Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: 1YEyhtIGvu8p+1CnxG33YSZW16Tm1OY/hI/P16/8wCQ=
Subject key identifier: CC:2F:8D:F9:6D:FD:E3:6B:C3:FC:C6:39:D4:80:1E:67:99:D7:42:36
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 0199FC8F310D0EF043DF53F2A171D858D438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 1634
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: pV9QoIh/zY7pzlcfL767pRxeML6+oNLVsN4GxMdntpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:31:0d:0e:f0:43:df:53:f2:a1:71:d8:58:d4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=cc2f8df96dfde36bc3fcc639d4801e6799d74236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:4e:ee:90:30:58:1e:c5:2c:88:55:6a:aa:
ab:6a:52:b2:3d:12:b8:50:91:2d:58:89:ef:44:d2:
7f:93:66:14:05:c0:b1:12:5c:d2:fc:24:e2:ef:fa:
a8:ee:96:74:23:dc:d8:91:9f:db:d6:85:42:e8:1d:
28:b0:e6:89:1b:75:01:19:4c:59:2f:67:01:e6:0a:
98:50:4c:75:50:b8:5c:62:4b:e4:2a:67:84:e6:c2:
ff:46:e1:dd:f4:e2:a2:eb:8f:58:83:e7:69:67:2e:
b6:9c:1a:3d:ff:72:27:ae:cc:a6:f7:ce:19:97:d9:
e0:bd:9c:b9:97:c5:1d:9d:29:04:38:f0:19:05:6c:
5d:7f:7e:cf:e1:77:c4:c9:30:82:19:7a:1c:07:0b:
74:1c:59:88:42:e8:88:08:b5:de:fd:60:6e:f2:b4:
ac:d8:1f:e8:66:f9:0e:c3:6f:ff:5c:56:c6:88:da:
76:58:fd:c7:ec:e1:1e:69:43:ab:ea:96:91:7e:bb:
56:67:f6:42:59:6c:85:ef:e2:af:cd:69:d5:c5:5e:
06:de:1a:79:af:03:d6:26:16:02:d1:2c:d7:3e:49:
43:f6:10:31:cc:d6:f6:aa:7c:7d:f0:ec:94:9e:4b:
92:55:5f:a7:f3:b0:06:f4:67:ae:d8:20:0d:b9:f5:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:8D:F9:6D:FD:E3:6B:C3:FC:C6:39:D4:80:1E:67:99:D7:42:36
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e8:76:99:9b:5e:de:c3:5b:3c:9c:84:8b:48:40:4d:22:96:
09:24:5f:a6:49:65:eb:3e:95:36:38:10:43:10:70:b2:cb:f4:
b4:0d:a8:f6:5d:e5:d7:d9:12:ac:8a:bb:c7:9f:ab:b9:9a:69:
80:90:96:76:0d:77:a3:7b:9f:35:f3:c7:69:12:52:aa:03:2f:
e7:ed:e5:b1:b0:dd:ae:0c:7e:68:2f:f3:5b:f9:73:ed:ab:97:
b6:2b:5b:15:75:2a:bd:a2:d6:01:fb:4c:3b:e5:8c:c1:d3:7b:
29:c7:7d:e1:88:ed:82:28:51:ea:7d:e9:b0:d0:51:85:a5:ad:
cc:f1:db:1e:22:b1:18:62:c0:15:02:d0:2f:c6:f4:3f:f4:ca:
35:9e:4e:96:31:5c:54:f8:f4:c9:c6:2a:56:a9:19:38:c9:2e:
7f:d8:4a:06:c3:9a:87:55:ac:3e:a5:eb:05:85:b3:a0:20:e1:
8b:ac:6d:b2:3d:47:25:8d:1a:f2:b8:6e:0c:9d:22:59:cf:cd:
d7:4d:c8:7e:95:5e:37:db:db:ff:ed:ba:fa:65:f0:3b:66:c6:
eb:92:d8:00:30:74:ff:4c:9c:bd:9d:6e:83:ce:80:92:27:0e:
cd:9d:ee:0d:b3:c5:a3:08:4f:5f:6d:4b:2f:db:4b:4e:33:66:
98:6a:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:51 2025 by rpki-client