Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File: UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier: D15FJ8zUL/XNMI3V/rOXSKzj6gMzLI8/dcYJA0TZ3x4=
Subject key identifier: 96:CD:D9:91:13:FC:2E:B6:14:4E:10:A2:CF:CA:FF:C1:F5:F3:90:5D
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial: 0199FC586EDB8C098B9C42C998AA94EACB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number: 0870
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=)
2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: mXx8m/Rp8B4FjnAe1nxRVezCkRBi3xAqJBVm7hcSeqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6e:db:8c:09:8b:9c:42:c9:98:aa:94:ea:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=96cdd99113fc2eb6144e10a2cfcaffc1f5f3905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:da:96:94:5e:c3:25:0d:17:19:cc:67:6f:
f4:06:83:38:7f:29:8e:98:90:bb:dd:14:14:a4:f2:
9c:e0:5d:eb:57:d4:3a:8e:2b:c6:48:08:37:77:55:
51:74:1c:0d:b2:fb:0a:a0:0f:8d:00:7a:ec:8c:d0:
09:7b:ab:41:1a:67:3e:8f:93:d8:13:9c:23:60:d9:
a2:4d:96:69:a3:eb:b9:7b:b7:ad:97:15:dc:13:e9:
90:7d:98:ac:cf:1f:d4:7e:64:92:ac:63:2c:3a:00:
a1:f8:6e:17:61:8d:89:a5:af:fa:83:0c:b8:7d:06:
fc:2c:e9:c0:75:a1:08:af:16:aa:9c:44:05:66:dd:
33:1c:a0:ee:3f:07:77:63:04:a9:0a:34:a7:5e:50:
04:50:d6:a4:c0:02:a9:ce:07:4c:e0:3a:fb:56:58:
b4:52:9f:46:bc:9a:97:4b:1d:bc:d8:4d:2c:94:d8:
46:ac:f5:f4:12:b9:9b:7d:dd:c2:27:61:4e:fb:59:
05:e0:b0:bf:4e:55:33:36:40:18:30:9a:16:67:ba:
36:e7:3c:3b:f0:e6:77:d3:a5:c0:2a:aa:a5:95:c5:
aa:df:96:ba:2b:13:09:9d:6a:e0:61:e3:0b:e2:5e:
7c:01:c3:fa:ef:3e:ad:a1:98:be:91:d6:0e:60:28:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CD:D9:91:13:FC:2E:B6:14:4E:10:A2:CF:CA:FF:C1:F5:F3:90:5D
X509v3 Authority Key Identifier:
keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b0:ef:6b:03:25:cf:c1:fc:e2:26:5a:9e:3f:94:cc:42:ca:
a3:43:2f:f9:45:01:a8:f8:4c:6f:7c:d4:59:37:4d:64:93:64:
fa:5b:d6:f1:87:f5:fe:f0:c4:a0:b6:21:b4:8e:6f:11:a2:ea:
6e:c8:1e:fc:1a:50:46:3a:dc:12:6b:f0:78:dd:f7:1e:28:a7:
27:69:cd:99:3b:4d:4b:de:12:41:ae:66:8c:26:ad:f3:ac:dc:
c9:39:f6:e0:16:bd:60:de:59:cc:ac:45:8d:04:b8:b0:1a:7f:
b2:f5:9f:f4:69:39:52:fb:f1:0e:4c:4d:34:cf:2a:f6:a1:ca:
b9:93:be:e5:98:02:85:1e:8d:1e:8b:e4:78:cc:d9:e2:a6:49:
fc:87:dd:cd:2d:be:5b:67:83:d1:0b:18:6a:45:3d:7d:f9:d9:
51:f9:73:c7:c3:e5:c8:62:84:c4:84:fc:4f:57:59:84:1a:32:
c2:7b:c1:cb:43:f8:eb:62:df:68:03:96:e5:db:c8:41:b3:c8:
93:b5:27:ee:e8:ad:90:7a:cd:44:07:2e:9d:11:e5:ee:1d:86:
71:f5:14:10:72:58:0e:69:e6:2e:5e:bc:81:69:69:f5:f5:74:
a4:05:d6:7b:53:3a:e0:cd:10:f5:fd:3c:c8:e3:2d:75:a5:70:
93:00:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:59 2025 by rpki-client