Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: GR6GaM0YSuITxVsYAjtX0dM7NQEWXZjbrQeigBRNjPo=
Subject key identifier: 60:C3:CF:62:FC:D6:77:6E:5F:FF:BD:75:6A:4E:57:EC:86:A8:05:0F
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0199FD346AF096121E5821F8ED76677B04F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1593
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: zsnPcnN6IMSY1h3xxpdpJnUWZVTAqQCPdAnYZMCVRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6a:f0:96:12:1e:58:21:f8:ed:76:67:7b:04:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=60c3cf62fcd6776e5fffbd756a4e57ec86a8050f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:ee:8c:e6:cc:41:20:87:06:e7:3f:22:ea:
cf:4b:a1:a8:a9:b8:f8:3d:94:31:3f:93:e0:f2:a7:
0c:a6:7c:d1:02:7a:04:58:8c:57:9e:2b:28:45:c8:
7c:cc:90:75:43:51:ba:92:f8:c8:23:21:41:43:df:
8a:5e:fa:84:e1:c5:db:8e:92:4e:46:2e:a4:55:2d:
7d:0e:f5:e2:be:19:09:db:11:4b:b4:f2:17:7b:93:
4c:c3:26:ce:c7:a6:b1:45:ae:98:df:42:eb:36:36:
cd:01:1d:2a:aa:43:39:b0:28:41:70:1d:af:cf:55:
9c:4c:af:c8:07:48:e5:d4:61:db:0a:10:19:55:42:
85:7f:49:cf:19:95:6f:b5:0b:e3:f9:a4:4d:9e:cb:
52:69:6f:16:74:55:53:89:6e:82:0c:e3:57:65:43:
95:67:4f:72:6d:b2:cf:76:6c:94:5a:32:06:fc:12:
ec:63:5f:3f:e4:27:26:68:3a:b4:b7:6b:df:dd:91:
63:f3:5a:d4:a4:89:9e:44:a7:c9:67:87:76:ac:08:
f3:6a:5d:b5:fa:89:ef:47:d5:85:3b:95:fb:d4:78:
92:2b:e3:12:2e:60:c2:c1:c7:97:7e:1e:4d:d9:ca:
b1:9d:3d:72:8d:d3:9a:9c:4f:cb:82:cc:0b:62:87:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:CF:62:FC:D6:77:6E:5F:FF:BD:75:6A:4E:57:EC:86:A8:05:0F
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f2:d1:1f:fa:e6:e4:b5:96:60:6c:03:c8:6a:ec:08:f2:f3:
ca:3d:cd:8d:a0:fe:d0:90:f7:01:eb:8e:5f:26:3e:d7:8c:e5:
5b:8a:9c:0f:12:b8:2e:8a:53:56:19:e9:d0:a3:33:66:ac:e3:
16:98:37:9c:ed:2a:70:12:52:39:9b:6d:e9:ca:97:6b:01:f4:
eb:1b:92:21:b4:a5:59:cd:5a:33:45:1f:51:2d:ae:2c:98:a4:
fd:0f:f4:21:46:56:43:ec:01:68:42:a2:a6:bf:27:84:25:78:
e1:3a:ab:de:fd:35:75:ba:80:ae:7f:6a:9e:62:a9:ce:32:82:
d2:80:a6:ae:81:66:70:41:6c:03:92:24:4a:72:91:98:04:5d:
c2:00:3d:32:e5:db:d0:48:81:02:c5:5e:ad:56:62:7e:7f:15:
81:1c:75:e0:e4:98:40:05:29:52:42:3b:30:4e:35:0c:e5:11:
b2:ed:bb:ef:8f:9c:29:21:d0:bf:d6:80:e4:66:b5:28:aa:d6:
84:95:25:ea:dc:c4:9a:f9:a8:64:c7:8f:51:70:25:97:98:67:
b2:99:66:4b:f6:33:58:8c:81:ab:9b:9d:a2:fa:56:c4:6f:33:
07:45:43:43:47:a9:99:02:6f:4c:99:79:e8:c4:89:0e:f8:34:
e5:1d:a3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:28 2025 by rpki-client