03:6f:dc:aa:f1:6c:99:34:13:a0:21:15:ad:d5:db:
f4:55:38:86:a4:25:d0:5f:52:f3:15:2c:3c:66:a9:bb:66:a8:
e1:6f:4f:55:87:a6:42:9b:38:68:35:3e:31:49:92:af:27:ed:
63:1d:56:61:35:11:17:c8:ca:85:c5:fc:1b:7e:4d:6a:17:98:
69:7e:0a:d3:e5:76:ef:7a:a1:50:89:24:da:bf:f2:f1:57:bb:
58:8f:a4:6f:4a:2c:74:38:d0:23:50:7d:9c:ed:5f:fa:3f:13:
42:f2:ca:a1:8b:87:23:6b:5b:75:47:ea:2d:06:c3:ac:d9:5a:
d7:a8:ca:82:df:a4:d8:03:d4:4e:84:66:e1:39:41:ff:55:f7:
e2:be:3a:7b:d1:7c:77:48:07:ae:98:72:fd:59:9b:78:60:a5:
a6:b2:93:71:59:c5:b5:f2:fc:d2:4d:f6:e5:bf:a3:2e:6b:38:
e7:67:e7:18:17:7a:c8:7a:ff:99:99:3a:19:45:0a:49:1a:ec:
38:f0:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:26 2025 by rpki-client