Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: +oiWlhdzV7VrYJURiQN/h0vv0rHyhmEm8X4ZHBlTL8o=
Subject key identifier: CF:4D:AD:D0:1E:38:41:74:EF:C0:25:F4:F2:EF:27:07:5D:2B:1C:50
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 0199FC215AA52C69B112CAC42CC88B93DD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 13D3
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: kHeKX+sEsgv9Z6H8CMZVGkRGlmrEyoi4ww9LATw1E5w=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5a:a5:2c:69:b1:12:ca:c4:2c:c8:8b:93:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=cf4dadd01e384174efc025f4f2ef27075d2b1c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:de:05:ff:ad:71:a3:58:f1:66:14:e3:2b:
c7:d7:05:af:45:24:5f:86:a1:9e:91:97:07:1c:db:
d8:08:03:ec:82:03:70:8e:2b:e0:f7:d4:20:0f:2c:
79:11:ad:99:da:b3:fd:b5:40:b8:3b:9d:41:4b:e4:
11:a8:08:a3:50:df:dd:8d:e1:71:63:89:40:7e:20:
f2:cb:1a:43:33:bf:30:2b:1e:ff:99:8a:86:f0:a4:
15:36:92:ee:fd:d0:55:8d:b9:69:38:e8:4b:1e:41:
9f:3f:18:45:b2:40:37:14:27:97:f9:b7:b0:64:ec:
6f:fd:f1:1f:5a:92:90:f6:e1:45:dc:d2:29:5f:66:
3c:0c:4e:f1:07:99:8e:eb:5a:2b:fd:ab:33:f5:91:
e0:02:06:0a:88:bd:0d:14:77:7f:9a:43:77:d9:99:
71:08:98:b1:c1:2f:ae:1b:35:e8:ac:f8:54:2a:75:
bd:41:a4:9d:ce:64:2f:79:e4:a4:eb:59:94:7e:1c:
c3:40:0b:6f:45:b6:0c:7b:af:c3:60:63:90:33:f2:
6d:ad:cb:1b:db:9c:45:d3:0e:5a:e2:e4:10:c3:29:
da:db:98:d2:33:94:cc:7e:c5:de:fc:6c:23:c4:b7:
35:a8:01:90:6f:56:e1:6d:cf:9a:ca:be:14:5a:51:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4D:AD:D0:1E:38:41:74:EF:C0:25:F4:F2:EF:27:07:5D:2B:1C:50
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:16:75:4f:b9:aa:b0:9f:8e:10:02:06:8f:df:1b:65:0e:
51:db:35:6c:f8:0b:e5:59:56:13:4f:c8:32:a2:af:cc:48:f5:
37:91:57:d6:c6:4f:f8:82:4a:22:fb:c7:10:48:53:e9:80:0f:
f4:54:20:e6:82:e5:6a:95:3a:08:9b:13:7e:60:fd:04:56:d4:
a7:7a:01:54:a8:65:1c:97:7a:93:a9:23:b6:14:69:46:01:51:
e2:0b:11:83:02:b3:bd:79:15:b4:51:66:9a:0f:07:a7:3b:bd:
c6:99:f1:79:de:85:44:6c:d7:a3:80:38:bb:e4:d5:8c:03:d6:
31:94:09:63:ab:8b:10:c4:07:67:b4:96:9a:8d:0f:cf:cc:e0:
49:70:e2:1d:93:28:df:ee:24:bd:9c:9c:dd:fa:ed:76:48:de:
a4:f0:b0:7d:21:c8:0f:ca:d9:e5:66:5b:dc:36:1e:cd:59:da:
b0:df:c0:d3:88:c8:d4:7e:12:22:31:14:33:f5:ad:42:c7:e4:
c5:d8:26:9f:c2:86:4e:43:1e:c0:6f:d9:55:11:b5:b5:5e:e2:
6d:58:1e:af:5b:c8:7b:97:08:25:34:eb:15:99:12:67:80:77:
4d:d9:44:7f:d9:e3:67:4f:af:d6:25:a9:e4:4a:b5:5a:c4:d7:
49:12:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:13 2025 by rpki-client