Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: zsaqhq5kFeZgSevDCKfFWhumKvoDlThyLC917uFlDAE=
Subject key identifier: 27:D7:4C:95:9E:0B:19:6D:CA:54:DB:3E:F0:C2:EA:97:6F:C0:0A:78
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 0199FDDA0C85731923C0595F0A51B9C03C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 13E0
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: 76DbzuZNsq13pasS2/7aizB01KAGroC+oVccq6Shk5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0c:85:73:19:23:c0:59:5f:0a:51:b9:c0:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=27d74c959e0b196dca54db3ef0c2ea976fc00a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:3b:69:c2:38:c7:69:b1:cf:05:0e:7d:5a:
8a:e4:d4:56:a5:48:a6:6c:dd:dd:a2:f9:5a:94:fd:
24:aa:04:ba:2d:07:bc:3b:5d:3b:8e:b7:69:2e:b1:
8d:21:f5:c3:ad:02:a8:8e:ac:3d:16:ff:0f:e7:fd:
b2:52:e5:38:92:f8:b7:77:6e:1c:a5:f3:1b:86:44:
94:27:61:38:55:94:8a:51:38:2d:ec:8d:f7:f0:d4:
9f:5d:cb:89:7b:22:49:81:7d:02:62:44:de:44:e5:
ce:b7:df:e3:6f:10:0a:f1:cc:15:6c:e0:45:49:cb:
f0:3e:79:8e:0f:19:50:4b:0b:cb:c7:4a:69:28:78:
ec:96:d7:f5:c2:79:67:57:6e:2d:a2:8b:76:a4:e6:
5b:b3:ac:fd:5f:15:1f:8e:6b:60:1b:22:7c:00:a4:
ff:45:11:2e:8d:d9:dd:c0:67:5e:55:9c:98:51:18:
b3:8e:2c:13:4c:64:0a:86:ed:19:79:04:45:68:d8:
fe:ca:6d:5e:f3:b0:83:d0:55:6c:5b:cb:95:c4:bb:
8f:6a:0c:6d:e7:8d:00:d3:34:e6:84:24:7e:ad:99:
b6:5e:55:5c:6a:51:66:d9:86:50:ed:a6:43:8d:70:
7e:ab:3d:03:17:69:65:ab:02:4e:5d:0c:1d:d2:8b:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:4C:95:9E:0B:19:6D:CA:54:DB:3E:F0:C2:EA:97:6F:C0:0A:78
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:08:86:da:6e:5c:e9:a5:d8:a6:7e:13:15:3a:86:85:44:
03:96:95:dd:bb:50:79:b5:f6:c9:a8:9a:0e:5a:81:9b:db:2b:
d9:61:14:8f:48:b3:c4:dd:8c:32:d2:a6:e9:8b:2e:71:10:10:
9f:6f:e1:3b:ef:68:09:03:39:ad:c1:7e:03:4a:45:2a:bb:b2:
89:1b:5a:26:88:7b:a5:0b:7b:62:d8:71:28:a7:5c:0e:26:6f:
fb:65:e5:c2:31:0f:4c:61:ac:55:e8:81:d9:50:86:38:e8:59:
85:4d:4c:e0:93:e2:5a:ce:aa:ef:4d:51:db:35:97:0e:fc:3b:
51:4a:a4:07:3f:2c:c6:52:12:6a:aa:97:1d:4c:86:b1:2d:04:
1c:9c:27:e8:7e:70:84:e4:87:ce:3a:b3:d2:ce:bf:9d:47:db:
a5:5d:9a:fd:56:a6:cf:1c:eb:c9:06:d9:8d:6d:cc:59:6f:ae:
b6:d3:07:7c:78:75:76:70:79:93:aa:70:d4:e9:e5:1f:1a:fd:
66:77:7b:37:42:82:4e:4f:11:b7:33:c8:b1:e2:a3:d6:8d:93:
44:fd:f3:9e:8f:c4:bf:de:97:8e:bf:46:a9:a2:8e:67:e3:59:
03:df:7b:20:22:72:c1:f3:3b:64:78:66:08:78:e5:54:85:cb:
18:c2:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:05 2025 by rpki-client