Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: QWaL64Fq6dA1p8HqSYl7b70pNy5VZbi6aZBzDjDTLNE=
Subject key identifier: 58:BC:D6:4A:9E:48:BB:D2:1C:8F:53:16:6D:0E:81:DA:D3:4C:24:3A
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 019A714A138D0016849D406A2D4DE73425CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0D9C
Signing time: Tue 11 Nov 2025 05:01:11 +0000
Manifest this update: Tue 11 Nov 2025 05:01:11 +0000
Manifest next update: Wed 12 Nov 2025 05:01:11 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: xHKfsIZ8SHcRaSA5fv0Y+riPxLopnTIRZUF86jkoPOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:13:8d:00:16:84:9d:40:6a:2d:4d:e7:34:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Nov 11 05:01:11 2025 GMT
Not After : Nov 12 05:01:11 2025 GMT
Subject: CN=58bcd64a9e48bbd21c8f53166d0e81dad34c243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:aa:73:a9:d4:c4:50:af:18:dd:85:9f:57:
2f:35:4f:0a:eb:59:69:10:23:52:42:31:28:e8:03:
ff:bd:53:0a:1f:00:54:9e:86:e1:00:ac:0c:1d:d9:
c6:5f:5c:1f:b0:4b:23:9b:ea:fb:d5:7f:bf:b1:c2:
2a:55:08:b4:fb:c3:22:c0:8b:94:35:77:56:d6:56:
f6:13:5c:45:ef:ce:b3:c1:f8:c6:35:78:68:08:78:
76:70:27:6f:96:8a:4c:a6:32:a9:33:39:3e:d2:fe:
9b:a0:f3:18:3e:a7:96:f2:7a:4f:39:fe:31:5a:85:
6d:ed:ab:25:50:94:a0:1b:76:1d:c0:9e:86:0b:b4:
f3:d8:8b:f6:c3:78:48:dd:0c:03:fa:72:1e:47:f3:
de:73:7a:17:b4:bf:7d:70:81:71:71:6b:ef:13:c7:
37:a5:de:0c:52:b7:11:a1:4a:a9:4a:e7:8f:68:ca:
ab:cf:89:62:a0:ef:05:7b:5c:7a:00:5c:bf:cd:5a:
d4:8d:e2:89:02:47:cc:31:09:64:ad:d6:5e:20:b3:
12:49:4f:5d:f9:26:2e:93:a2:2b:3f:3b:83:c6:f6:
a9:e4:27:b1:ca:67:d4:25:b4:31:d0:30:af:f8:08:
44:bd:9c:16:26:d9:b8:dc:c3:1f:4b:c2:8a:85:5b:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BC:D6:4A:9E:48:BB:D2:1C:8F:53:16:6D:0E:81:DA:D3:4C:24:3A
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fa:0c:4a:88:0e:84:08:b3:52:91:3c:da:d9:18:b6:8f:5f:
00:13:aa:0c:96:ea:df:e9:48:72:cf:c4:c5:22:78:56:00:65:
07:c1:b5:b8:4e:9f:6f:d7:f8:31:06:be:6e:7b:cf:23:8a:6a:
f5:30:6a:28:9f:51:4e:0e:00:93:4b:33:06:50:e8:5d:e6:0e:
46:1c:ed:25:c3:8b:64:a8:76:8c:b6:0f:a4:d9:d6:d2:f7:64:
5e:f9:bd:65:1e:c4:31:11:59:f1:6c:ea:40:fa:b8:c9:aa:63:
ce:7b:21:68:50:d9:ae:7c:9c:f5:ec:8d:03:d1:09:74:a1:d6:
e0:12:79:06:46:0a:c6:ed:b7:0a:0b:2d:df:51:3a:34:7a:f9:
21:e2:ee:0a:aa:e6:9f:52:31:91:22:42:44:67:c2:ca:5d:30:
18:5e:d2:90:e1:21:9c:c1:b6:ee:04:a6:b1:67:86:4e:d7:5a:
97:2d:df:28:95:be:70:4e:d9:98:f7:b0:9e:0c:1e:2b:6c:25:
21:c7:55:a5:a8:6e:b7:ab:51:f1:ea:67:2a:14:1f:39:79:75:
20:54:89:f2:64:98:df:af:d9:a6:2e:fe:3e:f8:7b:61:d9:b8:
ff:6a:20:ea:dd:6e:a3:57:50:c9:f7:ba:ba:68:1d:1c:a6:14:
1f:17:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:01 2025 by rpki-client