Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: 6BgxSrj7YCaxYFg0uLQVPWgsK9BLDXEA+fhEZBLkWHo=
Subject key identifier: 47:9F:2C:62:65:CB:9B:C4:49:D2:B4:FB:5E:54:67:45:C1:3F:D8:47
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 0199FF22BCA2D1407BC60443587E36CE4057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 0502
Signing time: Mon 20 Oct 2025 01:01:30 +0000
Manifest this update: Mon 20 Oct 2025 01:01:30 +0000
Manifest next update: Tue 21 Oct 2025 01:01:30 +0000
Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=)
2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: lePDeX2eZL/+8LCNpeQlV4Yp1BjiJoYb7ByiGc7vX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:bc:a2:d1:40:7b:c6:04:43:58:7e:36:ce:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Oct 20 01:01:30 2025 GMT
Not After : Oct 21 01:01:30 2025 GMT
Subject: CN=479f2c6265cb9bc449d2b4fb5e546745c13fd847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:b9:15:96:67:c4:f2:b9:bb:74:6c:4e:c9:
a9:2b:f1:e0:23:d3:b4:ac:b8:93:de:6f:6d:4e:5d:
8c:94:ef:ce:4d:03:7f:9d:37:68:27:12:58:ab:69:
46:a8:24:e7:2c:6a:a7:35:23:84:5d:54:15:59:52:
17:19:98:55:d5:10:c6:d4:7e:f3:64:83:00:1c:cc:
e3:09:f6:df:77:84:49:7e:4b:02:4e:65:f9:a0:65:
31:19:a7:a5:0d:5b:a0:e9:60:5d:5f:8b:cc:bc:f0:
74:7f:f8:df:5e:f4:36:fa:ab:d1:16:39:65:58:a5:
cf:68:3f:cf:1c:12:84:be:60:b6:7b:a9:65:49:40:
98:f6:3b:a7:10:28:7b:aa:e1:12:44:5d:06:ef:41:
4b:55:03:78:20:92:f3:27:8e:68:6a:49:ea:f4:52:
aa:65:71:f6:e9:27:24:38:c0:37:13:1c:4b:43:e2:
7c:8a:48:19:7e:28:fe:d7:97:b4:d4:b7:fc:05:36:
4c:bb:db:71:66:bc:8b:68:92:77:a9:71:ad:72:e4:
b9:cd:93:21:2d:c6:51:cf:cf:2e:e5:2b:51:0e:48:
be:65:60:c7:4b:32:0c:47:f1:4b:b9:e4:0d:c5:ee:
e4:e3:0f:e8:e9:bc:67:cc:c1:1d:8a:3e:cc:97:99:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:2C:62:65:CB:9B:C4:49:D2:B4:FB:5E:54:67:45:C1:3F:D8:47
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dc:de:c0:c0:8f:3d:32:20:db:16:a4:de:b1:ba:76:ee:24:
0c:9a:f6:0b:ef:17:4e:df:c9:00:67:64:73:0f:ac:96:24:57:
2f:1c:25:36:77:c2:90:60:bf:8e:dd:6e:e8:0b:b1:99:be:6c:
4f:53:22:f1:af:c6:4a:ae:fe:25:3d:32:8e:0f:14:99:2f:18:
d2:6e:d0:6d:c9:80:8d:d3:e1:e4:24:8c:6b:57:4a:37:b7:7a:
c3:6f:64:2d:43:73:cf:d3:ea:71:56:06:a3:3c:54:16:57:34:
8f:3c:b4:70:61:1d:ec:14:d8:c6:be:75:0a:00:1a:7d:3f:c8:
e0:73:3e:27:7f:0c:c6:d9:08:c6:6c:a7:f6:dd:17:2f:d6:05:
d2:2b:16:2e:6f:64:33:a2:0c:e6:bb:ba:e1:ef:81:48:08:a0:
02:97:bc:6f:7e:1f:2d:d0:26:c9:f7:b9:f1:19:df:52:fa:76:
67:2e:51:5d:4a:66:cd:39:a9:8e:65:61:1a:a8:32:7d:ca:ef:
07:9d:cb:24:33:82:ef:36:60:0e:2b:37:d3:b2:ec:1a:ab:84:
eb:a3:98:26:8a:62:2c:58:d1:0f:d5:9a:dd:c0:be:cb:84:81:
03:40:ca:d6:60:e7:ba:cc:0e:3a:35:34:6d:38:bc:4d:fa:34:
d1:cc:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:00 2025 by rpki-client