Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier: 5EiE8cOoPHP9JQkTHerL/TjkaBdIaQ5WKIAgtW6g5vA=
Subject key identifier: 7C:0C:7E:F1:84:8B:FC:C2:68:28:76:16:A5:EB:97:7A:02:AF:EF:DB
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 0199FDDA4991DD40E9987CDA84283D7AC813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: Q0boCgT/ozUmI2RwAEZVPVc3t9pSRbgzzXGvvopD9aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:49:91:dd:40:e9:98:7c:da:84:28:3d:7a:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=7c0c7ef1848bfcc268287616a5eb977a02afefdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:8f:14:b2:93:21:bc:91:e3:46:f5:2b:a5:
b2:5e:d6:90:78:27:9f:06:01:67:58:e2:78:53:4c:
e5:4f:a7:6d:b1:07:35:fe:5b:e7:f2:8e:21:40:c9:
3b:20:26:eb:4f:3f:ca:f4:39:e7:2c:a5:2b:35:7e:
96:44:26:4a:06:ac:be:b9:ac:93:5a:ee:9c:b7:32:
18:f6:39:e9:f2:fa:36:e1:ff:96:f4:ed:b6:60:41:
9d:69:79:54:9d:7d:18:79:73:5c:7a:5c:25:4e:61:
b8:b9:e4:06:34:ce:9e:98:28:35:29:1e:a5:42:8b:
51:0b:f4:65:f0:af:ec:b2:50:e4:65:88:e0:70:42:
45:0c:2a:4e:0d:32:3f:db:c8:80:40:44:b8:68:63:
5f:89:cc:f8:1c:35:d4:a2:b8:c6:07:38:f5:e4:44:
3b:80:6a:1c:bb:70:fc:e5:d9:1c:af:08:7d:1a:4f:
80:46:30:99:e5:c5:f1:d5:ca:e1:a0:3a:8f:67:58:
22:e5:75:be:9d:20:3d:c5:f4:f8:0b:79:c5:ef:dc:
a4:6e:2f:33:91:04:d3:26:49:c7:90:f8:c0:79:83:
75:fc:5c:df:5c:f8:48:80:1d:ee:10:bc:43:47:09:
7c:d2:66:8e:fd:0f:4e:9f:cc:ae:55:c3:64:2f:95:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0C:7E:F1:84:8B:FC:C2:68:28:76:16:A5:EB:97:7A:02:AF:EF:DB
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:18:cf:b8:1f:a8:99:f5:c2:21:8d:f5:ab:17:f4:00:20:7c:
1d:dd:14:88:c4:be:d9:5d:d6:bc:6a:6c:e8:97:13:d6:fb:3e:
1a:f2:d2:b2:9b:c2:fd:02:d5:01:da:35:43:43:82:9e:19:0d:
5a:53:aa:ca:5d:ba:8b:e8:6e:d9:aa:5e:67:f7:34:3f:0a:2c:
28:9d:eb:8a:ed:0f:eb:21:32:d0:23:b3:04:d7:89:57:3b:a0:
27:60:5d:04:2c:23:5b:bb:ba:cf:67:de:87:1d:64:44:21:86:
3d:54:b2:c8:ef:6b:8c:81:b1:5f:79:41:df:b4:c1:73:83:9b:
0b:45:fb:97:c4:94:31:ad:fb:b3:f4:36:03:c5:ff:24:6c:b4:
0c:39:7e:96:91:ff:fc:74:13:6f:bf:5d:f7:37:46:d0:c0:02:
f9:b5:a7:23:f0:bb:95:d6:6a:cf:a4:8e:bc:a5:af:90:b0:c3:
7f:4f:bf:28:1c:9c:04:bf:15:37:c6:4a:b1:7f:45:33:c5:13:
a3:d1:e4:f9:76:00:76:6a:20:46:4b:4f:5c:09:5a:0e:ed:e1:
fe:fd:02:e2:08:ae:9b:92:48:08:6e:70:4b:25:e0:fe:a0:b3:
7e:81:60:6a:5c:ef:68:89:ed:93:c3:65:ea:31:36:a4:b1:6a:
47:03:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:30 2025 by rpki-client