Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: wLFlA0KZaTSRwVOLwxq6dDKahVq4XiTAmOsUjBvl0y4=
Subject key identifier: 2E:03:ED:C4:6D:3D:94:BA:D2:D1:50:08:5B:DF:ED:3B:A6:F7:22:F3
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 0199C56985C1F44B91E799F1911DBC43A2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0D15
Signing time: Wed 08 Oct 2025 20:00:50 +0000
Manifest this update: Wed 08 Oct 2025 20:00:50 +0000
Manifest next update: Thu 09 Oct 2025 20:00:50 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: /S2YGP3RnIGQpXYw6sgALGWsM8EgU+deO/xWmCF8jaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:85:c1:f4:4b:91:e7:99:f1:91:1d:bc:43:a2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Oct 8 20:00:50 2025 GMT
Not After : Oct 9 20:00:50 2025 GMT
Subject: CN=2e03edc46d3d94bad2d150085bdfed3ba6f722f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:c6:63:dc:32:3e:b9:5a:b2:af:54:aa:78:
70:70:98:e5:ff:5e:fe:c4:e9:1d:97:10:b6:02:4a:
f6:d8:1c:06:16:1c:6a:01:a5:ee:ab:49:d1:1d:d9:
1b:92:14:02:6f:9d:03:6b:ec:3c:4c:1b:3c:73:84:
3d:3a:4e:89:2c:3f:00:99:2b:49:d8:a8:0c:d6:4e:
59:02:22:f2:97:a9:6f:b7:db:ca:31:b2:44:89:f4:
f3:5d:60:7d:61:b5:2e:bf:12:e9:f8:48:50:64:4a:
2f:b2:91:dc:6d:43:f0:a0:33:69:30:3c:a0:4b:63:
df:b6:5e:db:91:30:67:9d:02:25:0c:af:c4:ce:ae:
1f:cc:58:dd:92:a5:77:9f:56:af:5a:5f:16:9f:d7:
70:a9:9f:99:75:09:02:6f:ec:47:77:5a:47:d3:08:
2a:13:ed:f1:ab:22:5a:8f:2f:7a:fa:a8:3c:91:22:
d6:93:74:ee:3b:42:a8:50:e8:30:c1:bf:b3:fb:e5:
9b:99:33:0b:10:72:8d:09:3b:4b:91:4a:48:c4:de:
ce:76:d5:68:58:ca:a2:bc:04:39:72:ac:36:33:3d:
f6:59:6a:3c:ca:71:f1:3a:6a:4b:b4:29:a5:e2:8b:
10:9a:08:44:a5:72:82:99:1c:1e:aa:04:11:71:8e:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:ED:C4:6D:3D:94:BA:D2:D1:50:08:5B:DF:ED:3B:A6:F7:22:F3
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:53:e7:4f:3f:10:26:69:4f:0d:e5:95:5c:4a:17:d2:7a:ec:
04:39:4c:e3:8f:9c:96:c1:6a:6c:81:8b:4c:0c:5e:bb:b8:d9:
5c:09:fb:53:6a:aa:ed:95:27:a2:d6:c2:f7:56:53:47:42:50:
1e:99:e9:29:27:e5:c9:52:02:a6:b1:ee:69:ad:e8:12:c4:41:
02:e7:3d:9d:99:76:c6:6a:f3:47:52:df:b6:db:b6:78:9b:71:
1a:ba:be:88:b9:7b:94:97:fc:2f:30:c7:6b:c9:a1:6f:c7:41:
3a:16:c6:ef:da:59:4c:b1:5c:dc:b1:08:d3:dd:ef:10:11:60:
65:a2:c6:4c:74:0b:2a:76:81:e4:ab:98:6c:1a:cb:c5:0b:45:
38:7f:da:45:d0:1e:a6:03:1d:91:26:5e:eb:6f:7a:b7:52:3b:
01:ba:3f:35:14:46:72:8e:80:78:6d:28:d0:7f:52:0d:8b:b4:
0d:53:50:8b:cd:6d:81:38:e5:4d:38:03:2b:fa:62:9e:ef:63:
cd:90:fb:38:fa:6d:77:fd:19:c1:70:d7:4b:37:ab:7e:4a:d6:
57:03:4e:11:56:ba:88:90:79:3d:ec:5c:f0:13:d0:83:e5:5d:
ca:cd:aa:46:54:53:db:ca:ca:7e:0e:86:fb:b3:a4:7c:4a:40:
98:f5:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:23:06 2025 by rpki-client