Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
File: uetMLe4ILeo7gNjvslpGhlcIy7Q.mft (raw, json)
Hash identifier: /5cqjR9A969or2HzaoliMB8E63V2MRTZAqZw+u3JgwM=
Subject key identifier: FA:45:96:3E:B7:4D:0E:5D:0E:12:96:24:11:84:C1:3E:AF:47:DF:BF
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Certificate issuer: /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial: 019A7225EB2CCE08FC9B5237E3FDB28A01E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
Manifest number: 0FA4
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: Ujha7XxP98D3xulcV7MFKJ2FUK0.roa (hash: fQlcIKdy/eaJbe/2M1GqCZ9CE3CRZB+bKoGJevwXPtw=)
2: uetMLe4ILeo7gNjvslpGhlcIy7Q.crl (hash: meYGsMofUml8Lyrjb+lwHHEFpgzBZxCgUbjKVcZKnCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:eb:2c:ce:08:fc:9b:52:37:e3:fd:b2:8a:01:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=fa45963eb74d0e5d0e1296241184c13eaf47dfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:c6:7a:0f:ff:68:5e:0e:72:70:eb:c8:bf:
df:99:4b:d8:df:c0:f5:6c:c2:58:7b:8d:b1:e9:ce:
ea:0e:a9:04:b0:b6:73:ef:f4:19:12:68:89:43:f1:
9d:b2:cd:86:47:03:8c:a3:76:12:7e:ad:94:6d:22:
e7:eb:71:05:6a:cb:0a:b7:c7:e8:13:47:0d:15:49:
36:e5:62:8b:76:cc:48:c5:b9:76:e5:1f:ac:dd:55:
58:b9:91:4e:01:8f:6b:27:01:67:14:9d:60:f2:85:
1e:50:23:31:d4:39:71:33:d2:04:da:2e:33:2a:3a:
b6:53:7a:62:8e:0b:35:e9:dc:31:5f:a9:a6:41:92:
9e:c5:2e:c6:de:be:01:75:c9:56:61:cc:59:64:01:
2b:fb:3b:7d:be:db:b4:9b:7a:9c:9b:4e:77:39:63:
4c:76:9a:f7:56:aa:90:e6:12:43:3b:44:ed:32:87:
48:9c:44:28:ab:4d:54:1d:ea:33:a5:e9:41:15:4f:
42:0a:6f:72:5a:ba:ce:0f:a0:c4:63:09:ab:6b:e5:
45:10:22:d1:5a:9d:76:fa:88:99:56:a7:29:a3:fe:
ff:6f:e6:35:ba:12:1f:4a:b3:1d:99:8b:9e:ad:47:
ef:3c:5f:0b:ac:41:85:00:ef:75:9b:01:e2:52:3e:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:45:96:3E:B7:4D:0E:5D:0E:12:96:24:11:84:C1:3E:AF:47:DF:BF
X509v3 Authority Key Identifier:
keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a2:33:71:02:49:ee:9a:95:81:d5:78:8b:97:e5:be:d6:4c:
a5:e8:76:84:3c:66:64:c5:19:c7:d4:93:7b:dc:6b:77:ab:25:
0d:46:cc:85:bf:85:06:0d:b0:99:29:08:ae:fc:c8:eb:3f:b1:
06:e3:f6:09:7d:26:6e:35:26:09:f3:e4:fe:47:5b:25:32:89:
22:e4:93:3e:79:66:53:d0:0b:f8:39:b4:68:b1:b5:99:fa:c4:
78:7f:f9:49:cf:90:01:7d:54:91:bf:7a:ed:5a:49:2c:32:79:
99:da:47:56:bf:3f:a5:1a:87:0f:6c:ab:9a:7d:0a:92:d2:b4:
d4:c3:ad:ef:86:b3:8a:7b:a7:14:0c:3b:f1:14:41:a1:0e:65:
2a:e4:3a:fd:d5:94:de:37:ce:8b:a6:75:41:06:22:84:53:de:
10:e7:ad:a8:29:85:2d:03:4b:3b:fd:95:07:6b:ac:3a:cd:cd:
d9:80:22:d3:b3:e7:c7:2e:d0:f7:8f:38:9a:33:e5:66:3f:f4:
d0:39:38:ec:19:40:46:62:91:49:cd:58:63:00:1c:ed:64:f1:
9e:e9:95:1a:d0:4b:f1:4c:45:a1:78:e2:c1:a4:12:9c:8a:94:
71:ca:c0:32:65:d5:22:cf:c6:0e:19:30:d5:bf:50:8c:fe:7b:
98:2f:6a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:22 2025 by rpki-client