Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
File: UaDZglED2dpHYe-pGmDqLKdY0AM.mft (raw, json)
Hash identifier: NtLXNiHMiWbioKkmwYUY9guvijLu61QJHEdtD1JYTRA=
Subject key identifier: 5B:0C:22:25:32:A2:33:A5:90:9B:70:FA:52:94:B3:94:1F:2B:E6:10
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 0199FE7DFA31E03BE4916FF61D902A2C20DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 22:01:32 +0000
Manifest this update: Sun 19 Oct 2025 22:01:32 +0000
Manifest next update: Mon 20 Oct 2025 22:01:32 +0000
Files and hashes: 1: 66TcSNbBS48EyvLzXsLP_EU_XtE.roa (hash: mxP/fnqVDCctHj8c19Sszp5bbRYZ2HG/t1D6LTj1adg=)
2: 6y4imLI7mrPUCyC4ohAhkXPWZIs.roa (hash: 3goWR3fPUqFMR5Z8Kw7Vpz2bSo/rQ358QT4CHplZTiw=)
3: UaDZglED2dpHYe-pGmDqLKdY0AM.crl (hash: THUbBpEusMCxFqNx2syBtDF28KlsVB93OvkSLlhtAJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:fa:31:e0:3b:e4:91:6f:f6:1d:90:2a:2c:20:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Oct 19 22:01:32 2025 GMT
Not After : Oct 20 22:01:32 2025 GMT
Subject: CN=5b0c222532a233a5909b70fa5294b3941f2be610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:f4:bd:de:d6:64:1b:4c:9a:05:62:65:56:
22:50:49:94:73:a1:75:05:64:e7:77:72:9f:e5:20:
c8:38:41:5d:ff:0f:1c:9c:c4:86:1d:47:71:9c:a4:
98:5b:c4:4b:71:0f:7e:d0:39:f3:cb:0f:dc:71:09:
91:2b:4d:bb:0b:2c:83:e0:4f:d8:d7:50:29:c5:c9:
d8:06:47:ed:57:a3:32:81:16:91:6c:7d:9f:a7:fe:
7e:d7:42:89:b7:89:08:9e:55:5b:eb:c8:a0:61:19:
ae:ae:6f:91:b6:c6:6c:e2:bd:27:47:8a:3d:96:04:
80:d6:2e:31:25:82:a5:72:5d:6a:d2:fd:9f:cb:62:
a3:4f:21:60:bb:ae:64:86:14:cd:0b:54:bb:65:11:
60:14:78:02:62:b9:e8:7f:77:c3:55:fc:b2:8e:1f:
00:c3:8b:8d:f1:eb:ee:1a:94:e9:c7:a1:a5:a7:ff:
0f:53:ef:65:e6:30:5c:b2:b6:c8:7c:2c:64:fd:14:
5d:8c:31:db:90:1b:1a:89:58:9e:20:d8:45:d5:93:
44:9c:55:9b:00:4b:1f:42:cc:44:4a:ea:0b:3e:80:
7e:ad:ab:75:86:ca:59:31:49:e8:26:93:c2:09:aa:
10:c0:69:ea:65:f4:19:64:aa:68:49:07:68:fd:b0:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:22:25:32:A2:33:A5:90:9B:70:FA:52:94:B3:94:1F:2B:E6:10
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:37:d8:dc:9e:e0:7b:07:f3:94:4a:a4:c5:77:1b:9a:42:9c:
37:56:fb:86:c2:53:aa:68:0c:1b:37:ca:a2:e6:dc:21:47:14:
96:84:83:90:08:58:da:73:05:32:0e:bd:43:bb:89:70:53:d0:
c8:80:85:f7:1a:3f:3d:57:bd:c9:85:61:fe:2b:52:e3:a2:1e:
fd:4e:ca:82:fe:eb:c2:f4:5a:1d:06:90:83:96:62:f9:9a:62:
dd:f4:5d:3f:2f:75:d9:a0:e1:18:4e:c2:ef:78:c9:93:e6:17:
c7:83:60:3d:b5:ff:40:31:7d:99:00:2f:43:34:2b:96:5a:05:
40:02:aa:51:d6:d7:06:78:e8:ee:9d:02:c9:cf:ad:26:81:36:
5a:56:96:f5:18:31:57:21:d1:51:f3:01:45:fa:59:83:e6:3b:
85:fc:f8:41:b2:f1:70:af:6a:2c:c0:6e:de:95:1d:7d:6b:49:
76:b7:61:93:cc:18:9e:84:04:d3:6c:2d:4e:5d:5a:20:0e:3e:
1a:ce:5f:3e:4d:d2:db:2a:c2:88:38:75:08:1b:0b:a7:62:49:
49:96:a7:b8:26:11:e6:b6:82:31:02:ab:1b:3c:25:ae:8a:ad:
11:91:41:e3:92:b1:68:b2:b1:73:8c:51:41:6d:e3:70:74:55:
62:50:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:35:57 2025 by rpki-client