Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File: uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier: WpcsJuMj4k3ubCNtVbpyfpgdlkp/ironh8E+7336VY0=
Subject key identifier: 87:B1:8A:6D:5B:1C:C0:0E:4D:0F:7A:E6:57:A6:71:42:DB:42:87:F7
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial: 019A729388A6ACEBA8642F5759D773CA7898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number: 06D0
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: 11jEC650m0CZG4LpQL4zmUd5QaY.roa (hash: 7UGZEAgneJXq9Giu9H7nZKjtUjxT92keVlw2sUKbxho=)
2: 4B7MfDl6NByJmRgXlWM71-ODWyI.roa (hash: 9aZO8CFVuoeDGT3o5gurHwnNU71DvTs2u9IU71mfm6I=)
3: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: XSTv0VS6YO/4khz4Z8YDr0jFMnE2mJ0x/kvkS8DaW9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:88:a6:ac:eb:a8:64:2f:57:59:d7:73:ca:78:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=87b18a6d5b1cc00e4d0f7ae657a67142db4287f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:d5:00:99:71:2c:48:e9:65:11:1d:dd:d4:
1a:ad:1e:a4:c5:79:cc:29:b1:1a:1f:5b:fb:db:43:
09:53:c4:3e:66:c4:38:7b:c0:b6:6d:e7:4c:8e:4c:
15:13:0a:b6:5b:59:4a:91:58:c6:15:cb:97:8a:f5:
82:1f:e7:09:4d:6e:04:0c:eb:e4:bc:c2:ec:69:1f:
b2:97:0f:31:e5:7f:17:91:bf:37:45:e7:1a:09:22:
a9:eb:f8:f9:b5:7e:80:b2:37:a5:5d:96:bf:1c:0c:
82:28:b1:62:29:ae:20:db:04:a2:a1:2c:f9:cc:1d:
d8:47:81:5c:9f:33:e8:14:8f:78:d3:39:14:6a:f4:
00:1e:5d:64:ac:2d:a3:c0:ba:9b:19:1e:00:9f:b0:
e2:f3:1d:90:0a:50:c5:4e:c7:3a:ad:cd:e2:34:12:
70:f5:b9:eb:a1:4d:c1:aa:46:ed:e5:c3:3e:d3:3d:
b4:a9:6a:f6:ab:9a:66:34:c5:cd:57:b1:c1:dd:7e:
46:47:56:5e:72:d8:77:95:16:2f:00:c4:6f:21:b6:
1c:94:1a:7b:5e:a6:f9:9b:3e:2e:bf:80:29:26:a9:
dc:02:fb:76:09:d8:f1:1e:99:85:05:af:86:72:b4:
07:dd:d3:1b:56:06:df:68:0e:e8:dc:c8:b2:48:bf:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:8A:6D:5B:1C:C0:0E:4D:0F:7A:E6:57:A6:71:42:DB:42:87:F7
X509v3 Authority Key Identifier:
keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:6c:ab:10:4b:6c:f4:43:f7:b2:8b:b1:3f:7a:9b:d5:d6:
ca:a1:a0:b1:b4:0a:63:e7:e7:e6:bd:c7:c1:50:65:23:74:0f:
d8:ad:76:fb:b0:b4:93:43:0b:c7:93:29:12:f9:21:cd:df:25:
63:26:26:74:5c:4b:99:56:dc:7b:5b:f7:74:18:56:f7:bb:b2:
75:8b:c1:ed:c7:ab:0e:77:ff:39:87:2d:71:f2:a6:01:c4:61:
e3:04:6b:12:5c:d1:2b:a1:48:5a:b4:65:86:e1:5a:7e:bf:36:
91:e7:1b:af:16:37:92:7f:1b:8a:92:61:84:f0:5a:1f:c4:fa:
14:07:37:fc:06:b6:e6:4d:4e:cd:02:2f:c2:c5:a1:95:d2:a3:
52:92:f9:07:c9:88:16:fb:9b:48:66:06:32:d5:16:a2:3f:08:
9a:6c:48:ff:85:e4:ac:33:ff:d0:5e:7f:83:b0:d7:52:70:3e:
b2:23:a9:95:be:48:c5:60:6f:73:ee:30:2e:a6:5d:52:cb:a6:
1a:d8:4d:26:e3:d1:98:c3:ae:bf:8d:44:1e:bc:8c:ba:4b:92:
72:24:ba:7d:8d:98:60:6a:8b:73:9d:65:89:7e:bc:05:3b:c7:
cd:62:6b:bf:da:3e:b4:3d:b9:09:55:cd:0b:57:97:31:5e:6b:
8e:6b:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:30 2025 by rpki-client