Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: fY3DKu/qlLmjGwP11IkYLdjMQr/Qpnoh+1ftBy0D6eo=
Subject key identifier: 5F:CB:EC:33:49:AF:2C:35:17:F6:E7:34:8C:20:9F:C2:86:7E:94:4F
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019A4DE211AA10C0FCBA34E4CB77CE6EAAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 0658
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: YBiZAY6DAgbp9myPBbs2q+z2Z2WLItA7fCECSzyH1m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:11:aa:10:c0:fc:ba:34:e4:cb:77:ce:6e:aa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=5fcbec3349af2c3517f6e7348c209fc2867e944f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:98:33:fb:3f:0e:59:7a:4b:1b:90:d7:2c:
c4:b2:da:29:22:d7:68:0b:04:f3:94:4f:41:0b:37:
9b:40:97:3a:11:ba:49:93:18:ee:be:37:4e:09:47:
7a:a8:c6:25:8b:01:35:1e:34:d9:ac:65:ba:26:79:
81:98:ba:3d:2d:0b:75:cb:1d:ff:97:d9:d6:f0:14:
26:b2:55:4f:e7:e9:1d:cd:40:bd:bf:88:28:a2:98:
46:7a:19:cd:b9:00:c5:7c:9c:4b:a9:c0:83:89:d7:
a1:73:fa:64:f0:0c:66:07:30:fd:14:75:45:1f:86:
23:24:5d:1c:93:c3:be:56:d2:3c:c7:f3:73:dc:87:
9f:dd:29:ac:96:38:57:33:0f:b5:e9:9f:00:73:62:
a3:73:2a:54:ea:57:e3:62:e1:77:4a:c9:d5:f5:e9:
0e:f4:61:80:16:13:2b:0c:36:87:a8:2d:90:46:ae:
c6:1f:50:08:6c:93:fe:d6:33:cf:e5:8e:9d:07:a4:
04:8b:f2:af:f0:4e:94:59:98:ed:b0:8d:a7:f4:b0:
52:16:43:22:0a:f3:8f:da:58:5b:1a:75:19:ca:12:
19:21:3c:2b:66:e2:5e:b6:57:d6:2b:f3:1d:6b:3e:
09:4c:42:fc:39:5e:f1:80:a6:dd:ae:f8:95:dc:bc:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:EC:33:49:AF:2C:35:17:F6:E7:34:8C:20:9F:C2:86:7E:94:4F
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0f:f1:ad:5f:ac:e8:d8:ea:6a:56:fd:55:43:30:93:23:3b:
01:d3:f0:84:4f:94:e1:d7:2b:94:cd:97:51:2b:55:9c:cd:c5:
fd:fc:d8:a5:d6:a3:42:61:0a:15:7b:f2:b0:52:b7:29:8c:ae:
95:8e:16:5e:d8:21:c1:8c:da:59:6e:4a:f3:0c:0c:06:4d:89:
82:03:de:a9:4a:12:aa:ba:3f:d3:67:5b:70:eb:d5:38:3c:a8:
dc:04:5a:98:65:41:b6:97:be:80:eb:ba:d7:50:3b:f2:b4:e6:
b5:8e:4b:68:2b:1f:c5:7a:b6:08:cb:d2:93:c5:27:8b:b2:1f:
fa:91:74:fa:65:ec:42:75:dc:76:01:c6:61:40:d2:4c:6b:ff:
05:50:03:ba:ed:d4:77:69:99:8c:39:df:53:eb:de:16:9f:62:
31:98:d5:6e:6c:2e:e6:78:e9:ad:85:02:56:a8:2d:86:5e:c5:
28:fe:4c:43:95:5a:29:fd:dd:73:55:46:45:8d:8b:e4:a2:67:
1c:8f:2b:e1:55:aa:db:62:07:aa:3f:4f:fe:22:bb:10:c2:81:
88:83:68:86:2e:ee:9f:e4:14:11:e2:c2:23:1c:8d:0f:15:1c:
60:0b:f6:a5:9b:8c:c0:f2:70:d5:43:67:15:2c:99:13:29:12:
82:f5:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:11 2025 by rpki-client