Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
File: uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json)
Hash identifier: 3xDyFjjdRy0IHArNK/vuzDayrXot0njS8HDIlSu7gJs=
Subject key identifier: B8:CC:B6:25:65:08:17:71:BD:C0:BF:1A:5C:1D:04:59:5E:C6:65:BF
Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
Certificate issuer: /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Certificate serial: 019A71B93506BE599692F10EF08F1C747BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
Manifest number: 0DEB
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: UEiFsCsSTC0Pg31Jp2WQ3gV01xE.roa (hash: ITQdPL8nWruiENBkvvq4/6T+xWub5wb4OWq1AfgZvKY=)
2: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: UOqY+mc2ryG6PRGIdknUH7V1WpJ1bBh6copHkVBj5yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:35:06:be:59:96:92:f1:0e:f0:8f:1c:74:7b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=b8ccb62565081771bdc0bf1a5c1d04595ec665bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:22:43:1f:eb:f6:9f:62:68:fa:75:8b:d3:
4b:e3:f7:d0:5d:1f:e7:12:d5:52:9f:2c:bf:61:98:
df:be:c8:3a:37:42:ba:b5:4a:a9:f1:f5:a9:36:ea:
09:9b:78:d8:93:b1:5c:a7:0d:d0:2a:52:9c:10:d6:
c5:61:87:0b:36:20:2f:29:51:40:f1:7f:a3:aa:d1:
af:59:f0:01:01:1d:49:24:f0:69:e0:ba:42:41:6d:
0c:35:77:c6:0a:65:3d:e3:20:d0:ea:9e:fb:e6:69:
34:a1:04:db:79:b3:b0:a1:4f:32:ed:35:83:30:95:
26:65:6b:4a:9c:d6:cc:92:43:b1:82:0b:a2:97:ef:
d1:ce:66:ea:59:e3:fa:ee:27:c2:5f:b0:93:92:75:
14:8e:3e:e2:b9:b5:d5:3b:3a:e0:30:7a:88:c1:5d:
44:37:a4:8a:ae:10:89:df:b6:f9:f6:f7:ee:50:57:
6a:ca:60:4f:23:0d:dd:06:72:6a:74:fd:77:7d:34:
c0:83:2a:41:27:b0:a8:f8:09:0d:d4:66:68:a0:1a:
e5:e3:7b:a3:2a:d3:fc:1b:b3:59:65:cd:64:b7:25:
73:88:2b:02:b6:d1:d4:d5:9d:f9:6d:4c:ad:33:2a:
a3:05:2b:b2:4f:f1:64:ba:19:8a:9f:24:e1:06:af:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:B6:25:65:08:17:71:BD:C0:BF:1A:5C:1D:04:59:5E:C6:65:BF
X509v3 Authority Key Identifier:
keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a9:7f:b7:32:e0:55:74:4b:68:40:23:67:b0:fd:58:4a:6f:
68:9e:56:9d:04:0f:4b:9a:d5:92:48:68:22:1c:b3:ed:d5:a9:
9d:84:58:ab:37:0a:cc:14:9b:61:59:6a:f0:ac:c9:c6:7a:98:
bc:c8:71:8f:6c:09:52:e7:4f:d6:03:89:d8:5a:e7:81:37:e1:
31:59:75:b3:da:ca:be:4f:2e:21:a2:08:2f:d8:96:85:a2:b9:
e7:44:be:a2:08:dd:48:17:be:80:0b:82:7c:24:8b:84:24:2b:
52:e2:ec:8b:0e:99:0e:07:f5:ec:bc:b8:80:53:0a:01:0f:6a:
49:ee:d1:4b:fa:e6:e1:3c:88:61:8a:c1:ee:dd:89:1e:f7:7f:
04:a4:30:6a:8a:af:57:5b:4a:00:00:1d:b1:3f:64:a6:7b:ca:
32:5c:1c:fd:d0:ed:fc:a1:0a:3e:fa:f8:10:62:74:bc:a3:f0:
42:ee:af:f2:49:24:ec:1b:51:99:ab:33:1a:2c:bc:19:59:d1:
1c:8a:ec:2b:4c:e5:74:4b:85:49:9e:06:68:c8:7e:b0:31:fe:
76:37:f1:05:cf:3a:a4:d2:e5:4b:01:55:98:1f:01:cc:22:70:
04:24:64:5a:0e:23:b5:d3:78:8a:eb:b9:29:4f:8a:f6:3a:4a:
42:ba:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:24 2025 by rpki-client