Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File: UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier: 0yWJgyHknreUMdwkMUbLnWxaPn6ACgJk+GWIM5/lPuI=
Subject key identifier: C7:01:07:08:62:51:80:39:4A:4F:60:0E:3E:3B:58:F3:AA:33:81:64
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 0199FB0EBA7A357F9D0422E175DE03AA5732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:10 +0000
Manifest this update: Sun 19 Oct 2025 06:01:10 +0000
Manifest next update: Mon 20 Oct 2025 06:01:10 +0000
Files and hashes: 1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: a4rdKKiXp4bhGYKsJ/UIWvxcbcu6SRSMe+9B1scNDtw=)
2: kPDeBF3aCTfbB5EVHHC2Wq-wohY.roa (hash: 6WAkgf1xAugeYb/22h6PavosEJNmU15Yes0foRMGr3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ba:7a:35:7f:9d:04:22:e1:75:de:03:aa:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Oct 19 06:01:10 2025 GMT
Not After : Oct 20 06:01:10 2025 GMT
Subject: CN=c7010708625180394a4f600e3e3b58f3aa338164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:6c:b8:78:f9:8f:87:fb:25:4c:af:81:46:
0f:02:bc:fe:14:c9:bb:54:37:37:4f:67:56:5a:ef:
d2:66:06:31:3e:ce:4c:9b:d7:a4:a8:23:71:51:e8:
e1:38:50:cf:65:9c:63:69:52:2d:a6:98:da:5f:58:
88:91:e5:76:2b:2b:b5:42:68:b8:09:0c:c4:3a:d4:
62:22:40:ae:fc:36:9a:6d:0b:23:79:52:5a:26:5e:
aa:60:05:1e:dc:d5:cd:0f:e8:f9:1e:9c:49:63:ce:
5d:8b:28:11:9a:de:5c:7d:86:19:60:3c:0e:6b:7b:
27:69:27:bf:b5:f9:85:fc:1e:94:b7:c7:88:24:c7:
5f:69:8a:0a:e3:ed:e6:b6:09:c3:68:86:fc:f6:9b:
e2:f5:9d:80:1b:56:d5:4f:1c:c1:a7:e9:65:3e:27:
74:9b:2d:f6:26:a3:2b:cb:ca:75:c7:4e:56:18:4d:
dd:03:32:4c:5e:e0:ac:59:d8:ab:62:99:58:d3:6f:
18:23:14:1f:e4:b2:9b:d7:07:57:a2:86:3e:f8:57:
30:1c:c9:4a:b0:42:2f:c0:39:fc:1d:a6:b7:09:87:
63:85:2b:ea:3c:8c:98:a1:de:b7:74:a6:d2:32:83:
b6:5e:24:11:29:30:0f:7e:55:c1:b5:9b:a1:21:89:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:07:08:62:51:80:39:4A:4F:60:0E:3E:3B:58:F3:AA:33:81:64
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a1:08:d5:7f:8f:27:8e:50:db:dc:de:88:4c:18:53:2d:24:
7b:eb:86:2f:c9:7f:b2:e0:19:0c:30:f2:ed:20:77:e2:6d:32:
28:49:99:c9:d9:73:66:9e:0d:c3:fb:fd:8b:e2:8f:94:e2:90:
12:11:f3:e1:c0:1f:98:4d:66:ad:01:fa:59:f8:00:d2:85:a1:
6a:2a:2f:f6:f2:f4:8d:32:49:e4:f6:d6:c5:71:1a:e4:d2:56:
bd:06:92:ec:80:5d:ff:fd:bf:d3:28:03:2a:86:ce:88:ab:41:
ee:5c:c0:af:c9:39:d6:ee:c7:84:f5:81:6f:76:e7:1c:ac:dd:
5f:99:1b:41:de:30:cd:a0:36:5b:fb:34:73:f2:03:56:54:c0:
41:01:b3:b3:2b:65:d9:3f:54:ce:b7:c6:e3:7a:8c:a6:ea:ef:
b2:6d:d4:57:65:b5:7b:ac:b5:62:48:f1:0d:a2:70:38:87:ff:
9e:7f:2b:bd:3f:85:c6:a4:2a:21:32:af:d1:6b:97:f8:1c:cc:
f6:80:ac:14:eb:76:85:32:09:c1:8f:f6:cc:df:f2:22:66:93:
5a:53:1c:5d:31:d7:9e:b4:2a:8f:c6:93:95:61:db:d9:86:5e:
45:81:fa:df:ad:4e:0f:ce:e7:77:76:aa:94:53:9d:f5:00:5b:
d0:58:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:02 2025 by rpki-client