Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier: JEjQ+lp9QdKaBBum5CbvPVntGiw4BCxIxojTnnK82Gw=
Subject key identifier: 25:2F:FE:0F:83:F1:51:47:2F:B9:F9:DE:41:25:11:3C:60:94:B5:05
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial: 0199FBEB338BB72DB3034964B6B3C3A5CFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number: 0284
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: AmqiC38rtSv0iE1wKrjS0J46Q88.roa (hash: UHlyMJ5+FWbMAOr2Ngcc+hElY0msx9uI+m00I3guqOI=)
2: L7mO7KFz85O9TLGHw1rnhJTk7S8.roa (hash: UMdz5rJ/zgMVHrBC+qmC+WQlQSXRf1HcpO0Un+UUydo=)
3: N50ILjI6vNp7A6N9HygvstrwChc.roa (hash: Dirg6q8LPU3d4GS5cdQfmRbClfRmgGiHcbmkwEYmVik=)
4: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: CQmuajC98I9hi58OKhRZVXKqQaZi2THgytqUEdmQDVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:33:8b:b7:2d:b3:03:49:64:b6:b3:c3:a5:cf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=252ffe0f83f151472fb9f9de4125113c6094b505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:04:79:b4:96:a9:9a:2c:a8:af:b4:e5:0d:
33:60:37:35:a9:cb:cd:41:12:d1:44:fa:95:46:15:
9c:f5:cc:0d:00:bd:0a:06:f8:3c:1a:48:54:a7:b1:
33:75:f3:64:72:48:de:56:92:98:29:98:65:18:2e:
83:fc:58:97:35:95:8c:93:ea:74:25:b2:da:b2:cd:
d9:f0:9e:18:43:3c:4e:d4:34:b6:5e:ec:31:04:f4:
bf:f3:db:1a:fa:dd:cc:ee:fd:71:03:d5:a1:3e:4f:
a9:73:d8:93:a5:9f:11:16:4e:bc:61:38:03:ab:1b:
59:d4:2e:a9:99:0f:da:c9:b9:b6:a7:1f:9b:8c:3c:
25:cd:9b:00:43:41:fe:91:01:70:89:a6:ae:45:4a:
8f:2c:4a:ba:a1:4c:e8:7b:c4:7b:fc:e8:ac:bf:b1:
71:7d:9b:26:7a:bb:0b:12:f7:db:1f:7f:07:31:08:
aa:09:03:49:ff:bc:68:ed:08:a7:01:24:10:19:8d:
9d:4f:d3:82:9e:a9:cc:ac:41:5e:b8:af:74:fa:cd:
3e:fa:34:7d:11:83:aa:9d:68:14:08:81:09:dc:43:
cb:7d:34:4f:d5:fe:35:ef:12:9f:59:89:97:16:80:
fa:1e:3f:f9:3f:07:77:69:36:57:92:6a:23:8f:1e:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:FE:0F:83:F1:51:47:2F:B9:F9:DE:41:25:11:3C:60:94:B5:05
X509v3 Authority Key Identifier:
keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:43:3b:3a:61:ec:5c:72:4c:b3:82:39:32:ef:a6:5f:b4:7b:
fa:13:3a:7e:6c:00:a8:89:4f:2d:d0:23:65:b3:33:8c:41:a7:
3b:ac:fd:3d:35:7b:bf:e0:dd:48:00:8f:78:62:ba:12:eb:54:
ed:81:03:60:5a:72:13:53:19:c8:da:1e:b9:da:ae:fe:2a:ee:
2a:5c:9c:5f:e4:88:f5:0f:23:fd:a8:47:43:79:c1:81:56:28:
ce:ce:61:b5:df:6a:97:43:2e:d1:0e:2e:b3:92:4e:ca:99:13:
7b:37:0c:68:80:0e:54:00:d2:96:a2:36:e7:49:14:6e:91:0f:
6e:90:1e:44:18:21:ed:6d:63:ba:d1:0a:cd:bf:55:97:12:0d:
08:8f:7e:8b:32:08:94:ea:aa:a2:19:11:b7:48:f2:e3:a7:67:
a8:43:24:98:c8:a6:45:94:d4:43:39:80:fb:e8:f8:e2:dd:c9:
17:25:ed:33:03:df:dd:98:91:6e:fb:3c:37:70:f5:88:ec:57:
c4:af:9f:d0:45:2c:5d:da:ab:48:65:99:29:9c:dd:d5:d7:58:
af:ca:1b:3a:49:82:c7:f9:f0:87:9d:63:d1:96:2e:87:a4:93:
5f:f2:b9:15:31:8a:f0:80:f2:5c:21:76:ba:0a:50:70:c6:7c:
30:b9:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:13 2025 by rpki-client