Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier: Jt+X4firVfxDj2f/T7QeKHXBtyNsvGoORwnIadtvwSg=
Subject key identifier: BF:56:D9:84:B4:74:59:BB:B2:15:B8:EC:0C:55:B8:40:4E:88:98:17
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 0199FC8F4AB8CBFB364C90D2770BF5B2BD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number: 1623
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: JFeh_aiDk1Wok6qKY5rdZc79lcM.roa (hash: IiPvuOe1hAgTKQ/1gSaTyCWI6qu/9T3lc3CvXjp3aSc=)
2: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (hash: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=)
3: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: +0AV978vP9xk99jCobLGMANc80dPFLTvzCP+ZJZSNqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4a:b8:cb:fb:36:4c:90:d2:77:0b:f5:b2:bd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=bf56d984b47459bbb215b8ec0c55b8404e889817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:46:c5:de:c8:70:71:8e:b9:f4:3d:6d:59:
22:62:d3:1d:9a:7a:b3:e9:97:15:56:e7:46:d6:4c:
30:03:60:b0:e2:33:83:0a:2a:c1:68:a1:2b:4d:65:
43:bc:e7:27:da:5e:45:80:cf:ca:89:96:d3:fb:a3:
dd:95:3a:0f:42:9c:85:26:ef:68:2b:a8:cd:0b:a7:
ed:67:9a:85:38:1b:7a:7d:a6:73:79:3e:a7:11:31:
d4:37:c5:fd:cc:14:29:22:d9:5e:58:8b:87:de:1d:
71:d2:4c:00:a2:6f:f5:df:aa:57:f9:ae:2b:00:16:
fd:9f:bc:a1:7e:97:30:c1:b8:c2:18:12:d2:69:c7:
db:d9:05:5a:87:a4:7f:63:b5:b3:f9:74:a7:94:8f:
f6:ee:76:03:18:5b:97:9a:d4:1b:07:89:98:2b:7f:
2a:69:93:41:b5:3a:c5:86:4d:bc:4b:b0:6a:20:98:
30:01:56:2e:a7:c6:9c:2b:b9:22:fd:7b:aa:8f:a4:
f1:a9:47:12:9c:b7:c4:da:18:b5:67:37:52:77:aa:
a4:ac:3b:f5:49:58:81:1f:3a:0a:0d:af:7f:7d:a0:
59:a5:63:b0:1e:65:de:83:58:ff:3c:b7:2b:b7:76:
3e:42:26:c5:20:3c:5d:97:21:61:04:e1:d2:8f:35:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:D9:84:B4:74:59:BB:B2:15:B8:EC:0C:55:B8:40:4E:88:98:17
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fd:9e:02:43:02:c7:0d:de:34:1a:ad:3a:12:65:af:ff:bd:
81:0d:34:8c:97:56:29:e9:8f:e5:d1:b9:b6:19:d6:31:8d:95:
b8:81:0a:4f:a2:54:7a:94:42:7c:23:42:1b:c2:b9:bc:f6:e7:
2f:f9:10:fb:e4:5e:22:fd:8d:e2:96:42:ab:58:26:6e:13:ec:
f6:9b:1f:bd:bd:37:fc:fa:3e:73:78:a5:f7:77:c0:99:bf:04:
53:a2:44:4a:16:e0:f5:42:30:76:a8:52:d3:6b:06:f4:88:0e:
c6:ae:ab:ed:be:d8:1c:3a:33:91:37:75:0e:6c:bc:aa:c3:eb:
20:4a:3a:d0:cf:07:e8:4c:58:08:78:fd:e4:22:9a:63:28:d4:
a5:15:9f:14:a0:bb:79:d8:4f:d0:f7:14:e6:43:25:ad:35:cb:
4a:b5:f5:00:e2:34:24:f5:1c:fc:30:eb:d7:e2:b1:7a:40:75:
7d:50:99:8a:4b:7d:ee:0b:e0:6e:70:4a:7a:4f:97:c5:38:7a:
f7:8d:eb:9e:20:88:df:47:61:29:15:a3:66:8e:aa:6d:c6:28:
70:89:47:22:89:33:e8:f8:2f:9d:ac:86:6e:98:38:d9:6a:04:
d6:c9:ae:5c:10:2c:ac:79:04:ac:38:60:4b:28:18:b8:7a:d2:
ce:80:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:10 2025 by rpki-client