Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: upQSyscXBGQRAVY5KnR+krHG8qEMhfQfKJ4VSPMMvpE=
Subject key identifier: 96:84:CC:20:B3:6B:55:42:DF:4D:59:2D:15:7E:78:50:DF:11:89:54
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019A725CC586BAF20E793C5BA38D8629E742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 152A
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: 8VgJ/HXSdv3YbRmeXef4NhPj6dxM/UkhUOKvECC32bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c5:86:ba:f2:0e:79:3c:5b:a3:8d:86:29:e7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=9684cc20b36b5542df4d592d157e7850df118954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:cd:a2:be:72:f8:1f:c4:d5:e0:69:2b:2c:
aa:66:50:5e:28:00:18:97:7a:ff:5a:c8:22:be:b6:
24:1d:e5:eb:e1:40:d8:65:ff:c5:4b:52:43:2a:d1:
a2:4e:48:0f:2b:71:a6:0a:43:a6:5d:28:d9:8d:67:
12:d9:a8:97:3c:c1:f1:80:d9:e2:ed:3b:4b:b1:ec:
e7:79:8a:cc:46:fe:bf:33:3c:46:f7:c8:bc:05:94:
88:14:c1:90:cb:59:8b:45:11:3c:c6:42:1f:cf:21:
d6:61:c5:5d:2f:ec:9b:8b:c5:e8:1c:c9:48:08:97:
0d:4c:51:ca:11:27:32:ff:27:fb:4e:e7:c2:52:28:
16:71:df:1d:d3:95:43:5c:f5:3b:cc:c0:04:2c:f6:
ce:9e:84:cb:2a:ca:51:16:7a:be:7c:23:e7:42:b6:
c1:22:f1:de:00:52:89:49:ea:57:b3:a8:45:cc:13:
f5:98:f4:ea:56:d1:29:28:eb:b1:11:ea:82:a5:83:
fe:c2:ea:4d:de:f3:6b:80:bf:f9:ba:84:86:04:f2:
88:12:1e:ef:30:1b:1c:75:e8:77:b9:f4:91:51:94:
20:52:1b:97:d0:c2:91:ac:0b:e4:99:cb:8c:e3:3e:
5d:30:69:4b:8b:73:28:9f:d9:7e:c7:ab:5b:7a:b5:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:84:CC:20:B3:6B:55:42:DF:4D:59:2D:15:7E:78:50:DF:11:89:54
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:13:aa:c6:81:95:61:3c:1e:c3:ab:a7:55:39:28:f8:64:c1:
28:06:37:66:8d:69:5d:00:62:a8:f5:a6:01:8c:4d:ab:b7:94:
71:29:ae:0b:dd:81:57:1a:87:c1:2c:56:04:14:88:c2:5f:7d:
1c:c6:ad:5d:16:03:25:56:62:6c:75:35:18:ae:46:57:6a:c3:
72:de:18:0b:1e:37:c3:cb:04:ab:37:b3:dd:02:7f:4b:b3:0d:
b1:f2:62:de:91:45:6b:a3:f7:4b:d8:52:19:53:23:20:3a:0f:
fb:e3:48:a0:55:10:e7:af:f8:fb:be:65:53:b7:19:f7:38:84:
33:ca:89:10:62:98:9e:15:26:92:00:9b:26:8e:3b:cf:4a:c8:
f1:95:5a:90:e0:48:ba:29:39:a4:86:2a:00:31:db:bc:1e:b2:
01:2b:20:84:3e:b6:5c:5f:63:4f:66:d3:db:02:16:80:27:17:
da:e3:34:9c:32:d3:33:19:f0:70:35:51:a6:0a:0e:69:40:b1:
b4:34:c6:a9:73:61:88:16:aa:b2:9e:c5:e1:ed:1e:91:57:9c:
b6:9f:26:3e:40:c2:c1:24:54:d0:46:34:fd:04:a1:6d:e3:ed:
db:4f:6e:d8:12:d2:ae:ac:4b:68:a1:b0:9f:1a:5f:be:52:fc:
a3:b7:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:40 2025 by rpki-client