Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
File: uKUWv-ySscjHVz_4hNhBaA5veD8.mft (raw, json)
Hash identifier: T3ftZOjUxkIGmyeZZu2GVr7ANfIbqZ2GoRmUrJN6HdE=
Subject key identifier: 8D:34:33:12:04:9E:5E:73:63:E8:00:DC:53:DE:C8:0E:F3:66:45:F6
Authority key identifier: B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
Certificate issuer: /CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Certificate serial: 019A71B89995467AFE7DA363EB08396A4D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
Manifest number: 01E4
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: 3y2tjY2wv2hPWo8Jjs9g1G9k2XU.roa (hash: qyjRMAEUAmhHrAhDYNjvXf2jg8IqGPd2UJBcfxCKTEk=)
2: uKUWv-ySscjHVz_4hNhBaA5veD8.crl (hash: LIUojstlmot1s5BnWaz6FwBSA0eXlI29C1SjoTzCI18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:99:95:46:7a:fe:7d:a3:63:eb:08:39:6a:4d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=8d343312049e5e7363e800dc53dec80ef36645f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:8c:f1:e8:ff:f1:e3:08:14:6f:d0:f3:b9:
75:21:ca:19:c9:cb:f7:8f:07:90:6e:e8:05:ce:2b:
d6:90:f5:20:ab:78:8f:66:d9:b6:d9:0b:80:a3:e2:
9d:d4:bd:53:6c:f7:0a:20:4b:d0:5e:76:fe:10:23:
aa:30:2c:c3:4f:96:cb:61:09:8f:3a:96:42:db:38:
f3:39:3e:35:fd:7d:7d:90:68:1c:8b:e3:b8:41:bc:
9b:29:1e:4f:68:1e:25:74:df:00:17:ba:0d:1e:10:
d7:65:f0:35:75:a2:d8:a9:e2:51:64:75:f7:4f:d4:
a4:e5:31:f0:2c:43:b5:f1:ab:ed:2b:f5:fa:6c:67:
a0:57:c4:ad:db:17:f8:dc:5e:e9:82:21:52:43:32:
1b:f1:8b:05:29:fa:d8:8f:a1:9b:91:1e:ea:9a:a5:
01:17:a6:ca:4c:87:59:88:57:92:33:f4:dc:be:2c:
69:c9:78:20:ab:dd:fe:cf:78:27:ab:e3:30:5b:0a:
94:7a:dd:b9:fe:60:4c:bf:5f:d6:3a:d2:51:bc:c3:
df:d3:14:c3:15:a2:6d:36:8d:ea:a9:fd:d9:04:52:
a9:06:d8:b5:81:aa:6b:04:af:f5:1d:4d:e5:20:4c:
fa:c9:1a:44:f3:5e:67:ce:37:22:9a:89:62:2f:dc:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:33:12:04:9E:5E:73:63:E8:00:DC:53:DE:C8:0E:F3:66:45:F6
X509v3 Authority Key Identifier:
keyid:B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b2:11:38:14:de:cf:39:f4:a2:82:f4:67:cf:88:38:7b:38:
84:c4:a4:53:bd:f9:b0:b1:cf:43:37:71:cc:6b:71:8b:2d:1c:
36:ca:d9:54:c1:fa:d6:3f:20:b8:1c:a8:42:ce:ec:40:a4:13:
53:69:c5:fd:49:15:79:8f:72:9c:a9:d0:aa:5e:dd:2f:7c:b0:
90:87:cf:98:51:4e:da:7d:e5:ac:a3:d5:a1:d4:c9:37:e4:67:
b9:ce:4d:6c:6c:0c:f2:00:65:09:4b:da:2c:67:5e:bd:2a:66:
36:63:8b:2a:f4:93:87:ce:8b:17:18:b8:cc:87:e2:43:4b:1d:
7d:28:63:0c:e8:8e:b3:35:03:62:6c:bb:33:a2:c1:12:89:67:
e7:5b:ee:f6:34:5d:d9:c1:02:35:fb:cb:7b:17:c2:74:65:05:
33:06:25:60:07:21:0d:c3:bc:21:17:6f:5d:67:e3:3e:ae:f1:
46:84:cd:43:db:95:f1:dd:9e:85:fa:c0:2e:b3:d9:5c:37:03:
8c:9b:d5:2d:19:ee:86:ae:d8:ad:9c:44:b4:eb:be:34:d7:6d:
b4:d4:da:be:80:d3:07:56:cd:9a:d1:b3:73:01:5b:9d:9f:d1:
d5:58:cb:de:88:87:4d:a6:0f:a2:c7:1b:94:33:2b:80:ed:7c:
ae:52:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:58 2025 by rpki-client