Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier: H4J42CC5zFy+R1aXAY3Oound1Akv+MUKQs9en0CMGBw=
Subject key identifier: FC:AA:9A:B8:41:05:57:F8:0C:58:05:97:49:F9:12:81:93:C8:38:47
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 0199FD33FD68706E5DE90883E37B46447A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: SV+38GhKug+G+xAVamFVwiPFlzBP9Ftcy/a3YA1tiWI=)
2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fd:68:70:6e:5d:e9:08:83:e3:7b:46:44:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=fcaa9ab8410557f80c58059749f9128193c83847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:78:fc:82:e1:53:e1:9c:49:8f:7f:f9:f7:
67:7a:88:7b:ac:94:2c:ab:5d:df:16:c3:8b:a6:79:
2d:76:61:7c:71:6c:56:6a:e9:f9:5e:59:b7:a8:39:
6f:99:68:a1:68:a3:22:91:c9:39:9b:d3:bf:03:68:
98:d5:24:0c:03:b8:3a:6c:de:c8:fc:ab:93:68:e3:
ad:63:dd:f9:7b:32:2a:4e:73:ff:cd:f6:bb:f3:95:
9e:ce:47:33:df:98:cf:c6:f9:ae:07:f6:81:e0:49:
18:34:ed:38:e3:e4:27:e3:72:92:43:86:6f:a7:d0:
73:c3:48:3b:4f:ff:bd:b5:43:b5:b2:bc:6a:2c:2e:
3a:fc:f0:1f:df:ec:12:e6:41:08:8a:e5:d3:93:bb:
6a:9e:94:8a:52:79:c8:76:15:98:6b:28:20:34:eb:
b7:8a:44:07:d7:96:18:af:b9:2f:d0:4f:f6:ae:0c:
98:57:d9:d4:93:33:e7:c9:61:ed:a3:0c:0e:61:09:
1f:86:9c:f4:93:79:48:27:fb:50:02:c3:06:8b:45:
d9:5e:f7:67:e4:5d:6b:ec:d4:ae:cb:1c:ad:b7:7f:
02:78:e5:ce:54:00:de:7c:6d:d1:d9:4a:45:44:99:
8c:82:32:6b:4e:92:6e:aa:f7:9c:d2:1b:75:3d:a2:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AA:9A:B8:41:05:57:F8:0C:58:05:97:49:F9:12:81:93:C8:38:47
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:83:72:a0:8b:01:2d:f0:dc:a6:3b:61:cc:55:e0:fa:9a:83:
0a:12:52:d9:79:82:31:ad:a0:9f:4a:17:0c:6d:2f:5f:bb:6e:
00:15:f9:5d:dd:0e:af:b8:5d:d9:67:b2:da:34:b1:5e:bd:63:
72:49:71:d0:91:13:c6:1c:d6:0b:86:3f:9f:ce:f8:18:7c:16:
cc:ee:65:d5:25:70:55:c1:ba:c8:e7:be:25:63:8d:d8:d7:66:
49:8f:67:dd:84:39:cf:69:3c:22:43:07:fb:2a:1f:9e:71:66:
f7:63:81:c3:8b:44:3a:fe:f8:a7:94:05:c4:ff:4a:41:28:02:
32:60:d3:3a:50:54:63:82:94:a1:ef:d1:70:c7:87:ce:c2:d1:
40:87:14:4b:f7:b9:13:f0:fb:fe:f3:fb:2b:a2:a6:5d:cb:c1:
90:76:3b:1e:56:d8:84:86:bd:db:54:bf:d0:df:c2:dd:2a:e5:
9e:f7:25:97:47:15:9d:73:83:a1:89:64:2f:58:1a:eb:59:fe:
59:03:b0:b4:c9:13:e6:37:c7:26:1e:e5:3e:ca:1d:91:e7:44:
92:7d:c1:7a:e6:fc:a2:d7:f2:ca:6a:0b:f3:08:96:6a:b3:7b:
d5:5b:91:04:da:6b:4d:23:3b:d6:47:77:b5:98:92:56:67:07:
eb:0a:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:58 2025 by rpki-client