Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier: DTvfD7sw834l8BcVw8I3N6A33YLfcIFmvq7dB5AXx0M=
Subject key identifier: 4B:E0:C3:39:29:3E:8B:D0:B2:FC:4C:C4:75:D3:31:13:82:8A:46:B5
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial: 019A221B85EFA707FEEDBDBB9FBE74984771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number: 0420
Signing time: Sun 26 Oct 2025 20:00:20 +0000
Manifest this update: Sun 26 Oct 2025 20:00:20 +0000
Manifest next update: Mon 27 Oct 2025 20:00:20 +0000
Files and hashes: 1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=)
2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=)
3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=)
4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=)
5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: YIaKcfxkRDJ6ET4MuQavvgwZ9pSJG6gxHqFetBwaX98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:85:ef:a7:07:fe:ed:bd:bb:9f:be:74:98:47:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Validity
Not Before: Oct 26 20:00:20 2025 GMT
Not After : Oct 27 20:00:20 2025 GMT
Subject: CN=4be0c339293e8bd0b2fc4cc475d33113828a46b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:df:78:ae:17:70:ce:ce:19:55:e6:79:55:
a3:33:85:89:85:0b:9a:a2:7b:54:aa:31:55:06:08:
49:1d:22:6e:39:5c:6e:a2:18:e3:86:9e:19:ec:90:
ba:61:fc:70:30:98:8e:3a:a7:e2:54:42:4e:12:25:
b8:1a:71:c9:b1:b0:0a:5e:e9:a0:fc:2c:f4:66:f2:
06:dc:30:92:53:05:29:ef:cf:26:8e:01:71:06:68:
48:ca:48:20:c1:7d:0b:bf:97:ba:82:00:11:7d:f2:
3c:f1:62:12:5a:78:b7:c0:87:81:35:03:39:62:3a:
19:0d:61:32:f4:74:08:6e:25:ef:d2:19:74:04:19:
1e:72:05:ef:c1:c0:3a:84:eb:1b:93:8f:b2:42:2a:
54:e5:0c:e8:77:34:bb:d2:07:75:87:ac:7d:3f:a1:
1d:72:40:b9:98:64:db:7e:75:00:83:78:56:41:a3:
95:5a:d8:e9:1d:68:e0:b3:8b:2a:10:ed:50:2a:e8:
d5:ef:fe:66:d2:19:6a:1a:d1:96:ca:26:8e:07:9c:
54:d1:e1:07:d9:c6:65:7b:9d:b4:54:18:6e:e9:e5:
1f:d9:39:f4:a9:19:94:64:71:d9:c5:de:9d:3f:ba:
ee:2b:fd:7d:be:88:fd:53:9a:53:c2:36:2c:2a:96:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:C3:39:29:3E:8B:D0:B2:FC:4C:C4:75:D3:31:13:82:8A:46:B5
X509v3 Authority Key Identifier:
keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:df:a2:2a:90:0b:0e:b2:a2:a2:e1:ec:40:8a:40:ab:79:c2:
eb:0d:7d:c0:28:47:c4:68:63:96:bf:8b:ee:ed:4e:a5:ee:6a:
95:e5:56:80:68:69:eb:4c:27:e0:06:1c:99:df:77:70:65:73:
f6:31:06:b1:31:e4:c6:6b:a0:3a:b5:a1:4f:28:d1:ca:f2:44:
18:44:c6:a2:8a:4c:50:5d:67:80:ba:28:b1:a8:38:ad:e7:43:
74:c0:a1:39:df:a6:4d:8a:11:0e:c3:e5:b2:92:78:40:2c:30:
83:54:43:0b:3d:54:9b:c0:6b:e2:7e:17:be:91:3c:68:94:a1:
d6:ab:1c:a6:c9:85:b0:c8:41:e6:3c:17:c3:c8:6b:71:3a:15:
bc:5d:26:35:19:ce:6a:e0:60:5c:64:26:8b:47:0b:19:d7:df:
96:45:07:56:5c:8a:7e:0b:a7:ff:78:a4:c2:fd:11:a0:bc:94:
e1:86:20:34:ed:83:d2:90:02:51:dd:0c:b1:86:cb:30:89:bc:
5c:17:23:62:2c:06:5c:bf:80:95:e0:9e:92:d7:9f:de:d3:a9:
bb:98:a1:df:b7:0e:82:4d:63:79:7c:f5:92:51:f7:30:f9:31:
a3:2b:e2:ba:d6:80:f5:32:0e:ac:cd:48:38:4c:00:83:59:ca:
87:d5:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:54 2025 by rpki-client