Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
File: uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft (raw, json)
Hash identifier: aRUGl6IeKtaYfy5cMGp7tnBuYJPjMTVqMgq2j7hjnRs=
Subject key identifier: CF:00:CA:A3:B9:CE:10:BA:8A:54:60:BD:F5:D0:1D:56:45:51:3F:EF
Authority key identifier: B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
Certificate issuer: /CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Certificate serial: 019A7149BDA0CA8BDC945BBA41574886ECE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: dx1DsNdC0zzf80gFyxTg9VFR8p8.roa (hash: wJSJefvy6pAquwxe0d0SzcWI3aTdl65uj7QEQlUElKE=)
2: uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl (hash: /lMWm80TM4g+T4zJWviuSyHCtqkKVPLp+Ph2x+wTlbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bd:a0:ca:8b:dc:94:5b:ba:41:57:48:86:ec:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=cf00caa3b9ce10ba8a5460bdf5d01d5645513fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:95:b2:7e:f1:b0:31:4f:c9:ea:a0:12:92:
65:be:b9:69:76:57:c6:81:03:0c:9f:a9:ef:6f:8b:
cb:f5:0f:34:4e:19:3a:5a:99:36:0b:61:1d:7d:2a:
65:a5:b2:f7:1a:61:45:fb:52:5c:3c:a4:64:88:ff:
75:67:4d:22:87:b4:c7:1a:82:1a:44:1c:00:cc:37:
d3:f4:36:96:d4:5a:c8:89:18:1f:bc:e0:4d:10:fb:
e1:99:1a:b5:db:78:16:b4:da:82:e3:a8:7b:b1:60:
63:a8:c1:a5:2c:b6:2c:08:b0:3e:95:f8:05:a1:26:
f4:3c:6a:05:fb:c1:49:b9:c9:b1:df:ad:eb:db:10:
ab:32:63:26:31:ef:d5:73:a2:88:a4:9f:bc:4c:d2:
e8:d4:ac:49:b0:77:ed:00:4f:28:49:d9:ca:ca:a2:
17:e6:d3:c8:fa:3c:9a:b0:2a:e5:89:56:90:16:99:
4c:f1:58:66:c8:ec:ac:29:14:95:32:a2:f3:34:cb:
77:fd:68:5c:ed:b5:1f:a7:64:f9:f7:2a:b6:94:99:
37:6b:c2:f1:43:96:5f:61:0a:c7:12:40:38:6d:71:
f5:89:c2:6a:02:4e:a8:d1:c1:1c:5d:26:00:83:0e:
1b:0b:35:78:fd:84:7f:99:5f:6d:d8:89:3a:6a:eb:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:CA:A3:B9:CE:10:BA:8A:54:60:BD:F5:D0:1D:56:45:51:3F:EF
X509v3 Authority Key Identifier:
keyid:B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:42:1b:d4:da:47:94:0e:ff:7b:04:c2:77:cd:f3:dc:f3:6b:
ec:15:1c:8b:8f:05:c9:e4:b7:cb:5a:ed:0d:e1:7f:dc:48:fd:
de:4d:c9:3a:bd:94:f8:32:f2:5f:a2:95:c8:11:8c:4a:2f:ef:
1f:ce:64:d1:8b:40:6d:b8:50:a5:aa:ae:cc:9c:e5:1b:92:93:
b2:a8:e2:ef:c9:94:91:06:04:5d:90:b1:15:c7:d1:33:17:dc:
9f:2e:5a:b8:b8:fe:b5:75:27:9e:ad:fb:ab:fb:49:3d:fa:6a:
17:bf:35:5b:ed:d0:7e:b7:8f:d3:58:ad:f5:ad:b7:98:8d:ed:
d9:c9:8b:40:74:f2:ca:40:26:69:23:05:d1:57:db:25:12:fa:
e2:24:24:42:90:3b:1f:56:28:f2:2e:09:9b:a9:c6:00:35:36:
17:e2:3f:2d:04:de:ff:b1:a0:5f:89:45:5c:4b:11:22:8a:11:
83:0a:de:68:aa:2d:f0:ae:d6:98:31:41:26:d4:42:9c:57:04:
ce:44:1c:cd:89:8b:f4:73:db:72:f0:2c:22:8a:19:4d:34:c5:
dc:1e:55:51:cd:e4:51:fd:45:de:10:82:22:04:36:da:f6:c8:
d3:b7:0b:06:6c:78:4a:9d:29:21:ef:31:c8:c6:cc:50:06:51:
ab:c9:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:20 2025 by rpki-client