Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: dQpmqH3/FwuE0lfYB7pc9gwWCjJeaT1j6/sHFYiWet0=
Subject key identifier: 68:69:17:06:12:13:2B:58:F8:6E:CD:DF:D8:80:32:36:31:C5:D1:EE
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 0199FCC6989F0CB90F78DB030DE73190F175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 031E
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: JCLPhHZwzCOYb1ZZu4+4VBpwccxvFf9dGRNHb7c+uWY=)
2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:98:9f:0c:b9:0f:78:db:03:0d:e7:31:90:f1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=6869170612132b58f86ecddfd880323631c5d1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:ff:b7:88:a1:c6:d9:ff:8e:46:7c:0d:c9:
b0:63:f4:a4:13:c7:bb:52:63:1e:98:1a:98:72:cf:
95:07:54:c4:d7:86:58:99:28:af:07:a6:78:75:80:
9c:90:f5:05:04:92:d3:13:e9:55:bf:ef:c6:bd:2b:
d9:1f:9e:ef:dc:20:db:ff:dc:9a:7e:fb:7d:e9:cf:
48:69:52:d1:18:b9:17:c3:59:d3:7d:f5:ef:89:14:
b6:a7:11:64:e1:53:2f:39:32:cb:5e:03:11:f1:a5:
f2:45:6f:53:f5:22:17:8f:81:fc:e4:8e:4a:1a:9a:
c2:17:df:c7:90:66:6e:4c:3a:ae:ea:15:df:fa:64:
a7:dc:3b:3d:89:a8:fe:71:aa:46:f8:8e:9a:47:e5:
07:94:c2:a8:9a:ab:97:92:7b:8c:37:fd:1c:3a:e6:
7a:08:50:e3:c3:c5:6e:ff:fa:83:0d:d4:cd:f3:9a:
9b:d5:0c:85:e2:47:7e:c6:51:30:af:cf:51:09:89:
e0:dd:ff:9d:ed:02:cb:ce:a7:11:7f:f5:f6:d5:56:
11:13:f2:0c:f0:59:7c:35:34:5d:e2:0b:d0:90:56:
f2:66:13:47:96:2e:5f:a9:8e:5c:a5:d3:3a:af:29:
42:d3:48:6a:4e:91:c7:1a:0b:51:16:4b:8b:c0:e6:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:69:17:06:12:13:2B:58:F8:6E:CD:DF:D8:80:32:36:31:C5:D1:EE
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:04:81:c4:5a:2c:4d:19:e8:be:5e:56:e1:f4:63:b7:28:2f:
a7:f1:de:2e:7e:d9:a1:e6:e8:3e:92:3a:e8:26:3c:9b:80:b4:
09:7d:f8:66:e5:3a:aa:43:2e:7e:e9:19:da:94:70:80:8d:95:
75:ac:29:ad:37:cb:e4:d7:cc:df:f1:fb:14:18:35:71:c1:89:
dd:0f:aa:8f:9d:f1:71:58:71:94:41:ad:80:a5:b7:75:7e:4c:
77:93:49:94:d3:d6:cc:69:26:b3:97:3c:ed:fa:93:76:be:1b:
0e:a4:9f:c7:7e:24:ce:9e:6a:62:93:43:63:59:ca:6a:e8:a7:
ca:d6:2e:60:38:0c:90:d8:32:14:99:91:1e:4d:f8:22:72:16:
20:31:38:57:d4:d7:43:06:6b:27:0a:d1:13:86:19:99:d6:f8:
d5:c7:ff:ce:db:28:fa:3e:17:e3:02:61:05:0f:67:3c:e6:14:
11:cf:4d:42:f2:b6:11:b8:ea:b0:0c:ec:e9:c2:bc:c7:24:cf:
8b:19:16:5c:e3:b4:96:66:e3:c1:df:20:e3:e0:d3:71:24:b8:
28:6f:89:e1:31:b7:47:02:92:1e:96:3c:52:04:3d:c5:ca:c7:
61:ea:ad:56:99:2e:00:96:bf:62:03:08:aa:40:ca:63:55:dc:
8e:e5:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:48 2025 by rpki-client