Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: q3Tvegfaf37hyxPGeTZUefpLdQq1FKzrNX48DXi2PB4=
Subject key identifier: ED:FF:DB:76:D0:DF:13:B9:47:FC:CE:2A:77:A0:0F:D3:14:40:F1:1D
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 0199FFFE8A2CDEE38865A9035C872E88454F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 05:01:35 +0000
Manifest this update: Mon 20 Oct 2025 05:01:35 +0000
Manifest next update: Tue 21 Oct 2025 05:01:35 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: evn2fjcNrXzKYc32rAasEvSN59gB5tBlRkEYUEx+Uqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:8a:2c:de:e3:88:65:a9:03:5c:87:2e:88:45:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Oct 20 05:01:35 2025 GMT
Not After : Oct 21 05:01:35 2025 GMT
Subject: CN=edffdb76d0df13b947fcce2a77a00fd31440f11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:3f:75:ca:86:77:d5:f9:4b:83:c3:83:0f:
8b:f4:d4:39:b5:bd:bf:a3:8b:c8:79:87:f3:89:7e:
b6:7e:8e:96:27:8d:fe:24:62:8c:b3:9e:60:0c:12:
5c:fb:a1:87:5c:78:3d:6d:5d:3e:35:7e:70:46:f8:
ed:77:d7:e6:cf:9f:65:11:62:77:63:5e:ea:69:ad:
31:b6:3f:cb:d6:01:02:f9:55:66:53:08:89:c9:b7:
dd:05:ba:b9:c9:26:6f:26:34:b1:5e:56:02:fd:db:
64:55:9a:4e:56:45:15:b9:71:8f:17:7e:36:bf:8e:
e7:ce:7a:d0:dc:21:12:7b:65:87:45:82:c3:0f:15:
0f:18:99:0d:f0:d5:ed:37:bc:3e:c3:ec:ed:f7:47:
0f:6b:c1:6e:bc:e2:a9:2c:56:6d:df:29:81:22:87:
6d:12:9b:18:7e:a8:34:65:14:9f:a6:e8:50:69:cd:
cd:27:46:39:60:20:c5:a0:4e:fc:36:b5:3b:0a:43:
1d:19:ca:09:0e:9f:fb:f5:2e:6f:28:2a:28:1e:65:
a7:ed:10:ce:b6:d9:89:29:e0:55:b1:89:f5:cd:6c:
5b:36:f4:61:13:2b:c7:95:2a:72:15:98:f1:4d:bf:
d9:d7:9b:98:12:fb:56:85:9e:dd:54:ae:5a:59:6d:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:DB:76:D0:DF:13:B9:47:FC:CE:2A:77:A0:0F:D3:14:40:F1:1D
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a0:6a:24:d2:37:f6:b9:a6:af:fb:ba:ad:9e:d2:a6:d1:62:
02:a6:78:43:a9:b9:6c:55:f1:6e:07:40:44:12:31:8c:32:08:
49:ef:4b:51:da:67:15:2b:12:39:b3:66:ba:d5:76:db:8f:c9:
9d:de:ae:93:70:8a:98:9d:81:c0:9d:24:2d:f2:b9:17:ad:02:
13:2a:c4:09:e3:71:7e:30:1d:a7:74:1f:35:fd:7d:a6:c8:98:
82:ae:ed:83:df:4d:1c:81:0f:dc:dd:84:b2:fe:15:22:ba:d4:
71:a9:21:89:2e:fe:86:34:24:d3:0b:6b:85:32:4f:86:9c:8e:
f6:fd:54:3e:9d:72:67:ff:6a:78:c9:15:f4:db:fe:66:73:91:
1c:ba:62:91:d8:56:16:aa:ad:75:d4:7c:64:df:d8:f8:ac:2c:
d9:7d:0e:70:84:a9:05:e9:05:99:80:1c:15:a4:66:2b:b8:08:
ef:35:99:fb:fc:ff:35:da:4a:84:12:cc:e2:89:68:55:f8:57:
ed:66:23:64:6a:7b:19:d4:12:13:11:e8:4f:89:19:44:c9:d9:
ad:8c:a0:82:e8:1c:34:ca:a6:49:70:0b:14:e4:c0:31:38:d0:
ff:b2:33:da:b5:ec:f1:18:f3:e1:cc:cc:c9:0e:c2:89:f5:75:
8e:32:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:30 2025 by rpki-client