
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: eHv3xbJBDJIGBlhlM53erFHxqEDwxoGa9Mbz5h5MAG0=
Subject key identifier: A2:58:65:24:4D:BC:9D:BD:F5:0C:41:15:16:95:FA:D1:C4:46:91:D8
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 0199FC21543DCCE7368AF782A6B1A0B7B7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 0618
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: O/srb3DQ6Wgp6zL1yHfqbYgrwmZkRSfkbkIrK8X+tE4=)
3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:54:3d:cc:e7:36:8a:f7:82:a6:b1:a0:b7:b7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=a25865244dbc9dbdf50c41151695fad1c44691d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:6e:cc:11:ce:0c:fa:24:ee:b3:6f:6b:66:
83:eb:6e:60:34:37:43:7e:7d:3a:b3:55:71:4b:38:
0c:f8:85:d2:ae:12:f6:72:2b:01:85:69:e8:95:12:
77:75:99:3f:6e:9c:69:84:03:9a:2a:63:56:58:3e:
87:0c:45:f1:d9:53:c7:28:48:fa:24:fe:40:ec:aa:
b8:2d:d0:73:cb:e4:f7:fc:3b:ce:71:62:01:35:d0:
82:ac:02:ee:32:1a:f3:ec:2f:51:08:a7:57:f0:5f:
56:65:d9:1d:df:5a:6b:21:b0:92:06:2c:6f:cf:6f:
aa:b5:e7:07:b1:b9:bf:27:a2:6f:ed:1e:5a:db:5e:
8c:3c:4f:93:12:c1:40:fe:82:43:f7:6c:8e:3d:63:
62:51:a6:3e:a4:3f:87:a4:8e:bd:f6:82:c9:6c:85:
52:29:bb:ca:e9:aa:26:11:44:08:90:f2:0c:e6:6f:
9e:83:0f:d6:1b:ce:dd:91:94:56:7f:01:69:41:93:
a0:40:a7:a3:f0:17:10:aa:1d:93:87:64:da:43:16:
b8:b0:5b:12:30:84:6b:d1:bf:eb:f7:fe:5b:b0:f2:
56:e7:83:51:6d:82:c0:ba:70:7c:2b:40:21:58:fa:
7f:b7:ce:f5:47:3f:ce:01:c6:b3:51:d3:82:01:10:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:65:24:4D:BC:9D:BD:F5:0C:41:15:16:95:FA:D1:C4:46:91:D8
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:13:f0:5d:69:30:6c:1a:0a:a6:70:dc:f4:99:af:d0:23:89:
0e:50:cb:53:45:63:60:fa:09:33:82:b5:ad:cb:86:e8:66:ce:
96:52:8c:e3:c5:98:81:04:cc:8c:28:b7:6b:06:6b:e4:e0:b8:
6f:1c:95:e8:3e:7d:04:2f:79:fc:10:34:79:9e:d7:74:24:2f:
d9:1a:18:b1:a7:81:a0:7d:38:5f:ee:e8:5a:76:31:5d:ae:35:
78:4a:46:f2:79:de:57:6d:28:42:af:d1:23:e9:25:fd:9a:d3:
a3:84:2d:e6:b8:69:47:3b:af:e9:fa:4b:12:4f:12:39:43:61:
3e:fb:23:64:d9:83:f6:b1:7a:0f:46:06:b3:7e:97:a3:a0:b8:
37:d6:e1:c7:b6:8a:ac:49:ef:bb:c3:71:1e:ab:cc:bb:38:a4:
91:22:32:b2:14:0c:84:bf:d7:d6:be:a3:14:ba:7c:b6:d2:3d:
bc:9b:8d:44:71:a4:3b:28:b0:86:bc:13:bd:e4:d4:1b:84:27:
9e:47:57:53:bf:6a:18:b7:be:85:53:fc:f6:e0:2e:2e:ae:3e:
f5:bd:2d:be:53:72:29:43:1c:04:8b:95:b0:1b:95:6d:68:3f:
56:90:84:f7:29:5b:a5:97:1f:ec:6f:bc:e2:9c:5c:84:e8:73:
85:4e:96:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:51 2025 by rpki-client