Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: Ch2IOlYGkrVciOH2Yak8rgrH56Dzsu+62AZEIqZoUcs=
Subject key identifier: A2:F7:3F:ED:19:26:7A:D2:57:4E:AD:22:12:3C:4A:CA:5D:FB:15:FC
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 0199FB7CE8A77E2950CD8D6BFC7E57101DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 069B
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: YeWla0k8RJsKgxwpYqEHfQ2DAlObrdRQGB9rjBfRIwE=)
2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e8:a7:7e:29:50:cd:8d:6b:fc:7e:57:10:1d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=a2f73fed19267ad2574ead22123c4aca5dfb15fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:0d:02:18:f3:0d:d5:7f:36:3d:8d:a1:9d:
4b:d8:d3:26:57:50:f0:cf:7a:3f:e7:89:47:73:37:
ec:c1:cf:f4:2b:f6:ea:56:71:22:83:de:64:5a:47:
75:7e:43:3e:98:76:93:d2:f8:3b:79:8d:44:4c:e1:
10:0b:72:c6:cc:dd:bd:31:47:9f:0d:dc:51:a9:3a:
0f:3e:bc:22:5c:08:50:1e:19:b1:d3:b0:d1:3c:79:
bf:4d:9d:5f:b2:0f:19:85:27:b8:34:54:93:dd:f9:
fc:2f:17:75:95:3b:33:b0:a1:9f:e9:e1:99:4c:ea:
fb:52:15:72:ab:5b:41:b9:db:69:ff:9c:b2:2e:15:
7c:d3:1b:7b:0f:6f:51:09:91:0a:a6:83:07:3f:3b:
d8:57:a5:19:b4:0e:3e:92:ed:04:7d:7f:4f:8e:63:
18:64:c0:0f:b3:74:a1:58:45:0e:a6:80:23:8c:43:
56:ec:f4:5f:e3:2a:fe:a3:1e:8e:b2:c8:c6:55:3c:
05:ac:9a:e9:e9:d5:17:79:41:b3:3a:46:27:39:d3:
35:36:34:13:81:4f:9b:99:e4:1a:c0:2b:56:1b:8f:
55:08:63:92:9e:dd:7e:92:5e:5b:5a:69:52:ee:5f:
bb:91:71:2d:ed:84:21:eb:3b:f0:c6:64:e8:c2:48:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F7:3F:ED:19:26:7A:D2:57:4E:AD:22:12:3C:4A:CA:5D:FB:15:FC
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fa:b4:0b:f4:a2:ce:f3:a5:ef:77:0c:46:21:1a:44:d5:77:
35:42:f8:f3:be:88:19:27:f1:88:23:97:d5:21:ae:08:c5:b8:
82:de:d9:26:e8:10:8b:12:e7:a8:93:2e:9b:83:e1:33:e2:d6:
d7:c5:c9:a6:2a:4d:18:1b:a5:4b:04:05:5d:89:63:93:fb:cb:
e9:29:72:6f:18:48:ab:d4:29:46:31:87:c8:6b:d2:6c:5a:8b:
67:77:ee:f0:78:48:a1:1b:f8:35:02:e2:2f:b7:a2:17:3d:39:
fe:89:60:c1:76:c5:85:a7:69:24:93:0e:cf:f8:b1:d4:45:7f:
6d:bd:df:62:08:af:57:6d:49:08:27:53:1c:7f:4c:cf:88:88:
af:6e:a3:19:30:e4:60:0e:61:88:85:e1:11:f7:bc:59:5f:34:
d1:1b:7d:b3:a7:39:31:aa:61:0e:d4:30:c5:d0:7a:b7:f4:3c:
0d:a9:b9:57:63:c4:48:36:a5:ac:6c:57:3a:5c:bd:3e:15:43:
71:ce:05:0d:62:8d:a3:0e:56:ca:b7:a1:d1:bb:f7:6d:dd:54:
7f:26:8a:6b:ea:94:51:f0:0d:2f:f5:8d:27:02:31:28:8c:e9:
4e:96:95:71:51:31:b3:b2:bc:34:23:f6:71:ae:ab:98:4b:3f:
72:93:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:27 2025 by rpki-client