Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier: L90vDKVc1P9i8FqqL30VVPuxKN0pRYBIzTL9AzYTaFA=
Subject key identifier: 6C:39:D5:06:95:43:1D:02:A3:09:6C:0F:46:15:47:85:82:15:E8:C2
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial: 0199FC8F6826895930864C743EA86D8D4DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: VSDJREKcAc+Y3hjN1NmS+qgLcrgwHzG7MhnZ+0Ei0uQ=)
2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:68:26:89:59:30:86:4c:74:3e:a8:6d:8d:4d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=6c39d50695431d02a3096c0f461547858215e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:3c:0b:ab:6c:9b:21:c9:bd:03:ad:c2:81:
9e:a0:53:3f:d8:12:2b:f9:a1:aa:48:83:22:b4:89:
49:5b:ec:41:4d:30:70:e7:2c:65:d3:f1:76:8d:8b:
e9:e1:4e:55:7c:29:d7:b7:b3:fc:ff:a7:a2:40:69:
44:79:a8:25:e2:a7:a3:3a:a8:77:c0:f2:5e:fc:78:
f6:fd:c8:c3:60:14:e9:8f:ae:9a:28:67:1d:c2:50:
27:2e:3c:c2:52:4b:3f:a2:9f:98:b9:02:70:73:ba:
d4:12:6c:5c:26:72:dd:d1:07:dc:65:45:7d:1d:58:
cc:3f:21:36:a1:79:5c:7d:25:7a:07:47:f2:63:4a:
21:56:77:3d:a9:07:f8:b6:5e:b5:9d:1e:a1:58:36:
98:f8:ff:74:58:99:9a:13:36:58:9f:84:7a:2b:b5:
c6:8e:ab:ed:4c:ef:01:2f:4f:b7:43:b1:bb:07:24:
d7:5a:3f:3c:88:86:bc:e5:b3:a0:2a:43:73:ca:8f:
34:38:6f:ea:de:e7:1d:6d:c5:7d:11:30:68:d8:8c:
c0:cc:13:02:d1:41:35:50:1f:ee:da:3a:2f:3d:81:
c8:b8:8f:33:81:2b:11:bb:5e:0a:92:1c:ba:ab:3e:
79:95:d5:7e:a6:1b:74:09:b8:5e:7a:6a:51:9e:26:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:39:D5:06:95:43:1D:02:A3:09:6C:0F:46:15:47:85:82:15:E8:C2
X509v3 Authority Key Identifier:
keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ab:27:c3:dd:6d:ae:e3:b0:47:bd:b3:6d:87:11:93:75:f5:
ff:7f:2b:2e:2a:8a:0d:4d:d9:9e:e5:2a:51:c6:38:d6:29:93:
bc:5a:30:0f:ca:05:70:2a:93:f4:e7:ca:aa:02:be:df:e8:fb:
c1:10:68:15:77:44:92:fa:52:4f:c4:bb:09:06:27:4b:23:29:
13:56:f8:af:c7:5e:3b:a8:2b:07:30:85:1c:a3:93:e2:7d:58:
dc:a7:86:6f:6c:35:80:32:36:99:fb:ec:40:7a:36:61:2f:07:
98:87:a3:86:6f:98:2f:0c:bd:6d:35:fb:54:ae:ca:0b:45:a0:
9d:c3:67:79:37:bf:35:da:a4:47:f0:44:af:41:6d:1a:94:f9:
15:e0:78:77:11:f5:3e:e0:34:59:28:d4:8c:f6:f4:29:48:99:
e5:16:ba:b8:de:b6:9d:bf:96:ad:a9:24:7f:10:12:ba:80:57:
46:87:af:63:71:57:c9:d9:a1:61:65:1b:dc:b9:3a:88:54:37:
fe:15:ee:f3:24:93:c0:ad:27:21:75:d3:df:c1:7f:89:64:15:
cf:0a:5b:be:58:b5:e0:64:9b:d5:0f:76:c1:8e:48:55:98:7a:
3d:13:be:62:79:33:14:08:40:ad:aa:ee:85:88:2c:35:19:53:
b1:77:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:24 2025 by rpki-client