Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: R/3yOj4XvmbLT1CsobfUhx+rMvfJkKyva+p1Dp4avPk=
Subject key identifier: 85:CB:4B:54:E4:7A:DF:24:06:18:A4:2B:6C:1C:A9:9B:27:F6:6D:30
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 0199FBEB2EB8C5104930E0682E11B48E76B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 0FE9
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: MjK_xJG6Hwcb67PomltSWuntrmM.roa (hash: aerGyiTEpiF59FAbfobUyJCn9cR81tY8N4zQCxzZAWk=)
2: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=)
3: TBmGO5t5AH5NVXED3d-86yJ2g-g.roa (hash: S/ggAtC3XkCG9e4NTbC903dmEf8ZwLiR5xsOu4Bo+Bc=)
4: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: wSemaT9oMi9RzVZdkoyA0dmyXaq3Q+3GhPWPYlsWb/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2e:b8:c5:10:49:30:e0:68:2e:11:b4:8e:76:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=85cb4b54e47adf240618a42b6c1ca99b27f66d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:06:a6:44:8f:91:50:34:ff:28:48:c5:fd:
cf:0f:03:fe:92:c3:88:6f:d9:52:31:d3:2b:70:de:
27:c2:39:62:ad:e3:d3:53:30:c4:78:50:be:88:cd:
6c:71:22:00:ad:21:6d:5c:4e:31:28:14:46:5b:2a:
f8:4b:96:bc:50:93:e3:a9:b5:e9:e2:26:41:60:cf:
a9:af:e5:df:82:69:a0:23:9d:49:11:b3:eb:2d:ec:
ca:24:e7:9e:dc:5d:e9:89:e0:a5:8f:13:7e:8e:9b:
72:72:94:13:08:38:f9:2b:95:44:d0:ba:5f:0f:b2:
03:1b:b5:ca:fe:e9:4a:73:5a:3e:31:d8:47:d0:cf:
f5:61:65:5d:1c:fb:3b:f4:8a:d9:1e:c7:e1:91:4e:
fe:d8:5b:af:da:43:60:af:34:0c:56:34:75:b4:14:
65:4a:ef:1a:47:72:fc:a7:97:04:f9:19:94:a0:1d:
42:6d:d0:20:ba:c0:ba:cb:d0:e8:64:9e:5a:b7:d4:
d0:43:b8:75:0b:17:c1:47:f4:ba:97:18:1b:d2:96:
c9:45:a1:ad:e2:5b:07:b4:30:6f:21:c0:e1:75:f1:
0e:8d:a1:b1:af:96:40:79:39:8d:cb:43:8c:6f:85:
89:a6:00:58:88:ab:96:9e:26:c8:db:4a:db:6e:59:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:4B:54:E4:7A:DF:24:06:18:A4:2B:6C:1C:A9:9B:27:F6:6D:30
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:99:8a:1b:3a:6c:8c:bd:b2:66:cd:65:af:c0:63:2c:0b:4c:
53:31:f7:83:27:46:93:de:64:69:2a:75:2a:02:97:e2:92:5e:
32:70:06:9f:f1:ed:fc:25:2b:c6:51:fb:b6:26:1c:4b:da:c7:
00:46:27:c6:36:b8:78:70:18:6d:98:37:98:c8:8c:7a:0d:38:
99:79:54:6a:43:82:b9:19:1a:ef:85:fd:b2:98:d3:01:c5:8d:
dd:b1:bb:4e:cf:34:0f:ab:8b:2a:fc:8c:6c:db:ec:20:e8:e6:
d2:ff:b1:01:25:73:bf:52:4a:68:4c:71:e6:8f:a9:8d:13:e6:
bf:26:97:43:ec:63:e4:3a:50:ba:8e:f4:88:f6:66:91:23:72:
b9:41:2e:55:0e:e8:62:d0:04:29:5d:fd:a3:a9:27:2d:59:0b:
00:5b:c5:da:8d:4e:81:fd:e2:59:e8:aa:35:09:e9:27:4d:c4:
ed:8e:fe:64:18:40:0c:6f:97:2c:af:b7:94:7d:ad:ce:79:15:
05:7b:30:6d:af:30:4d:6a:1b:5d:8a:96:e7:0d:c6:c5:20:35:
76:9d:05:50:96:8a:a5:51:e8:0d:dd:bd:d8:0f:54:de:de:cc:
c5:e6:32:bb:42:6f:be:07:47:89:85:ee:bd:a5:7e:6c:5c:34:
93:e1:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:46 2025 by rpki-client