Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: +pdq6pmSrhvtglXyJRD1W6uWxttirJ4r8qOX9kh6+Ho=
Subject key identifier: C5:7F:C9:CB:81:95:63:58:01:A3:7B:F5:24:36:9A:59:48:45:41:EE
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 0199FCFD8535C564F32CA99B9E3FE6DB576B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: IHXF6RPgRdMXxlI6LuNplU6MYHVFNxik7T2APiYFMAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:85:35:c5:64:f3:2c:a9:9b:9e:3f:e6:db:57:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=c57fc9cb8195635801a37bf524369a59484541ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:53:30:06:a2:b2:61:6b:9e:63:c3:4e:bd:
74:e9:37:63:1e:20:8a:e5:d4:71:d1:17:49:68:78:
ab:5e:38:e5:d5:e6:4f:f9:f5:a9:71:ef:2d:2d:24:
fa:c7:f7:4f:6c:91:45:5f:ac:73:dd:6e:05:62:1f:
b5:c5:8a:5b:42:6f:16:85:4b:c8:4f:8a:2c:97:ca:
a1:33:de:09:fb:c6:cb:b2:79:b6:cb:31:b2:58:b5:
ad:ab:61:27:41:a3:63:0f:55:5f:a2:50:9c:2f:f4:
71:35:b1:f4:01:7b:f0:b4:06:74:aa:37:a5:51:0d:
e8:73:c1:fd:33:77:cb:65:bc:c7:96:88:fa:8c:58:
7a:26:1e:43:88:58:d9:e0:23:4a:f2:0e:3e:80:c3:
29:82:56:af:59:07:54:ec:ce:73:55:28:fc:79:5b:
4c:45:75:62:d6:29:9f:64:0c:58:16:e1:66:72:4c:
9e:32:53:29:ee:10:88:ce:34:92:d6:54:d5:9d:58:
cd:a5:67:6c:69:9b:ee:7c:be:f1:e4:51:c5:47:b8:
ab:f6:c5:c2:c7:90:c8:ac:16:d9:7d:71:3b:0b:3d:
ec:4d:b0:f6:c0:51:bb:e0:41:20:95:f8:22:1c:e7:
73:68:22:39:63:63:90:35:b7:dd:06:3f:4b:bb:c7:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:C9:CB:81:95:63:58:01:A3:7B:F5:24:36:9A:59:48:45:41:EE
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:de:1c:f8:02:b8:30:b0:f1:37:22:42:d2:1a:56:df:be:df:
d3:92:52:89:cb:00:92:f0:1c:3b:f7:1e:97:40:b6:01:a3:79:
cc:9b:9e:71:a2:94:e5:21:0f:94:79:81:fd:2c:1f:03:7b:34:
c5:4e:03:41:b7:3a:80:ef:1e:ec:97:41:9e:73:c7:23:b8:3a:
a2:a2:b5:99:d9:77:1f:5b:db:fd:c6:c7:e1:9d:8a:e1:41:24:
fd:83:ee:44:e6:16:2b:c4:47:a8:0c:b0:2b:a7:3e:99:86:50:
7f:c9:b8:b1:03:10:3b:86:f2:c8:11:ec:5c:57:5f:b1:0e:8d:
a3:63:40:09:05:74:3e:63:3e:15:47:b5:14:e5:18:5c:9c:bc:
85:fd:61:5c:79:67:80:a4:f0:9c:53:b9:19:5e:13:59:9a:dd:
a3:f0:6a:6e:2f:9b:fe:c0:a5:62:7b:a8:32:6e:03:e8:bf:26:
b7:a9:05:11:14:f2:b9:31:3b:38:21:ba:a5:59:e2:5f:ed:6b:
f0:b7:70:6a:b1:1b:ff:31:ea:c5:1f:97:87:8d:5c:43:70:a0:
5c:cd:cd:37:3f:d3:2c:d2:80:2d:91:26:ce:f9:f8:11:d7:cc:
c9:2c:21:38:51:9d:03:84:62:81:5f:0f:64:b1:da:58:63:d9:
76:58:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:22 2025 by rpki-client