
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: Kr5SA9YsUH+EkZX8gd6e2NuF/oFymIfE1x6uqoy/PZY=
Subject key identifier: E5:C2:B4:D7:A3:89:4E:45:37:B8:61:6E:65:E4:3B:A9:05:D2:02:6C
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 0199FEB4795A92D07017C2E9A74B923420D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 23:01:04 +0000
Manifest this update: Sun 19 Oct 2025 23:01:04 +0000
Manifest next update: Mon 20 Oct 2025 23:01:04 +0000
Files and hashes: 1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: Zeo++r5aJpipb/3ouv8R6nsmDEeQnS7wgclGq2kKIyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:79:5a:92:d0:70:17:c2:e9:a7:4b:92:34:20:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Oct 19 23:01:04 2025 GMT
Not After : Oct 20 23:01:04 2025 GMT
Subject: CN=e5c2b4d7a3894e4537b8616e65e43ba905d2026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:b4:a4:cd:62:25:c5:13:c3:9e:d8:a1:8c:
9d:5c:e7:6e:0e:a3:ac:e6:6b:53:d1:ac:78:84:90:
2e:05:95:54:e7:9c:b1:68:14:38:73:92:be:a2:01:
f1:c9:89:35:7e:a5:b5:44:a6:e8:02:5f:93:49:fa:
70:0c:57:fe:51:ba:22:91:bb:91:7c:e2:d6:51:b8:
a9:2a:c1:e7:24:59:d1:d8:6f:a5:99:cb:12:87:2b:
50:76:62:89:00:84:51:31:8d:ad:4c:57:db:77:9f:
74:1b:fb:bf:cf:3f:01:3e:f9:48:f5:d6:ab:6c:57:
cd:80:96:f4:b1:99:19:d3:1e:13:52:01:86:e0:a9:
7c:6a:49:33:ea:30:88:ac:7d:2e:69:df:6b:75:f4:
3a:cf:69:9f:a1:a0:3f:a1:34:cb:c3:04:03:93:d7:
8a:6f:2a:2f:68:99:46:52:91:2f:f3:bb:d2:5f:4e:
c2:b0:9f:67:f4:fa:a0:86:db:b1:ae:5b:bb:bf:c1:
f8:ff:3f:e5:00:a8:33:3c:6b:f2:3c:db:99:de:14:
f8:b9:55:30:21:03:79:39:33:4c:e5:64:1b:18:3a:
69:09:43:f2:99:de:ed:96:9e:e3:fe:f8:d9:11:00:
f6:b2:f9:88:4b:cb:20:21:d8:bb:3c:2b:8f:19:e9:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C2:B4:D7:A3:89:4E:45:37:B8:61:6E:65:E4:3B:A9:05:D2:02:6C
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:39:ad:73:d7:6d:1d:4c:1e:7d:af:58:cb:47:84:51:97:34:
40:1a:05:6a:c6:e5:8b:d1:59:85:df:59:ab:b5:3e:4b:9c:64:
ba:22:c3:a5:79:b8:ff:e7:04:0c:32:0a:ad:1e:43:5f:82:01:
f0:d7:e1:15:55:e6:8e:d8:3d:86:ab:bd:b0:3e:8f:80:11:f4:
e8:c4:f6:a8:f6:e8:ac:77:e0:d9:3c:85:10:32:a2:00:36:af:
1b:a8:d1:b1:d8:96:2d:1e:62:58:e6:10:e6:f4:0e:85:dc:c1:
91:99:fc:5d:bd:0a:5f:dd:68:b2:bd:e9:74:10:06:f9:cf:91:
f9:ba:10:38:0f:be:66:56:d6:27:e1:c1:69:39:3a:a0:34:0e:
99:87:76:17:c8:24:27:0f:ec:ff:79:a1:6d:44:3b:16:75:e2:
65:7a:e5:c9:7e:a3:18:92:52:14:d3:55:19:af:b5:67:7b:75:
83:8c:6f:3b:66:cb:c6:09:80:08:35:32:75:16:0f:4c:e5:30:
fa:a4:6d:5c:46:16:2e:61:c7:10:20:ca:dd:6e:59:64:6c:17:
5d:04:1a:7c:40:37:11:72:42:16:b3:62:3f:e1:3d:9c:b3:e3:
06:3e:df:dc:6c:c4:5e:b8:18:c6:39:a5:b1:5f:6d:f3:4e:e1:
88:f9:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:44 2025 by rpki-client