Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: EiGXa83PG7l1DB/2qOgurCEw8S8M1Vzu56tKMGLR+Ig=
Subject key identifier: A3:12:EE:F1:27:4A:26:E0:A2:8E:D6:2A:99:B8:D3:BC:10:2E:E2:88
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019A09A552E43DEFB701CA58ECCB364E37C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0B93
Signing time: Wed 22 Oct 2025 02:00:20 +0000
Manifest this update: Wed 22 Oct 2025 02:00:20 +0000
Manifest next update: Thu 23 Oct 2025 02:00:20 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: rcw41tMHAi9bpv+dufdR7KLHuQTBHbqEWXc+ou2mBpk=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:52:e4:3d:ef:b7:01:ca:58:ec:cb:36:4e:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Oct 22 02:00:20 2025 GMT
Not After : Oct 23 02:00:20 2025 GMT
Subject: CN=a312eef1274a26e0a28ed62a99b8d3bc102ee288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:6d:ad:79:7d:e2:c6:50:46:58:97:be:00:
10:88:f5:40:27:0c:1b:b6:80:12:39:57:78:9d:8a:
b4:3c:f4:d2:20:a3:fa:90:c9:aa:ea:62:dd:fd:aa:
40:e5:12:8d:a1:64:b9:ea:26:b7:88:6e:ae:ff:23:
03:72:f5:b7:42:da:70:1d:82:87:91:fa:81:4c:ba:
b7:aa:a6:ce:78:41:e9:a9:bd:65:52:e1:51:b4:d3:
4d:e5:fe:2b:1a:10:7d:b7:73:27:3e:7b:be:91:24:
58:91:cb:4f:64:25:9c:38:d9:94:26:af:a6:d6:d6:
06:ee:84:d0:6f:d4:b2:a5:52:0a:a6:00:88:5f:76:
00:63:de:da:33:c9:1d:cc:81:5b:b6:51:8e:f8:02:
8d:ad:86:52:45:2d:af:4c:79:ca:cd:47:88:73:5c:
79:d0:60:e1:24:cf:1d:c9:2b:06:d8:cc:94:87:17:
de:74:00:3c:8a:d2:26:ad:45:ce:f0:fe:d0:ee:58:
70:15:02:6d:e2:98:a1:70:f5:fc:c9:90:e6:20:ad:
6f:d9:68:5e:d2:45:eb:79:54:0b:65:09:31:99:63:
26:94:94:1b:61:bb:f2:84:cb:7b:00:66:30:29:8e:
9b:1a:c8:fc:03:7c:4e:ea:5e:17:0f:5f:d2:0a:27:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:EE:F1:27:4A:26:E0:A2:8E:D6:2A:99:B8:D3:BC:10:2E:E2:88
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:87:bd:05:09:9c:eb:84:9e:5f:da:a4:ad:10:49:4b:cc:08:
e4:be:f8:0f:72:95:2d:07:64:c2:0b:fa:42:5f:88:9b:8c:06:
5a:26:e2:d0:cd:5a:31:bb:f4:b1:60:b4:33:d3:5f:46:8f:c2:
c4:53:be:a9:dd:3b:f1:45:c0:c0:e5:5d:85:c8:35:bf:95:f0:
8c:16:5f:9d:a9:c5:70:96:39:8f:ea:b0:e4:94:0f:bf:48:4c:
4d:9b:d6:7d:06:03:3a:92:bd:9f:6c:c9:96:9a:26:99:7f:ec:
df:63:ab:f6:97:37:36:76:4e:60:5c:d7:8b:62:1a:e4:7a:33:
ac:35:83:bc:c0:00:59:47:89:22:49:bb:57:da:02:3f:c7:7c:
6b:13:9a:34:33:55:96:f3:4e:7a:90:c2:88:21:67:e4:84:a2:
72:3f:b5:4a:8e:69:e6:c2:ce:29:c0:ac:09:76:1d:7a:b1:ba:
f7:27:91:5c:0e:ee:0a:30:c1:ff:d1:58:ed:fd:51:90:dd:60:
41:3a:da:d5:c1:06:f8:b1:09:78:53:ff:2a:e6:8b:12:e3:27:
85:41:60:b5:d7:0e:46:df:3a:b4:4f:4f:17:de:b4:82:58:bd:
fe:0f:18:b4:fc:b4:c0:1f:38:df:db:53:b6:50:db:05:55:82:
94:2c:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:11:41 2025 by rpki-client