Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
File: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json)
Hash identifier: /ZRwrxZ93d1Zgkrxz7iCpOUqbvDgRta5bPegwgsFWXg=
Subject key identifier: 2E:88:6D:B6:22:B1:64:2D:FF:5B:CC:2C:39:F3:93:ED:BC:07:AB:0D
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial: 019A02909A2B5B239FD190B5B7DC08F652A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 17:00:22 +0000
Manifest this update: Mon 20 Oct 2025 17:00:22 +0000
Manifest next update: Tue 21 Oct 2025 17:00:22 +0000
Files and hashes: 1: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: 4jwmCqKYWaxTxz1Y2iXut7JkENU9100kB1z+Vf8a75U=)
2: XntGa_7-ppXotUDBoZrK1B3W5Z0.roa (hash: 24HGkZzWTnK/S3EwJ7veoxpuQnRxskzxwtNYQjYX8aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:9a:2b:5b:23:9f:d1:90:b5:b7:dc:08:f6:52:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Validity
Not Before: Oct 20 17:00:22 2025 GMT
Not After : Oct 21 17:00:22 2025 GMT
Subject: CN=2e886db622b1642dff5bcc2c39f393edbc07ab0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:ee:c6:ef:e2:3a:47:f7:d5:62:69:ef:39:
75:ce:bf:36:1c:f1:6a:55:87:4c:e4:f7:f5:5d:78:
bc:50:5a:37:f6:9e:82:a9:a1:3f:4d:db:35:29:96:
9a:ac:2a:21:36:4c:36:9d:ce:0c:69:4f:3f:a3:bb:
a0:de:59:7a:9b:03:8f:12:77:c5:e9:3a:7c:f5:d4:
2b:d1:99:7f:59:bc:af:30:ba:f1:c3:e8:0e:00:2a:
38:ae:c8:bc:ae:bd:06:9d:be:40:7e:42:e1:00:78:
64:b1:bf:36:fe:e0:43:5f:cd:3f:66:00:96:f2:8c:
5a:be:a7:d8:a0:3e:b9:60:d5:34:9a:01:c7:99:b6:
33:22:68:a0:01:82:e2:5f:d9:78:8a:3d:7b:9e:cf:
12:31:b6:b7:8f:b0:94:80:bc:4d:ae:d3:0f:48:7f:
d3:c9:1d:4c:c5:74:fe:60:de:a2:03:9f:70:f0:04:
67:3c:03:08:60:63:59:a9:20:2c:1b:31:6d:4b:35:
09:43:0b:2a:f9:b3:e5:ef:b0:d2:53:b0:10:9b:89:
b0:a9:bd:f8:66:c5:fe:4f:d0:08:a3:8d:15:72:17:
b7:8a:89:81:25:aa:07:ee:8a:9d:8a:de:7b:4f:71:
46:e5:e6:e3:1a:eb:06:03:79:c7:6d:02:88:dd:53:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:6D:B6:22:B1:64:2D:FF:5B:CC:2C:39:F3:93:ED:BC:07:AB:0D
X509v3 Authority Key Identifier:
keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d6:ff:e6:a6:66:8b:75:89:c3:e5:4b:46:0b:1c:c6:04:9b:
58:e5:a6:48:36:0f:1d:0a:ec:00:d6:e8:c4:26:07:6a:2d:95:
68:80:9c:9d:7a:61:1e:db:d4:77:fa:72:a9:f7:fd:cb:5c:fb:
a4:7b:39:73:46:84:28:51:35:81:6e:28:98:39:fe:d4:30:83:
13:e7:0b:f4:cf:05:a8:a2:8d:6b:5e:48:96:49:eb:c6:0f:ab:
d0:54:ae:88:77:4d:d7:1b:1c:2d:0f:69:7b:99:65:a8:43:fe:
00:f0:12:8e:9a:e3:55:bb:9f:10:a9:1b:19:ee:cd:f9:71:b8:
d6:96:56:43:25:be:da:05:b2:24:3e:30:33:c6:44:be:1f:fb:
40:1e:c6:2e:8f:a5:01:53:49:00:45:66:62:98:68:45:15:39:
7f:99:d9:3c:96:92:8a:ca:45:fa:80:a4:3f:e4:83:3e:cc:38:
21:f1:0b:59:ab:05:af:0a:7d:1c:1e:62:6f:eb:9f:b4:68:6c:
8d:56:a1:c2:6b:19:1f:85:60:45:57:b8:81:6d:cf:62:f1:d8:
08:ce:da:ec:6e:8d:e1:60:12:f5:e3:d1:01:d9:29:37:34:d8:
04:8c:69:5c:83:bd:a8:bb:a5:69:b2:37:37:fd:6a:06:0b:b5:
76:c4:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:09 2025 by rpki-client