Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: CxjD2rhmC8wEN++GB+SkQ3MC6ryAz2zif6HtLgh6BpQ=
Subject key identifier: B7:D7:0C:61:41:47:70:EE:B6:BF:E8:A4:8A:D4:AD:F2:61:F5:C0:9C
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 0199FFC821AC165B70A8281D0F838A599FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 04:02:09 +0000
Manifest this update: Mon 20 Oct 2025 04:02:09 +0000
Manifest next update: Tue 21 Oct 2025 04:02:09 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: NXJUmZ3F7ef4mj8nwb8+G2LV/7hQvDHwwt3P6JopJyE=)
2: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:21:ac:16:5b:70:a8:28:1d:0f:83:8a:59:9f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Oct 20 04:02:09 2025 GMT
Not After : Oct 21 04:02:09 2025 GMT
Subject: CN=b7d70c61414770eeb6bfe8a48ad4adf261f5c09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:f1:27:68:8c:43:5b:7d:57:6d:62:cc:98:
11:e6:54:d9:c9:3f:58:d7:37:ce:73:95:f4:a8:86:
f9:12:88:32:fb:07:f0:d1:ab:90:73:6a:a8:97:00:
a5:39:20:3a:9d:61:87:79:12:1e:47:34:0e:ad:1b:
20:d2:91:96:a4:14:89:b2:d9:dc:2c:40:22:24:2f:
08:f6:3a:c2:7f:73:6c:cf:06:84:6b:79:76:d0:39:
7e:39:ee:1b:60:48:f7:e1:86:9c:f4:1a:6c:41:4f:
8f:96:61:6f:76:56:02:2d:3c:34:81:e7:c1:9f:9d:
8f:d7:68:b0:78:bb:69:1d:01:25:c0:b4:5b:87:f8:
19:48:63:fc:e5:5c:31:6b:e2:1c:22:6d:9a:c1:3a:
19:11:11:c8:c9:d8:5e:39:1d:fc:28:cb:42:a7:08:
88:81:f9:24:62:bf:ee:d5:7e:06:57:9c:e7:fd:08:
79:46:72:0a:33:d0:0f:cd:35:b8:e6:35:34:65:29:
e4:eb:27:dc:85:a8:e7:eb:dc:d2:33:43:ec:48:67:
18:f7:6d:2f:40:53:0c:88:ea:9c:54:20:5e:cd:ff:
9e:38:cb:f9:c6:e7:6a:dd:24:23:48:b3:d7:8e:76:
e2:8b:61:42:ca:2d:64:d5:12:41:2f:a2:1e:de:a4:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:0C:61:41:47:70:EE:B6:BF:E8:A4:8A:D4:AD:F2:61:F5:C0:9C
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:27:24:38:70:cf:96:69:2a:6e:e6:c6:08:d5:f2:96:95:b6:
17:09:ae:3c:53:60:77:11:9a:6a:56:f9:a5:22:f9:b7:80:8b:
df:8c:47:96:59:79:99:8c:5a:dc:7a:9f:6e:72:15:71:36:fc:
3a:55:7b:89:6e:be:d4:72:d1:c3:ec:25:11:99:8c:59:bc:e1:
d1:9e:63:04:78:d4:52:fd:50:39:6d:f6:4c:1d:6e:fd:ce:33:
17:e7:c0:14:d6:4f:35:98:7b:11:46:b4:0c:bd:29:95:eb:c4:
54:19:ae:6b:28:9d:52:92:52:8a:ab:7f:0d:5e:3d:bf:18:9b:
1a:4f:72:ef:e8:65:ad:b9:9f:60:7d:3e:a3:a4:b4:d1:23:0c:
3a:66:1b:5c:32:e7:d7:34:b8:7d:6e:e6:98:07:55:c2:33:20:
aa:a6:c5:07:10:76:2a:5e:93:a1:86:60:40:11:84:57:f0:65:
65:1c:c1:62:0a:81:1f:a9:76:b6:e6:0a:01:cd:14:32:b0:9d:
29:64:99:cc:8d:f1:18:71:04:e5:23:18:55:45:0a:00:43:6b:
0f:32:4e:78:df:bc:a1:3b:f0:64:6b:a4:1d:09:2e:73:24:ac:
ac:90:95:a5:ad:d3:c2:d6:fc:6e:00:47:d9:79:33:3c:23:48:
8e:1d:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:42:25 2025 by rpki-client