Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: dJAYHNk678/l+nGl0Ov1PBHuOFpscIH+aeFGiazd8HU=
Subject key identifier: 68:52:98:1F:D1:B2:97:56:87:B5:F2:E6:95:6D:62:83:B6:98:54:DA
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 0199FEB538A5EF1C095E8EB5D95BFE996867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 01F0
Signing time: Sun 19 Oct 2025 23:01:53 +0000
Manifest this update: Sun 19 Oct 2025 23:01:53 +0000
Manifest next update: Mon 20 Oct 2025 23:01:53 +0000
Files and hashes: 1: 2LFR55bzEg917ZVxswXc708avQY.roa (hash: 09G2R5A6VRyPInwdzmXjWMU+vVVMHeHCt8VJGVFJ0ks=)
2: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: fBO+m9IkBOWa66cI5A0JKbMNI30D/Y1BgUeiwceOs/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:38:a5:ef:1c:09:5e:8e:b5:d9:5b:fe:99:68:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: Oct 19 23:01:53 2025 GMT
Not After : Oct 20 23:01:53 2025 GMT
Subject: CN=6852981fd1b2975687b5f2e6956d6283b69854da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:2c:2f:96:3f:2e:62:10:3c:ce:17:a3:f2:
54:a6:0e:9c:0f:fb:7c:c5:3c:ca:52:c4:d3:f2:89:
ba:da:92:a8:de:0e:67:96:3e:36:86:fd:04:c0:a8:
b5:d8:44:d0:60:17:69:e6:5d:b6:9c:28:aa:93:87:
17:63:93:eb:7e:e2:d7:c4:81:74:d8:94:6d:cf:2d:
39:21:91:ef:d5:11:78:a1:c4:81:6c:43:e2:e2:10:
84:da:7b:33:82:3b:45:a8:05:ca:f4:3d:e6:dc:65:
f0:60:d6:58:ae:f3:36:ac:bb:6d:ce:a1:db:3b:ab:
0f:b5:c3:04:3e:59:aa:0f:3f:40:1d:6a:b2:02:60:
03:36:a2:b1:29:1e:ba:a9:13:f2:7a:68:3d:82:d3:
42:3c:67:75:fa:be:e0:05:fc:9d:83:dd:09:79:fe:
27:8a:30:fd:cb:b6:1a:f2:b1:8a:5c:19:e3:b1:cc:
48:80:b6:0e:7c:52:8d:b0:50:c1:b5:ec:47:26:53:
12:a9:41:3d:3e:1b:91:d2:fb:af:8f:0f:21:78:72:
34:d0:b2:7c:53:89:d8:b9:a6:9f:e2:62:e6:4e:aa:
71:33:f9:45:cc:2e:94:66:4b:ae:d9:93:0f:b9:30:
d9:87:7d:4b:9d:84:42:de:f9:49:d8:cd:2b:6c:31:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:98:1F:D1:B2:97:56:87:B5:F2:E6:95:6D:62:83:B6:98:54:DA
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:71:2f:dc:69:63:69:6a:44:b3:29:c8:eb:c5:70:99:8f:61:
0f:91:7d:00:ca:05:bb:af:b0:ac:91:e3:9c:f2:0b:d0:73:1e:
05:0c:b5:e8:6c:7d:29:b2:2b:7e:f7:3b:33:dd:cb:de:94:ab:
e5:c0:94:7f:16:d6:cd:88:a4:85:09:1d:79:c4:65:07:26:c5:
01:4e:99:89:3e:cb:a1:c2:57:d3:61:72:2d:19:5b:86:ee:af:
b7:1a:d4:c0:c8:fe:0b:a5:33:52:f3:d4:6f:43:90:18:67:df:
b3:1e:4f:95:02:e9:e7:ac:87:6f:3b:5d:31:0f:ea:63:98:95:
99:d6:dd:71:98:db:93:e7:5b:ab:9b:a4:21:e1:1a:cf:2c:f4:
c8:89:f8:95:93:1b:c7:85:93:e3:67:45:6d:bf:4e:7a:fd:c6:
76:a7:67:97:5d:7a:a8:53:01:61:0f:50:d8:d7:e7:cb:5d:2d:
ed:11:43:d0:e0:6f:ff:db:3c:88:03:c6:11:a2:b9:a2:72:fc:
b3:bd:81:1b:ee:9d:86:bf:e6:d4:b7:bc:62:3f:4d:b9:10:08:
66:7f:8d:e2:84:d5:b2:98:9a:22:9d:ff:b6:b3:0b:3b:b0:9f:
59:07:46:20:6b:04:a6:a6:4b:1e:8c:c7:64:67:51:e8:09:00:
aa:36:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:51 2025 by rpki-client