Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: PaqA1rdpGSPZMEaBPb4/K0pknPii3K38CrdzrTv8bOw=
Subject key identifier: 36:3E:7D:46:A3:3D:C8:04:08:C6:70:7C:75:67:64:3A:6A:6D:43:E1
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 019A71B98CD3426411FC4087665C54AE9877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0E55
Signing time: Tue 11 Nov 2025 07:02:56 +0000
Manifest this update: Tue 11 Nov 2025 07:02:56 +0000
Manifest next update: Wed 12 Nov 2025 07:02:56 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: HKo2pnkT7jyUsen/uMdAOTQna1U36A2nXkWEU0uB0Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:8c:d3:42:64:11:fc:40:87:66:5c:54:ae:98:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Nov 11 07:02:56 2025 GMT
Not After : Nov 12 07:02:56 2025 GMT
Subject: CN=363e7d46a33dc80408c6707c7567643a6a6d43e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:20:a4:17:b1:19:98:d7:58:a2:24:9a:6f:
94:be:7f:c0:c7:72:fb:54:2c:91:42:78:78:c4:3f:
ec:96:38:64:4c:30:a1:15:86:6f:d9:c5:66:e0:98:
d4:ab:8d:66:90:79:35:79:26:eb:6b:d3:34:42:ac:
88:45:ae:6d:8f:d7:7e:50:43:ee:90:0b:58:fb:17:
9b:c6:9d:9e:ed:0d:17:a8:63:b6:86:80:9c:7d:9f:
aa:4a:6e:ed:62:ce:01:35:3e:10:54:59:34:fb:31:
39:34:b3:31:fe:bd:89:37:98:7e:e0:42:56:9b:18:
37:f6:dd:56:93:68:2e:23:c8:b6:81:a4:81:94:06:
56:f3:2a:d1:96:87:d3:05:56:4c:06:36:7f:e9:62:
33:40:06:9f:2e:29:ea:51:88:58:03:60:f7:93:59:
cd:8a:1c:ba:59:e7:b9:12:6d:39:99:d4:7c:7d:a6:
23:2c:81:5e:13:a6:6b:52:01:c8:b7:98:0a:6d:7e:
9e:c8:c4:b2:c1:36:ed:7f:58:5e:5b:28:0a:57:11:
21:21:06:30:6a:45:b5:72:c5:19:e2:bd:e1:4e:0a:
fa:ad:d0:7c:7d:6f:a9:f8:ad:8a:c6:62:a0:8e:58:
ec:d7:57:25:44:af:a6:a0:06:f4:dc:e1:b5:43:8b:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3E:7D:46:A3:3D:C8:04:08:C6:70:7C:75:67:64:3A:6A:6D:43:E1
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:9c:4e:f0:c6:d5:d1:4f:bd:a2:b4:a5:c3:dc:45:1f:e6:df:
d7:85:53:aa:1d:3a:ce:71:7b:10:16:46:41:01:3e:62:25:ec:
24:26:f5:a9:8a:d3:2b:16:2a:71:d7:11:76:5b:dd:23:9d:a6:
fd:7b:fb:91:93:77:94:9c:bc:ce:6e:59:d2:79:ef:a5:43:6a:
79:d8:0b:75:5c:4b:8e:f0:4f:25:6f:8f:8e:7b:fb:aa:71:21:
9e:14:6f:d4:bf:d9:cb:67:e6:68:a7:dd:18:55:63:32:fe:04:
f3:29:45:42:0c:7a:45:f0:14:d5:e8:e7:33:e2:f8:f9:24:70:
62:25:5c:73:ac:9f:d7:a1:5b:e7:a1:ce:03:65:65:fd:72:ed:
65:99:92:7c:05:5e:2a:ee:dd:8c:8d:f0:45:66:6d:84:df:c9:
92:47:28:ca:34:24:23:6d:6e:d9:16:ce:77:2b:94:70:d6:da:
31:66:91:31:fb:b5:fe:3d:05:6a:1a:c3:53:db:b6:ee:a7:ef:
cb:6b:d5:cd:16:6b:56:18:11:b3:47:6d:59:21:b8:33:e4:51:
85:50:60:80:56:4a:b2:c1:85:0c:f0:ef:5d:d0:c0:d7:bf:a9:
28:ad:e1:c3:04:21:0a:25:e4:04:54:0a:a3:e2:16:1e:7e:bb:
c1:9e:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:07 2025 by rpki-client