Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier: B77KXQvv1QO3Z6YT7fQv3cMykDTrQ83joc4WyfHVd6c=
Subject key identifier: 88:B7:98:07:4C:18:F8:FD:59:B2:97:6B:46:C8:9D:39:B5:93:43:69
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial: 019A70A54AC704BD88E60147758983953E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number: 13CF
Signing time: Tue 11 Nov 2025 02:01:12 +0000
Manifest this update: Tue 11 Nov 2025 02:01:12 +0000
Manifest next update: Wed 12 Nov 2025 02:01:12 +0000
Files and hashes: 1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=)
2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: p0NbcykfPQTX5urK5UjSkGJ1iqprp7WXr8L2fIPubQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4a:c7:04:bd:88:e6:01:47:75:89:83:95:3e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Validity
Not Before: Nov 11 02:01:12 2025 GMT
Not After : Nov 12 02:01:12 2025 GMT
Subject: CN=88b798074c18f8fd59b2976b46c89d39b5934369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:03:70:2a:49:56:5d:46:a0:8a:5e:7c:85:
d3:20:4a:01:52:a7:66:40:62:6b:03:cc:8d:f9:fe:
29:d8:31:c4:19:28:a5:12:32:9c:ab:b1:28:a6:b1:
ef:b0:d0:4e:da:99:ce:b8:e3:bb:be:65:4a:09:4c:
e0:a7:09:5b:92:2c:36:6e:7b:24:5b:32:2f:81:f5:
f1:85:56:94:bb:21:7d:37:63:c8:43:fe:09:9f:00:
f6:6a:75:d9:0d:4b:35:db:b7:85:c4:e0:66:c1:8f:
49:c4:8a:60:e9:cd:8b:93:80:0a:2b:f1:48:7a:b2:
f1:f4:6e:27:93:50:8d:3e:35:a2:a2:b9:32:01:e3:
ef:10:9a:aa:27:74:a5:5f:4c:4e:f7:b7:05:97:59:
2d:4d:2b:d2:85:cc:0e:2f:52:92:b6:05:a8:3a:ed:
91:31:2f:28:9a:1d:64:65:24:8b:f3:97:a1:70:a8:
c0:a2:87:84:fe:c9:e0:35:11:7b:02:56:c0:8d:96:
3a:c2:65:31:4d:d9:6b:28:5d:63:31:6b:3a:17:81:
7e:f6:0e:a7:ef:1a:fb:a8:b9:2a:81:e1:1c:68:82:
b8:4e:76:0a:3b:6f:8a:d9:3a:94:81:59:f4:8c:03:
7b:6c:27:f5:d9:40:43:d4:0b:5e:04:65:88:aa:8d:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:98:07:4C:18:F8:FD:59:B2:97:6B:46:C8:9D:39:B5:93:43:69
X509v3 Authority Key Identifier:
keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ea:e7:b4:06:82:f3:3b:1f:d4:1b:45:cb:d9:fd:2a:09:87:
61:ec:0f:e6:d1:f1:a6:6d:08:9a:3a:79:be:3a:bb:a1:cf:3b:
19:ff:8b:9d:49:97:c8:ff:dc:22:84:ee:a6:2a:eb:b0:64:62:
80:e5:ad:c4:e7:c6:7d:be:0e:bb:c0:f9:69:44:e1:0c:88:1c:
ad:e0:0a:ba:48:c9:29:57:90:88:37:5b:0e:87:f6:48:9b:6b:
fa:3e:24:84:9b:80:eb:0e:85:69:e7:4a:54:05:27:d4:df:e9:
0a:a5:9a:d3:07:9e:fb:0f:62:90:3b:bb:b1:6e:32:ac:2a:5a:
bc:51:28:3b:3e:ef:9a:5e:fd:c6:53:48:ea:84:c0:ce:f8:6c:
56:38:cc:02:4e:71:08:38:f4:31:1e:06:4b:3a:03:7d:6d:d2:
63:7a:25:d0:13:ff:4a:74:3a:a1:5f:8f:d6:07:a1:12:18:11:
f4:be:6c:d5:d9:a1:83:67:42:e3:c6:13:23:f3:c2:1a:c6:b7:
98:b3:37:d6:52:96:f5:11:33:a8:13:58:8e:73:3e:3b:8e:68:
40:23:e4:59:2c:46:b5:0a:c6:46:f1:d8:78:73:f0:8a:22:f9:
1e:9e:c6:42:c1:f3:6b:6f:64:5a:d1:d5:50:0c:ea:46:f3:63:
44:4d:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:26 2025 by rpki-client