Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: bFxXekeL8o4D6+G3Av/IeXAKPADidiDfpLGULNmVXTY=
Subject key identifier: 0F:A9:7A:D3:C3:1B:80:DE:59:C5:C9:3E:B0:E9:A9:A2:8F:0D:65:EA
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 019A202D84CA335BC1A54672BB73798F762E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0F78
Signing time: Sun 26 Oct 2025 11:00:45 +0000
Manifest this update: Sun 26 Oct 2025 11:00:45 +0000
Manifest next update: Mon 27 Oct 2025 11:00:45 +0000
Files and hashes: 1: LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa (hash: mQpu5Z0eDQkFYVXPC9Ju2CwxJctFEU3LSWItHzUvqPk=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: C02Y/49dghU1cck2obdGUcpEhT0gP3fxxCAfqN59x9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:84:ca:33:5b:c1:a5:46:72:bb:73:79:8f:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Oct 26 11:00:45 2025 GMT
Not After : Oct 27 11:00:45 2025 GMT
Subject: CN=0fa97ad3c31b80de59c5c93eb0e9a9a28f0d65ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:44:17:06:8e:65:91:c1:7c:2a:59:d5:72:
93:1d:fa:3c:d9:ae:12:f2:8c:d3:fb:e8:3e:d3:53:
b4:a5:a3:b8:06:2b:01:64:05:5e:57:e8:ef:f1:ef:
c3:83:2e:9e:19:fb:3a:d8:72:f9:ff:6d:2c:79:8e:
31:9e:57:8c:3d:84:5e:28:8a:a0:bb:81:ef:a9:d1:
91:c4:fa:67:4c:78:06:96:9a:0a:a0:85:94:ff:9b:
fc:3e:c2:c5:61:fa:fb:85:c4:f7:18:de:1d:a8:31:
0e:68:fb:19:61:77:ab:e2:f5:b4:9c:26:6c:ef:af:
2b:9b:5d:b8:fb:31:e7:03:cd:1a:c7:7e:bd:bf:c1:
03:08:4d:fa:99:f3:77:f9:82:e2:dd:2a:cb:84:5d:
60:c9:c2:26:84:19:26:77:f3:7a:38:95:5e:51:e6:
f7:41:33:7b:7e:14:6d:29:7a:2b:6d:9c:76:d5:86:
bf:c5:6c:c5:44:75:03:31:29:26:8b:2c:46:7f:72:
0e:70:03:91:3d:e4:a5:68:93:82:09:ec:ee:11:52:
24:53:cf:fa:53:dc:2c:26:59:f0:2d:c4:c4:8e:ff:
1b:fe:b1:a6:7e:dd:b6:6e:08:e0:53:ed:ed:44:49:
11:86:12:2d:29:23:f1:ca:b2:47:ee:25:9d:b7:d4:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:7A:D3:C3:1B:80:DE:59:C5:C9:3E:B0:E9:A9:A2:8F:0D:65:EA
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2b:c1:be:ec:23:ec:05:44:c9:78:82:6c:62:dc:07:4a:14:
44:30:aa:a6:22:02:58:f2:cf:08:e8:03:73:9a:a8:d3:bf:5b:
b8:ff:0a:52:12:92:f2:39:e0:21:38:64:18:87:20:89:39:5d:
98:2f:92:15:31:93:55:21:1b:68:7c:d2:be:46:13:e5:72:3a:
b0:54:94:8e:f8:4a:98:92:da:59:68:9d:23:9d:e0:9f:8b:1a:
0e:a2:0f:24:cd:89:ec:fe:42:90:9f:76:6b:73:e6:38:58:ba:
68:69:32:6e:96:9a:c1:f1:54:e5:76:2e:6d:47:bb:13:a6:68:
68:b1:cc:47:26:88:79:0c:af:df:ec:29:38:14:51:cf:9d:12:
2d:ad:13:35:aa:d1:aa:0a:44:21:9b:88:db:3a:c7:cf:55:80:
43:44:d3:69:2b:dd:d5:f4:5e:6e:74:f8:30:a6:35:9a:58:19:
95:a3:d8:87:16:b2:6a:4f:c9:42:89:2f:b7:6a:b2:49:51:e3:
7d:3e:28:d9:2c:7e:27:c7:b6:86:c4:48:38:18:af:09:93:52:
6d:70:53:db:94:44:ae:fd:4a:07:f9:95:b4:d4:4c:7c:38:e8:
51:85:7e:85:18:ae:b1:3e:65:45:99:ce:95:59:c4:0d:00:c1:
85:20:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:42:54 2025 by rpki-client