Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
File: UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft (raw, json)
Hash identifier: nsFxARFMiVMdgCOUZ0G8AOCoCD6xDPSr7W4TNJx+CtI=
Subject key identifier: 97:66:89:27:AF:BC:91:0B:F1:B4:69:49:83:95:0A:DB:12:F6:EB:4E
Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
Certificate issuer: /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Certificate serial: 0199FFFE91FEB8FC0D24E1628781C1CD6380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
Manifest number: 0FBC
Signing time: Mon 20 Oct 2025 05:01:37 +0000
Manifest this update: Mon 20 Oct 2025 05:01:37 +0000
Manifest next update: Tue 21 Oct 2025 05:01:37 +0000
Files and hashes: 1: UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl (hash: eb82fBx3IUjK4RjYCdlIlwdfxLRuBPz3bfYLMoQzqPM=)
2: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (hash: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:91:fe:b8:fc:0d:24:e1:62:87:81:c1:cd:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Validity
Not Before: Oct 20 05:01:37 2025 GMT
Not After : Oct 21 05:01:37 2025 GMT
Subject: CN=97668927afbc910bf1b4694983950adb12f6eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:70:5b:01:f3:dd:6d:e3:35:41:10:09:d6:
75:da:24:76:df:c3:d5:d1:c6:e5:1a:c5:1a:42:19:
0c:88:21:8d:05:39:9d:75:39:48:ef:89:9c:93:85:
31:04:c6:69:a6:f4:1a:b0:b3:46:dc:b5:e3:ce:47:
11:2e:aa:28:0a:be:9d:d3:dc:d1:34:a1:7b:a7:41:
17:63:86:71:a6:c5:a7:aa:02:13:f2:cd:1a:f1:97:
18:52:7d:c4:dc:a0:17:c6:64:8c:35:b8:88:1b:53:
4a:e6:48:62:f5:50:d6:b4:58:b3:54:b4:78:11:2d:
a6:52:28:2b:84:5d:ab:ca:a8:53:ab:18:2e:e6:ac:
5c:0b:2c:93:b1:0e:8e:ef:64:92:e9:5a:84:08:15:
4e:db:51:ca:e7:8d:a2:43:e5:b2:50:ae:ba:63:ea:
48:88:3d:77:8f:cd:c2:56:e9:ce:dd:0b:03:a4:ac:
9c:36:95:a6:13:13:82:72:46:2c:92:68:6e:7b:12:
34:d6:d4:dc:7f:65:73:61:62:12:d9:82:23:90:7d:
8e:d3:dc:76:64:a7:4b:e3:a3:a7:1a:04:d9:fe:66:
28:1c:3f:21:d5:fc:cc:a2:8d:99:53:0d:c9:09:a5:
fb:a9:53:a3:35:5a:5f:67:2b:53:62:29:fd:47:46:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:89:27:AF:BC:91:0B:F1:B4:69:49:83:95:0A:DB:12:F6:EB:4E
X509v3 Authority Key Identifier:
keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:5c:ac:9e:08:1a:40:0f:7a:5b:76:b5:35:1e:2b:39:b9:b6:
46:ee:59:0f:de:6d:74:15:39:09:ff:2d:b5:c6:b4:27:5a:1f:
97:29:3d:cf:f6:2f:00:3e:37:f7:8e:a5:02:67:e9:21:35:4c:
d5:f8:2e:02:d7:91:4b:c5:d1:4c:6c:cd:f0:25:45:46:d5:38:
ed:0e:19:1c:cd:d0:1f:68:cf:78:3c:8c:98:5c:9e:cc:3a:82:
cb:68:0b:f1:cd:b2:a2:a5:d0:7b:ce:06:50:08:6a:97:1b:6a:
b9:31:00:38:77:2f:db:05:08:f7:7d:1d:7e:13:fc:79:8d:b0:
76:33:23:b6:c4:75:f8:fd:0d:fc:99:ba:ad:49:0d:f1:b8:15:
18:1b:d6:1f:f2:4d:14:fa:f9:29:21:88:ee:78:52:65:ef:4a:
e5:b4:8c:31:29:30:32:56:06:83:f0:85:89:a0:12:8e:06:94:
93:d8:df:b0:91:dc:d4:3f:4d:89:a0:2f:9f:ad:6d:c7:3d:1e:
a8:29:9c:89:eb:47:2f:d9:68:89:44:71:37:c6:35:bd:ab:81:
e6:8f:f3:49:92:b2:29:56:64:74:57:64:ac:d1:b7:bb:f0:d8:
01:a0:95:59:5c:6b:b1:67:f4:31:78:20:c7:97:f3:05:fb:5e:
94:35:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:39 2025 by rpki-client