Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: IZnxpAo1fS8peF1e2gx0lYgHGmouhrnXz5w/p53XaQQ=
Subject key identifier: CB:08:35:CF:70:0B:12:59:AF:3A:83:17:D2:63:AF:95:1D:F8:D6:5B
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019A0147F1B5C945740E3C85D0CAA45BEEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 067D
Signing time: Mon 20 Oct 2025 11:01:23 +0000
Manifest this update: Mon 20 Oct 2025 11:01:23 +0000
Manifest next update: Tue 21 Oct 2025 11:01:23 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: ZK0xen4pgnvzDDemXdr1lp8rgESUkPj33SbUqPZKT0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:f1:b5:c9:45:74:0e:3c:85:d0:ca:a4:5b:ee:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Oct 20 11:01:23 2025 GMT
Not After : Oct 21 11:01:23 2025 GMT
Subject: CN=cb0835cf700b1259af3a8317d263af951df8d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:3c:d3:7d:a0:08:9e:34:1b:93:01:48:52:
87:29:dd:61:ce:5f:ac:d3:1a:07:d7:64:0e:c1:4e:
0d:4d:71:ae:4d:e8:89:df:74:c5:ff:87:40:3b:14:
7c:ca:08:86:c9:ff:8e:85:55:30:d0:d3:9f:b4:eb:
fe:02:2e:70:bc:f9:cf:16:1e:f6:bf:02:0f:0b:23:
40:82:48:86:29:ba:1a:a5:c3:7b:b8:9d:24:a6:a7:
98:f4:8f:c9:36:78:87:fb:f7:85:ee:0d:03:1c:6e:
e9:18:21:17:b1:de:37:12:0f:6c:31:32:65:6b:12:
0b:3e:4f:e2:ba:1b:80:15:b9:5e:74:14:02:89:f2:
46:27:d7:20:f7:6e:d1:19:cb:7e:a6:72:46:68:81:
57:48:db:23:95:55:a4:7a:2c:51:8a:00:a6:f3:ec:
39:76:25:9b:2d:ee:b9:9f:8b:cb:64:1e:7a:84:f5:
1d:6b:43:fb:f1:0b:86:e0:ab:bf:1d:66:de:29:ff:
6e:b7:b4:81:b0:f5:72:29:40:17:7e:94:8b:98:27:
62:ac:2e:eb:63:21:b4:42:fa:40:60:75:3c:4c:93:
1c:5f:11:9c:d5:c5:0f:92:27:8b:7d:15:5f:aa:94:
90:91:4a:8e:62:0a:cd:10:c4:c9:35:9e:3d:77:37:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:35:CF:70:0B:12:59:AF:3A:83:17:D2:63:AF:95:1D:F8:D6:5B
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:78:c4:0f:97:3d:d1:dd:6b:d8:7b:af:24:f1:f9:1e:21:76:
19:e3:bb:02:92:2a:1f:b0:92:16:3a:01:48:ea:85:fd:70:4f:
09:0f:89:32:c2:41:60:d3:33:c9:ef:8b:a0:77:d3:3d:5c:ac:
bc:cb:b6:9c:d5:48:7c:e5:f0:85:b9:9c:60:51:3a:a6:53:7f:
e0:76:86:21:bb:c5:ea:2b:b8:26:c2:aa:62:20:7b:48:ef:28:
6a:52:95:f2:fd:7c:4a:27:15:4b:c7:f6:02:2e:65:5a:ee:7e:
c7:fe:19:5b:0d:f0:b0:74:0d:46:ad:e3:d4:1d:4b:06:f2:52:
36:98:2f:4e:85:2c:e8:89:b8:ad:e0:92:97:1e:2a:02:07:3e:
8b:fc:bd:83:2e:f0:ec:45:da:59:29:3e:cf:35:c0:e3:d0:0a:
d7:73:d8:fb:d4:41:2b:ac:4e:64:49:0a:c1:02:96:f6:0d:ee:
23:3b:07:cb:a8:6a:00:b2:4c:e9:fc:10:dd:b3:d0:8b:23:b6:
4a:bd:fe:92:b3:2e:bc:08:9a:45:63:9b:34:8f:0d:3f:a9:34:
ae:f7:e1:83:51:95:10:95:0d:11:3f:46:a4:59:a5:25:74:de:
69:8b:9e:fa:7b:fa:88:25:c2:38:05:50:c6:96:d3:d2:ad:b0:
73:64:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:46:30 2025 by rpki-client