Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: kDggJeoRtYLgpXFUuqPeTOHPQj9XDgSzIVlPnUF1lps=
Subject key identifier: B3:44:08:CD:9D:4B:2D:85:25:8E:46:43:1E:39:77:65:7A:D7:A6:C8
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 0199FB7CB1EDA5C3FAF4497F312E235D88D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 0F60
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: N8poNA2Iihc6U3Pjb3qAM5Adx6VT3eUNjC1vY0FoBe0=)
2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b1:ed:a5:c3:fa:f4:49:7f:31:2e:23:5d:88:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=b34408cd9d4b2d85258e46431e3977657ad7a6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:cb:3c:44:0d:9f:f2:a0:8e:26:91:85:5b:4c:
b3:7a:a0:ef:f8:f3:7e:c3:73:7a:50:b8:5c:d5:c7:
30:01:06:95:26:10:b4:21:0f:6a:13:a8:eb:d4:69:
27:ed:e0:c5:ca:4d:c3:26:8f:d1:20:c8:d3:7d:c9:
2b:27:12:ed:4c:d1:12:f1:93:e7:f5:61:0f:8a:ca:
2e:fd:d9:9c:d6:91:f9:e8:7c:66:b9:e1:1b:51:39:
ae:b0:f3:e0:f1:16:68:2d:8f:4e:b0:85:2c:02:59:
1b:0b:f5:88:94:c4:34:74:2f:ea:b3:e6:b0:cd:9d:
3e:19:01:9f:f0:b1:1d:b1:0f:e6:21:a4:1a:cb:47:
4c:52:62:f5:39:94:95:3d:f6:a6:76:68:5a:99:58:
1b:69:6b:e3:fb:f6:5d:40:25:e4:c2:9b:9d:c8:09:
21:0b:81:f3:2f:85:6a:7c:d3:79:d1:a1:0e:31:c5:
d7:5b:e2:f6:62:ae:b7:61:8b:a1:51:0b:16:6e:e1:
86:5d:af:3b:1c:b2:dd:9d:40:8b:06:42:b8:05:87:
c9:61:24:57:85:3b:73:c5:05:d7:f9:2c:3f:97:13:
02:3e:49:d1:79:19:1e:f5:d0:61:db:e2:73:d2:e0:
d5:43:22:52:73:65:37:b6:de:16:cb:83:85:f7:a1:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:44:08:CD:9D:4B:2D:85:25:8E:46:43:1E:39:77:65:7A:D7:A6:C8
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:67:5b:5e:91:52:94:e1:5a:c1:9b:ef:58:e7:3d:be:37:c8:
ad:01:73:a3:90:db:b5:9c:70:3b:3c:bf:46:7c:41:d3:bc:f4:
95:27:a7:19:fe:f4:a5:4c:10:36:97:30:0c:4a:6d:c4:b6:eb:
f3:3a:64:58:b0:6b:d6:ed:9c:36:9a:e8:02:2b:aa:0f:34:a2:
b8:ce:36:ef:81:3a:93:91:79:9c:8c:3e:99:6a:36:7c:18:b0:
a8:eb:55:3e:89:29:28:9b:be:af:ba:7c:5c:3a:59:ef:08:2f:
8c:ab:cb:22:0e:03:ca:f8:99:7a:99:a0:3a:0b:90:0a:11:30:
91:8a:bc:38:01:90:90:84:6f:3d:c8:e9:f6:c3:ea:68:e1:d2:
5c:91:86:9c:2b:66:9c:45:46:c8:98:24:f5:18:c1:6d:9e:1f:
10:c5:f2:a8:63:b5:60:01:e2:3d:89:d0:41:63:01:fb:7f:c8:
fc:86:b7:70:14:cc:a7:f8:3f:c4:45:32:0b:aa:62:1a:15:51:
25:8d:21:ec:83:4e:a6:c7:67:a9:63:53:b2:de:5a:65:1e:ec:
66:32:25:88:55:af:24:16:f9:33:b2:49:61:13:47:09:7f:93:
39:60:4d:ea:aa:8d:c3:a3:ee:ce:b2:e3:74:38:bc:e6:e1:b9:
1e:dd:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:28 2025 by rpki-client