Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: dvTWmIxWsxbQF1Dxr+onLj8r3ASGN8bRS3t+W/nbAIc=
Subject key identifier: 1F:23:61:BA:16:43:07:90:95:51:1A:E6:AC:5E:4C:0A:5E:F8:73:74
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 019A7293449F4536D66A568DE127534726B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 0565
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=)
2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: 9lFnWsO96meIZXgA7bv6XOxP+xpHqmqBD4XjEC07MmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:44:9f:45:36:d6:6a:56:8d:e1:27:53:47:26:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=1f2361ba1643079095511ae6ac5e4c0a5ef87374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:a2:0d:d0:fc:ff:03:fa:4b:b6:2d:d4:46:
e2:96:2c:d8:76:75:3a:ef:80:71:ba:fe:bc:ce:9a:
2b:bd:e5:f2:48:3d:03:12:f7:35:34:ac:58:38:4c:
20:3c:42:d4:f2:7c:5e:a9:22:1d:85:d1:dd:77:64:
51:d3:2e:aa:f2:c7:bb:78:21:e0:56:be:e3:3a:bc:
8d:fb:9c:44:6d:2e:93:c5:e8:98:e8:c2:bf:90:76:
a6:ad:7f:5c:7a:bd:d9:b1:ee:46:d4:d6:68:6f:d6:
aa:10:bc:fb:2a:99:70:ec:73:67:7f:3b:e4:f1:43:
cf:31:33:ff:97:fc:14:57:e1:46:29:83:dd:70:a5:
c8:1b:6d:18:51:e2:2a:fa:83:e6:c7:11:0b:c3:ee:
3c:b3:9c:84:7d:23:ec:3a:d6:8b:66:06:6c:29:72:
c5:0c:81:1d:8e:af:4c:c9:aa:b7:a4:9b:57:2e:a8:
b7:1b:92:31:57:a3:e8:0f:71:88:a6:f9:28:de:a7:
d1:fe:fc:ff:3b:5b:7b:88:ef:a3:e6:78:43:fb:77:
b2:ff:8b:a3:66:35:91:47:b5:79:3d:69:5c:ec:44:
89:51:4e:8c:30:0d:d8:0b:a9:5a:8e:af:18:7d:43:
45:9a:7d:3c:3a:8e:44:9b:2f:f6:b3:23:38:66:0b:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:23:61:BA:16:43:07:90:95:51:1A:E6:AC:5E:4C:0A:5E:F8:73:74
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2b:26:f6:65:56:fa:7e:5a:fc:b5:b7:4d:9d:5d:58:6e:0a:
8c:2a:96:08:6c:f9:dd:87:51:dc:70:e9:e7:db:fc:4b:2f:f8:
81:d9:a0:1a:93:63:be:b8:cf:9e:b0:9a:41:74:10:f6:4f:81:
71:63:45:d5:19:f3:92:56:b2:d6:2b:35:ff:9b:6e:ec:6b:aa:
8b:a0:26:13:02:b8:81:f8:ec:da:87:74:ea:80:e2:37:1d:3f:
73:25:dc:bc:ef:2c:0e:f9:ae:99:7c:69:55:a1:f4:88:a5:ad:
c6:ee:a6:1c:b6:18:be:b4:0c:c3:52:5a:17:06:93:bb:20:88:
25:50:6e:73:f0:75:8e:ff:f1:b6:d7:70:9d:f2:c7:83:d2:50:
b7:62:6a:0a:5c:20:3f:da:e2:9f:66:3b:f1:f1:98:ce:ea:b9:
cc:a1:45:b9:67:81:27:4a:f1:88:41:af:e7:ed:5f:b3:5c:b6:
b5:1e:b3:61:88:36:66:ac:21:4c:34:cf:08:44:0c:6e:07:ca:
c7:37:7d:d3:b4:2f:9b:45:8b:05:7d:30:3f:14:9f:d0:55:d9:
96:77:2c:07:a3:12:20:17:2c:c8:af:55:aa:08:06:e2:d4:a7:
29:a5:4e:c2:ce:4e:55:44:e3:dd:87:5f:20:87:68:2d:4e:27:
6a:6d:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:00 2025 by rpki-client