Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File: uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier: YuhRtzBUYVBjMRJPypnCj4giKuGIKeSSnaztTpBung0=
Subject key identifier: 65:CE:08:9D:03:0B:3C:95:51:6E:4F:F1:3B:55:04:43:EA:60:9F:75
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer: /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial: 019A22C07B248C9AFC78D866662FAAFA6D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number: 01BD
Signing time: Sun 26 Oct 2025 23:00:31 +0000
Manifest this update: Sun 26 Oct 2025 23:00:31 +0000
Manifest next update: Mon 27 Oct 2025 23:00:31 +0000
Files and hashes: 1: dHqraQM0J28TwBZI9kOV-wg_Nys.roa (hash: 9SP50kXHayfJ5rdM97ecdGjoNLOBx7zfNbIDZBfMyaE=)
2: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: tFQxcLNjaYGsoM5RxbzTqor9oBwFIjSmNq5Ym0MPl80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:7b:24:8c:9a:fc:78:d8:66:66:2f:aa:fa:6d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Validity
Not Before: Oct 26 23:00:31 2025 GMT
Not After : Oct 27 23:00:31 2025 GMT
Subject: CN=65ce089d030b3c95516e4ff13b550443ea609f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:3f:d6:59:9d:a6:43:ef:a4:25:f8:89:08:
95:cd:92:46:76:56:23:de:bc:36:f5:7c:d1:32:be:
b5:9c:10:1d:09:d8:bb:45:62:7f:2d:7b:b5:94:68:
1a:b9:bd:93:7b:f9:85:41:46:5f:e6:86:7d:1c:70:
e9:32:37:a7:f3:b5:d4:29:31:28:65:6d:62:61:28:
80:aa:f7:5e:0f:ed:61:e0:bb:53:91:77:94:a7:9b:
e4:2f:f2:14:c6:28:1d:ec:75:45:52:7c:f8:5a:1c:
0d:36:c7:b8:d3:c7:d0:71:b7:a8:2f:4e:ff:d1:1a:
8b:03:80:bc:82:28:45:41:cc:9c:d7:cd:5a:00:fc:
c8:3b:47:9b:88:d6:15:02:36:60:20:02:af:a0:44:
4f:24:03:51:35:87:a9:e4:10:f9:61:0f:a9:8b:f5:
73:80:21:3a:d8:43:41:75:e5:7f:21:0c:64:cb:2f:
d2:a1:fd:cf:72:9b:38:97:77:40:6d:29:68:00:1a:
77:a4:24:78:3b:25:e2:f7:35:7d:e6:ce:c4:ad:90:
d5:54:74:96:6b:bf:13:69:ae:1d:ce:1c:c0:57:72:
db:e5:dc:46:2d:1b:ba:8b:9f:3b:e8:31:5a:9d:f3:
a1:8c:34:02:95:b1:2e:3d:02:5d:90:b5:f5:67:71:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:08:9D:03:0B:3C:95:51:6E:4F:F1:3B:55:04:43:EA:60:9F:75
X509v3 Authority Key Identifier:
keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:45:3a:29:9e:7e:c7:e0:a1:20:f9:42:be:63:4b:9a:d9:
81:51:8d:e9:47:86:dd:d1:a2:d2:f5:e8:5d:3b:35:c1:d6:36:
26:15:2e:7c:4f:3b:67:9f:36:7b:1f:a0:10:6a:54:0d:c7:2e:
9d:a7:3b:0d:84:99:9c:14:7d:79:a2:59:62:d2:1a:d4:bd:d6:
55:b8:21:68:f6:78:44:74:e1:8d:d9:7c:b3:9e:1d:33:84:11:
c1:e9:11:af:87:fe:a3:11:d7:07:71:09:c5:20:d0:70:47:44:
79:47:7c:16:f8:e9:ba:82:19:81:eb:d1:db:47:16:9a:a8:b6:
ce:17:95:88:e5:45:50:9d:30:f4:c5:2c:f3:ec:35:a4:b6:d2:
56:bb:cf:c5:69:81:67:f8:03:3c:20:71:68:80:55:c2:ee:f8:
7a:dc:f7:9b:d9:d6:f1:96:31:98:be:62:58:45:47:34:0f:19:
15:df:d4:cd:06:cd:66:47:a5:00:6b:fa:53:ec:83:3e:ee:a4:
62:92:57:79:5a:5b:fa:98:69:97:20:49:ff:a4:38:10:8c:67:
98:2f:c3:5a:61:7a:0b:37:01:19:d3:10:bf:f5:47:93:b5:8d:
f2:0c:a3:61:86:90:81:8f:42:f2:6d:cb:ab:64:ae:8f:9f:0a:
98:a5:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:32 2025 by rpki-client