Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier: WaacuYrP03M81j74SFI+KoM+GZlo1KRsuQYxhP0M9rA=
Subject key identifier: 93:DC:D8:F4:BB:9B:0F:6A:96:D6:21:58:90:E5:F2:8C:97:76:87:57
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial: 019A73010E108D72D71BBCE951092B35B747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number: DA
Signing time: Tue 11 Nov 2025 13:00:40 +0000
Manifest this update: Tue 11 Nov 2025 13:00:40 +0000
Manifest next update: Wed 12 Nov 2025 13:00:40 +0000
Files and hashes: 1: 5GYWrzRu65AjS73_-IgwDSj8n-Q.roa (hash: YdE2CXn8HuPLnZ5nEOMoIyiMWMH03XMYxsoKuzVp7Lc=)
2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: gyfNVYVExrDSyu2LnE/owHjVeK9k9X6c2SCNK0wEPng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:0e:10:8d:72:d7:1b:bc:e9:51:09:2b:35:b7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
Validity
Not Before: Nov 11 13:00:40 2025 GMT
Not After : Nov 12 13:00:40 2025 GMT
Subject: CN=93dcd8f4bb9b0f6a96d6215890e5f28c97768757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:e0:ed:dd:2d:0d:39:70:0a:ce:95:2c:83:
52:74:18:c1:79:c9:85:49:1d:ec:79:b9:2b:59:2e:
dc:c1:3f:04:e7:05:39:ca:38:f8:40:a8:c7:fc:a0:
a7:c8:35:fe:89:3c:89:7d:93:5e:ab:3f:54:71:2d:
52:de:e1:48:07:73:07:cd:20:01:42:8e:b8:6a:82:
a4:61:4f:ee:e8:20:98:c7:09:ed:0d:c6:e2:08:94:
5a:3c:fa:98:e8:c1:79:6d:3a:cd:5d:fe:26:d5:9e:
30:89:d0:92:cc:b2:8f:09:50:0d:c0:a4:5c:f5:ee:
63:8e:d4:fd:73:0d:a0:3b:65:b5:a0:3d:f5:de:01:
c9:14:d5:36:b7:73:d3:3e:91:31:a2:35:54:79:74:
13:35:27:57:d8:63:93:2a:bc:57:43:b6:ba:c2:98:
ae:12:5f:78:1e:b1:c1:f8:b3:c1:66:5c:70:87:a2:
28:14:f7:f3:9c:2f:56:27:65:8a:b2:26:51:e6:84:
7d:d3:c0:4e:e8:98:9e:10:5b:55:80:0c:b2:0d:3d:
bc:96:95:cf:4d:d9:ba:ce:0f:fa:4f:5d:9f:36:a5:
e5:80:3e:ae:54:93:81:09:b4:a0:52:4a:2b:55:de:
ae:55:ad:32:99:31:4e:b5:ef:5d:d6:f0:59:b0:54:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DC:D8:F4:BB:9B:0F:6A:96:D6:21:58:90:E5:F2:8C:97:76:87:57
X509v3 Authority Key Identifier:
keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4a:c2:ec:4f:9a:79:5a:37:f6:3a:06:d7:8b:ba:a7:6c:f6:
9f:16:b7:3e:25:8d:31:5b:55:7f:92:dd:ed:b5:03:cc:13:ab:
de:28:0a:37:4b:11:91:28:07:db:b7:45:91:af:93:37:12:ee:
47:8f:b0:8c:a0:0f:71:9f:81:f0:06:91:9d:47:de:40:46:71:
85:3f:40:bd:34:09:d4:9c:d2:1a:83:dd:10:56:fd:6b:05:f1:
8d:6b:6e:7c:35:ab:f0:2a:36:54:a7:b3:aa:47:c9:d8:41:68:
2a:c1:9b:fb:d8:9f:51:cc:dd:b8:19:fd:48:4e:fc:41:d0:2e:
bd:10:d9:6a:fb:87:fc:84:e3:35:b6:b2:ec:e4:a7:a6:11:1f:
e2:b1:6a:73:15:37:32:a3:4e:9d:bb:8b:1d:3a:05:7c:d0:50:
a8:1f:5f:90:4b:85:c7:57:f2:03:5a:7e:1e:59:0d:98:a0:c4:
23:8b:3d:31:30:e0:a7:59:f6:12:96:dd:f7:9f:7f:4d:b4:88:
de:be:35:5a:d7:39:db:19:ce:8f:c0:6b:fd:2b:12:e9:7c:37:
e0:7e:11:ab:6a:9f:33:46:31:cb:54:67:1d:fb:0b:c1:1e:0c:
86:08:51:ce:56:ad:17:16:1c:d2:fb:b8:13:84:8c:42:f3:22:
1a:22:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:45 2025 by rpki-client