Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: dpEQDUUiZ41JHBFPIlhi977jhNCQP2+Sl2rkBe9n1JU=
Subject key identifier: 5B:78:D9:7C:F3:E2:60:DD:E1:99:B6:11:0E:D0:0F:6A:15:34:C6:E0
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 019A0147979D69052BF87CFFF457627637A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 16F4
Signing time: Mon 20 Oct 2025 11:01:00 +0000
Manifest this update: Mon 20 Oct 2025 11:01:00 +0000
Manifest next update: Tue 21 Oct 2025 11:01:00 +0000
Files and hashes: 1: RUQaxYKvLWtplW7yHI6TR3XEkQE.roa (hash: XDQ+7CQl5GASmirk7HcC4w80DGZtYXJDshkFg3byREs=)
2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: wProhKKLasBvrjtvWf+x+XDY0FXnnlYEUNbqT3lsG5w=)
3: zFplkI-jekZ1WexKJkNCvR3gKDE.roa (hash: 1q8DoRCpAh+3qke5582Epuo/79FVU0mcOLaI7R/pGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:97:9d:69:05:2b:f8:7c:ff:f4:57:62:76:37:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Oct 20 11:01:00 2025 GMT
Not After : Oct 21 11:01:00 2025 GMT
Subject: CN=5b78d97cf3e260dde199b6110ed00f6a1534c6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:68:a9:a8:2b:9e:0e:ee:5c:07:d7:a5:d6:4a:
c0:61:fc:dd:2f:c4:75:7b:6a:47:50:1b:ba:d7:38:
d9:47:e0:8a:b7:c1:39:95:a5:7f:54:95:92:ab:6d:
a2:10:b7:9c:03:80:d7:2c:f2:03:f9:13:41:15:a7:
ed:d2:5f:cb:f0:bd:65:ac:25:94:76:a8:69:8a:d6:
62:87:12:2c:ad:b5:5f:ae:81:08:7e:7b:9c:65:d3:
81:8d:7e:93:00:77:e8:14:a0:dd:01:fc:46:9d:a2:
f4:1a:db:1a:1b:45:aa:59:83:ef:49:60:2c:09:ef:
1e:9f:5b:3d:d4:f8:c2:e7:14:5e:a9:82:77:ef:8b:
39:ab:a8:2d:9e:60:ee:99:03:26:e7:36:ac:f0:42:
ea:43:21:1c:2d:0c:ea:ce:b1:6f:58:d3:6d:ce:a9:
92:6a:11:46:1b:b1:ec:19:3c:01:f1:d4:b8:ee:46:
56:9b:f6:50:6c:51:e2:bd:53:8b:17:32:4f:19:50:
64:fc:7e:90:a0:70:b7:a5:20:ca:5a:bf:07:93:b2:
59:d5:eb:4d:7d:ba:c1:af:45:6e:a5:b9:da:09:d5:
53:35:97:f5:ca:bd:da:68:13:55:18:83:de:c5:38:
56:38:a9:b7:a3:b2:25:0f:a0:11:a4:58:a4:5d:40:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:D9:7C:F3:E2:60:DD:E1:99:B6:11:0E:D0:0F:6A:15:34:C6:E0
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4e:f6:84:92:34:fd:f7:0c:3a:aa:92:3c:9f:c6:f2:a3:de:
4e:fa:fd:c4:84:25:06:64:ca:23:b7:45:73:a0:f9:d6:c2:8e:
1c:fb:5f:45:d6:ed:72:0d:ce:34:28:38:bd:50:11:fe:f9:fe:
72:63:75:42:da:94:e6:20:17:54:a7:43:fc:e7:e3:1a:82:75:
40:12:ce:b2:61:03:64:2a:76:ab:93:86:b3:e0:89:54:0f:35:
3c:b9:f0:ab:85:45:9f:55:76:06:ec:c8:9c:1c:77:b6:ae:11:
c3:63:27:e7:5e:d0:4c:a6:ed:e8:cc:88:bb:ce:aa:a0:b4:0f:
7c:92:c0:29:e9:65:60:4a:f3:09:a1:ea:61:4a:0d:f9:30:f4:
57:c0:22:fb:31:16:3f:4c:c6:38:d3:a5:d2:64:b3:42:f6:1e:
03:04:10:c8:32:57:0b:19:0e:36:2c:07:00:55:ae:06:65:71:
ea:32:d3:90:fe:2f:9b:68:c6:c1:81:6a:2e:a0:50:30:1d:ae:
ca:a5:d9:cc:ef:f4:07:55:74:0b:c4:68:a5:72:ca:2b:ac:13:
28:34:08:53:7d:9d:72:fb:48:c2:0e:c4:d1:7e:87:d2:3f:5e:
92:c3:9b:0f:7f:94:1e:0a:d2:ac:a0:14:95:b6:15:c6:a5:22:
31:a6:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:58 2025 by rpki-client