Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: ziIX/m1qEP+fLnMSQPeCy/e3UDq300xAB7LQH1SuQ1M=
Subject key identifier: 4B:62:A0:22:6E:65:69:4B:2E:52:34:85:2E:77:D2:F1:C0:9C:95:FB
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 0199FB0F20202975C5503A31046999BF49AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0D71
Signing time: Sun 19 Oct 2025 06:01:36 +0000
Manifest this update: Sun 19 Oct 2025 06:01:36 +0000
Manifest next update: Mon 20 Oct 2025 06:01:36 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: 6e2zZN9i9BByXB/GGBrL0sh14gBxx32f+2mYuTEhzVk=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:20:20:29:75:c5:50:3a:31:04:69:99:bf:49:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Oct 19 06:01:36 2025 GMT
Not After : Oct 20 06:01:36 2025 GMT
Subject: CN=4b62a0226e65694b2e5234852e77d2f1c09c95fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:74:69:36:8b:8b:ec:f2:fb:75:3d:4d:e0:
51:70:db:70:89:39:3d:6e:e7:68:b5:e5:41:db:dd:
17:47:bc:a4:33:19:83:f2:f9:d1:d8:a6:4c:c1:8b:
c7:17:c0:48:4a:25:d3:be:55:b0:3f:87:30:fa:d3:
88:34:c8:19:cc:a4:c8:a8:87:2e:0f:48:ae:fe:18:
e5:ba:87:ac:92:89:73:2d:61:08:de:1b:c6:77:b1:
4c:be:a3:d9:3a:44:30:27:72:88:6a:b0:76:d0:45:
7a:a2:b6:0b:16:fc:4e:46:56:2f:e2:c1:d8:01:9e:
80:ed:7c:ee:d5:2c:64:8c:6d:5a:c7:42:c8:74:23:
8a:64:0a:d5:0a:b5:99:26:b1:c5:8d:5d:c4:e5:ba:
cc:45:2d:49:e9:b3:0a:91:2d:a6:3e:c9:f8:52:0e:
96:14:5c:7c:2a:af:bf:69:31:84:38:e7:bd:49:01:
78:3d:e3:f8:b4:55:45:f0:70:b2:00:ae:4f:5f:d0:
80:8d:73:b0:ec:63:ec:eb:28:c5:ff:bc:f3:5d:45:
2f:97:13:dc:b5:37:ee:96:29:fd:26:6e:ba:24:de:
a2:4c:e1:ec:da:ab:4b:cb:cb:22:10:03:c0:7c:84:
7d:fa:9f:ea:05:39:78:54:63:84:62:13:81:1c:8f:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:62:A0:22:6E:65:69:4B:2E:52:34:85:2E:77:D2:F1:C0:9C:95:FB
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7a:fb:bc:a3:6e:e9:30:5e:7b:3c:ab:a8:99:43:25:b7:88:
71:d0:de:b8:cc:60:67:90:be:d7:18:35:d2:e1:cd:e0:41:af:
ab:8b:ac:56:9b:09:a7:60:47:d8:96:65:ec:46:26:de:f3:7d:
d5:7f:57:55:9a:cc:41:9d:f1:33:e2:85:d4:30:da:e0:59:c4:
4d:cd:b9:3a:bd:f8:5c:b4:02:14:40:3c:1a:97:bd:52:19:2d:
8d:83:25:0b:59:ea:55:2b:bf:3b:cc:f0:7f:ac:c5:fb:2b:2c:
79:2d:c8:c9:e1:b9:ad:01:0e:a0:82:b5:0a:64:5e:68:70:52:
d8:89:48:7d:38:fb:76:b3:09:21:2a:20:cb:82:11:86:75:53:
66:1e:57:e8:f2:f0:8b:d5:70:f6:b5:7f:09:6f:c4:0d:4f:ed:
af:ba:4a:5a:80:e6:42:5e:49:2e:9a:53:57:46:de:74:e7:90:
14:09:74:98:03:c5:c2:26:f5:64:85:bb:f7:cd:5e:11:3e:ff:
30:b0:1e:f4:c6:67:cc:7b:84:67:aa:d0:0b:9f:48:ed:e9:93:
96:43:cc:f5:a6:42:b6:57:cb:28:6c:8e:de:34:3b:1f:49:ef:
fa:c1:76:0d:dc:79:b6:b3:c6:cf:71:42:77:7b:71:96:24:96:
89:d0:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:56 2025 by rpki-client