Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: Op0M5kdJeUUz75w1a50DZkB5Vps9XYs2Hw/3opn7FkE=
Subject key identifier: D7:2C:6C:54:B4:10:13:17:8A:AA:5D:94:18:7A:12:9F:6D:AB:E3:67
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019A0110B5935770FA5767C4679F32D10140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 16F6
Signing time: Mon 20 Oct 2025 10:01:03 +0000
Manifest this update: Mon 20 Oct 2025 10:01:03 +0000
Manifest next update: Tue 21 Oct 2025 10:01:03 +0000
Files and hashes: 1: 1WNYYNS7RX-CeZ_6JxRjUdD-q2A.roa (hash: wxMlsJGdNKU4KY3gfHml6end/i1xs49sClefHW/FEbI=)
2: RWBCbOOdbBGTferrrFeH21g0Q-s.roa (hash: OgUeYLtx1plcBJ0e3g1wF6V6jlWOtr/OpNuK7tUONQE=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: Q7h08jPAmZIUxg2fbZrh+fEH1J8WelW0BJWNVB0M2ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:b5:93:57:70:fa:57:67:c4:67:9f:32:d1:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 20 10:01:03 2025 GMT
Not After : Oct 21 10:01:03 2025 GMT
Subject: CN=d72c6c54b41013178aaa5d94187a129f6dabe367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e0:f5:a9:ad:1f:fa:13:d4:de:26:35:31:05:
4b:23:ca:a9:12:67:44:5c:94:7f:49:45:83:43:28:
9f:30:40:2a:5b:20:8e:85:ec:bb:1e:bb:93:47:50:
9e:27:69:53:2f:22:f7:45:12:7e:97:0c:05:5b:d9:
20:bb:b8:a9:47:fd:66:e9:7a:be:43:bb:6e:72:09:
30:05:7a:9c:f4:ea:a2:63:ca:09:8d:f4:45:20:60:
71:56:84:5d:c4:b9:e4:cd:80:52:6f:50:9e:fa:1e:
8a:2b:47:80:e1:2f:d6:5c:e7:17:46:f3:52:63:cd:
0b:ff:e3:97:0f:39:0d:2d:7a:3e:9a:68:54:69:66:
ca:b0:a0:65:0b:2b:58:c8:90:20:b7:ce:d1:bf:90:
99:fa:ab:e6:32:07:d1:03:15:72:24:58:09:64:01:
05:d1:3d:32:65:48:ff:4f:65:0e:4b:15:35:0e:1e:
a2:45:67:e5:a2:5c:86:f2:16:ce:3a:8a:0c:26:b9:
48:c8:db:0a:2b:16:06:50:4b:90:8a:74:b4:85:db:
64:ee:16:c2:59:77:00:fa:aa:e5:d9:f1:bd:48:23:
de:3c:90:a2:83:a7:d5:65:06:e4:a3:72:aa:67:16:
ed:dc:d0:52:5a:fa:3c:22:15:6b:e9:4b:e5:cf:46:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:6C:54:B4:10:13:17:8A:AA:5D:94:18:7A:12:9F:6D:AB:E3:67
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a4:9a:42:51:b6:78:55:48:d7:85:3a:af:44:bf:4c:c2:fc:
9b:22:ff:a8:b7:20:da:0d:75:60:4d:e4:3e:c1:c0:dc:96:7f:
10:2e:51:1a:33:b3:db:21:b4:d8:5f:9b:b5:aa:04:41:1c:08:
38:91:83:ae:96:97:b6:6c:f2:db:41:67:91:e7:3e:41:db:e6:
2c:d1:b6:4d:76:e7:32:ed:67:20:df:2a:52:60:99:33:b6:79:
a9:4e:85:04:b7:52:1d:91:16:ee:88:5b:01:47:ca:31:81:4f:
c3:7a:2f:3c:ed:1a:11:ca:d6:69:52:9f:83:a8:ae:6a:e7:1e:
5d:75:7d:9b:bc:1b:89:1c:63:1a:dc:de:4e:f7:d9:51:4c:33:
62:08:43:a5:b2:1c:86:31:f0:43:85:f7:db:00:33:e0:a9:f7:
1a:2f:d8:b8:f9:d6:83:20:95:2a:14:c8:95:5f:d6:3c:06:da:
c2:40:bc:eb:f1:f8:3a:3a:98:27:70:c7:bb:4e:31:4c:ca:c4:
38:c4:6b:8d:7d:cf:f4:70:75:9b:f2:45:49:d7:bb:bc:d2:cf:
fb:86:33:f2:0d:e4:48:94:12:33:13:80:b7:1d:7e:f3:59:18:
5b:0b:2a:1e:9f:f4:5d:41:63:2b:ee:73:b6:e8:fb:2f:5e:12:
e5:8b:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:06 2025 by rpki-client