Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: jdV+6+POUvY+BOUwLFsbliu3luuIy6Wb0oJKkhPF+XI=
Subject key identifier: C8:00:C6:EA:E4:08:6D:87:62:14:25:41:EC:6A:A8:F8:15:05:80:A7
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 0199FBEAC94AFF098D83D052D0E8A9AA8A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: +OJzl5Fz661YNhi9BOdkZ/1PTPw3W5iR3n1YExRQ0A0=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: fwxt0QHyh3ttD260VFCya7TU-1s.roa (hash: 9i1HvobHCHHVWkd92tpYtwhAF4c8uqpeWhFp9/w1WdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c9:4a:ff:09:8d:83:d0:52:d0:e8:a9:aa:8a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=c800c6eae4086d8762142541ec6aa8f8150580a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:39:63:f3:01:ec:4f:f2:54:77:15:e7:91:
9b:a6:46:3e:9f:50:0b:19:1c:9e:15:57:24:95:b5:
4d:ad:38:0b:c0:f2:01:c3:72:c3:f0:40:dd:02:2a:
2c:a5:52:bb:3e:e7:90:2d:8b:0c:7f:be:46:d2:ba:
0e:1f:a2:4e:11:87:1c:d5:0a:50:d1:d1:3a:87:b0:
0e:e0:f6:b4:a3:5a:29:e1:d7:2d:86:f6:05:a7:e8:
23:0a:2b:2a:c2:b7:e3:53:fc:b5:ee:93:d4:fd:bd:
d3:12:80:d1:bd:3e:11:8c:71:c0:fd:6b:c4:41:25:
02:c3:1f:93:05:0c:cd:d1:33:a2:ba:2a:fe:29:4c:
66:08:37:70:91:9a:38:f1:3c:ea:d2:81:d0:a9:a3:
42:3b:b1:ce:1c:98:56:7b:62:53:5a:f7:3e:70:d5:
06:fd:a4:4b:18:f9:7b:50:f5:b9:8a:15:6c:4a:d8:
ce:ba:b9:79:4b:d0:34:3a:66:29:48:24:bd:61:14:
ee:c8:7e:e7:65:fa:d8:5e:8f:a2:ef:56:7b:1a:8a:
66:96:f9:02:e0:b6:ee:08:67:74:75:f7:43:b1:13:
58:a1:35:0c:3a:ca:08:1f:25:a6:ee:56:54:20:c8:
a8:1e:db:f6:19:c0:e6:9c:26:a7:3d:5b:42:f5:07:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:00:C6:EA:E4:08:6D:87:62:14:25:41:EC:6A:A8:F8:15:05:80:A7
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:05:ee:1a:50:f3:0b:27:f4:f5:48:8b:8f:f0:33:78:5f:33:
48:f0:a6:06:21:5e:be:00:c5:93:00:55:85:df:23:6a:bc:20:
11:8c:20:ea:c3:25:23:cf:1a:5c:6f:4a:8b:a4:92:3f:92:e7:
e8:43:7f:e9:cb:93:87:ff:79:98:99:29:1c:8f:02:89:21:b7:
b2:9e:30:1c:f6:bf:06:8b:55:36:bf:31:3d:0e:32:12:bc:d4:
5b:5e:e4:b7:bf:a6:70:44:dc:c8:c4:e0:e1:fd:47:fa:48:c2:
6f:a7:d0:52:61:3b:94:ba:bd:7f:f7:07:a9:ff:29:5a:7a:80:
c0:30:61:40:69:0a:08:69:3c:45:62:61:11:8f:76:67:55:df:
4d:82:a1:76:d1:79:11:21:b7:9d:dc:cf:67:a2:36:a0:fe:76:
0d:8d:c1:8f:8b:04:f3:e0:63:df:89:d2:62:f7:ee:41:70:ee:
fc:17:00:90:8b:66:e8:7c:5b:f7:bf:2f:ee:2e:d2:d2:51:9b:
89:4c:0d:7b:c9:d5:4b:c6:43:c2:02:79:e3:68:1c:63:83:dd:
77:58:f9:29:d0:32:a2:cd:03:74:90:22:e8:dd:8e:ef:b3:8d:
ee:17:9f:c5:e4:8b:fc:72:98:09:1f:54:06:f9:98:ae:82:95:
e4:ad:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:44 2025 by rpki-client