Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier: 6GNmt7RmeZd4K7n70k5tC8DwW/sS8BRSm8g+PG57h3I=
Subject key identifier: C4:06:5B:FB:7B:76:73:6F:DF:17:CE:69:D2:C4:55:FC:9D:5B:69:AD
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 019A71EE77025F2C7009E88A0E37F990905C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number: 059C
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=)
2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: WhF6eego6JEGndsKhNbFlQ11ZEDKj+kZzrFnNPASQHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:77:02:5f:2c:70:09:e8:8a:0e:37:f9:90:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=c4065bfb7b76736fdf17ce69d2c455fc9d5b69ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:92:22:d2:41:80:03:e3:09:31:40:38:ba:
58:a3:60:31:c7:24:88:93:b8:55:b6:1a:b6:fd:f9:
6b:d4:ee:fc:a4:09:28:d9:ce:65:c9:2f:43:0e:55:
df:6d:3e:58:9e:01:63:f5:b7:23:0d:9e:8d:ac:9e:
eb:92:48:8d:33:20:45:b5:6e:e4:1f:4a:22:1b:8e:
2a:b1:89:ce:a2:e2:11:a5:3f:44:09:b9:2c:af:16:
0f:e3:06:28:22:6a:0d:2a:b6:b3:dd:4a:f8:42:6a:
cd:7d:5d:d1:48:fa:45:72:2f:39:71:15:61:df:be:
0c:c9:0f:6e:0e:78:53:75:d6:25:73:c5:af:96:63:
ed:25:2b:5a:a3:bb:52:e4:9c:7b:e9:5d:ac:4f:1d:
03:38:88:5c:b1:a7:a8:fd:31:de:5b:0a:4c:fd:9c:
bc:50:9d:7e:ce:24:28:74:83:61:5b:23:00:70:ce:
2b:9b:a3:c0:db:02:44:3d:f6:c2:18:c0:be:ee:69:
8b:cc:47:0b:b8:99:2b:ca:f4:f2:e9:90:c8:f8:a7:
8b:3c:78:eb:da:f0:c2:fc:4e:2f:02:46:c8:43:84:
ae:83:4a:25:87:05:e2:36:82:b3:e9:c8:0c:13:c8:
81:85:ed:df:49:42:69:96:5c:40:db:85:d4:ef:f5:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:06:5B:FB:7B:76:73:6F:DF:17:CE:69:D2:C4:55:FC:9D:5B:69:AD
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:27:19:c7:31:a2:cb:4c:2b:71:30:e6:f2:09:b7:ba:f0:ab:
f1:b9:3d:f7:6b:74:b6:1c:d4:37:88:02:5d:bf:fa:21:04:e3:
65:fd:1b:8f:73:19:a0:7f:5e:c4:c2:4e:05:73:8f:30:7a:f3:
02:7c:b6:85:20:3d:73:c9:a2:6c:8d:80:58:db:25:61:e8:7e:
6d:0b:b0:33:27:a6:f0:25:e1:ba:11:97:08:42:0b:02:2e:22:
00:e5:8a:85:11:96:27:b9:65:9d:f0:bc:50:77:4b:80:45:fe:
69:a2:7c:d8:85:4a:af:54:c4:96:a2:f6:eb:ff:3b:74:13:ad:
d0:dd:05:2e:6e:9e:85:08:1d:af:88:2c:f6:d7:d0:b6:09:d0:
28:f1:d7:aa:00:c6:d0:ea:aa:a7:51:25:e4:8e:42:b9:c1:ee:
82:40:fd:7a:5d:44:c3:2c:e9:da:3d:60:c4:f6:c9:c1:1f:0a:
67:bb:c1:5a:f8:76:1b:a1:aa:eb:12:57:3b:f4:bf:26:75:fd:
4a:d1:cc:4f:3f:48:84:47:79:5e:2f:e7:f8:ad:f8:a9:ad:58:
7c:33:4d:f2:d2:71:77:e4:15:56:96:23:42:c4:7b:eb:ce:e9:
3a:2d:ab:c8:9f:20:f7:1b:46:a3:9a:b1:0d:d1:1f:f5:32:1a:
a7:fa:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:52 2025 by rpki-client