Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File: uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier: s+fihMKQDeIjrdDGUfVe0x1BQ69NDmOdzLN/s1q7Goo=
Subject key identifier: F8:F5:6B:ED:A5:C2:BA:F3:58:A2:97:AE:95:05:29:6C:64:32:63:1F
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer: /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial: 019A71B8A8D49A96A786E8FF31CC1CBA8603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: mP2MGTRsK6NuG28OrugHv8ww14nehFK4C1x0gfOY9sI=)
2: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (hash: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a8:d4:9a:96:a7:86:e8:ff:31:cc:1c:ba:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=f8f56beda5c2baf358a297ae9505296c6432631f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d3:4a:57:80:94:3d:b1:8b:e9:5c:05:a9:ad:
9c:90:18:d4:cd:21:9e:30:8a:cf:d7:f2:8a:ba:94:
b3:3f:9c:1f:45:3c:a3:9e:e0:81:cd:a7:47:1b:3e:
75:3a:f7:22:d2:f1:95:b7:f5:48:93:e8:ea:c3:47:
5c:52:d2:03:97:d7:b8:76:f5:77:b0:e7:7f:bd:2a:
28:4d:07:0e:0d:04:87:f3:36:c2:b7:b5:40:9b:47:
28:63:d3:8d:26:fd:76:5b:fc:da:cf:3d:89:4c:6d:
9d:ed:be:3c:cd:74:f5:e4:34:f9:6d:aa:50:06:d6:
99:42:b2:13:00:4b:7f:7f:44:4c:bd:f1:65:4e:17:
e1:b0:91:7e:90:04:70:37:ee:8c:f5:d4:29:3a:25:
e7:90:8f:1a:b5:99:ff:89:3f:90:aa:ef:59:2a:f5:
c8:31:8a:f8:f6:18:f5:88:73:0b:c1:83:8e:19:d8:
30:58:5b:07:57:55:e3:54:03:01:88:0a:18:4e:0d:
21:42:fd:91:70:e6:b6:c1:8a:0c:fa:ba:4b:6c:b8:
53:39:23:70:e1:9f:35:6b:8f:33:e8:60:a6:4c:9b:
89:5d:3b:da:ba:9e:00:29:58:89:bc:0d:b5:de:c2:
58:b7:2a:4b:80:91:3a:e5:61:f9:22:f9:74:f5:37:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:6B:ED:A5:C2:BA:F3:58:A2:97:AE:95:05:29:6C:64:32:63:1F
X509v3 Authority Key Identifier:
keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:99:f7:3f:f3:11:28:b7:10:f3:ef:15:0e:df:cb:33:2d:ac:
ba:0c:a5:f9:51:ed:8e:bb:f1:b6:13:f1:5d:68:71:31:e1:43:
a6:2d:95:38:92:7e:99:e1:0f:54:5f:a1:f7:b3:e4:a5:35:15:
08:47:17:7d:2c:09:bb:a4:9b:fa:52:92:c6:12:fe:4f:3d:e5:
66:f3:2e:50:4a:52:3a:8f:9a:86:58:94:53:63:1c:0b:a3:fd:
e2:94:9e:76:d0:76:03:a2:89:c9:5e:12:5a:5f:ed:c6:eb:9b:
87:92:29:eb:b7:62:3f:36:f5:59:5e:a2:a4:dd:15:5d:fd:49:
f0:f5:de:aa:62:e7:d0:f3:ba:76:72:c2:0f:34:38:2c:10:64:
3e:a2:b6:1d:dc:14:0c:01:2c:47:b5:be:6e:a1:dc:47:a9:b9:
21:ac:d2:95:03:8f:51:10:12:9b:d1:76:ca:dd:42:d4:1b:ec:
ae:b3:ff:e5:e2:3d:3c:a8:b7:12:79:35:3d:5e:8c:de:ad:38:
4a:d7:f6:38:84:6f:b7:e1:f5:cf:f5:c7:23:1d:ba:5e:05:11:
97:c4:61:29:1f:6d:e3:e4:1f:fd:94:bf:22:3a:b9:5e:f7:c9:
fb:10:4a:67:de:21:c7:1d:7a:b0:56:16:c7:06:73:27:98:a2:
dd:b2:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:58 2025 by rpki-client