Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: 1kT73+9H/aXVELwN5BUVNrrqHhTikpisi+4Cyg8Dv24=
Subject key identifier: 25:2D:5E:3F:AA:6C:9A:22:DA:D7:E7:FE:43:E7:0F:D5:54:DC:9B:2F
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 019A71B79EBEDEA26A720069D06BE9FA3C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0F2A
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: mn8y2Jk/g1npZrEOMo3TIJcIU3NOshPtlbVwCGGz/Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9e:be:de:a2:6a:72:00:69:d0:6b:e9:fa:3c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=252d5e3faa6c9a22dad7e7fe43e70fd554dc9b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:bc:67:a4:bc:25:b7:dc:a1:bf:1e:cc:1b:
20:68:ea:63:5b:28:ae:62:d3:05:27:c4:9c:da:ad:
b2:a2:f9:aa:14:5a:d4:fc:fa:68:b9:c3:7b:6b:de:
c0:9c:48:c7:92:56:23:ef:dc:b2:ce:7b:0a:c8:94:
15:c7:26:fb:47:c2:25:6b:ee:5f:2e:52:8e:cc:c4:
b8:45:2b:51:81:a7:2c:6c:e7:23:1e:aa:de:fd:17:
97:80:e1:8d:3f:84:e4:e4:4d:32:f9:24:7d:03:ef:
0b:02:da:cc:0e:ec:a8:9a:cd:67:69:f0:d0:37:e4:
70:41:96:39:8b:06:51:a5:c6:49:4e:65:99:77:6b:
18:ce:a4:1c:3a:c5:cd:39:b4:08:09:b4:6c:98:f1:
a3:ea:c3:20:42:d3:a4:cb:3b:a5:36:5d:c1:34:36:
52:96:20:e1:be:3d:81:fb:1f:74:3d:bc:2b:a2:3b:
9e:43:f1:09:32:c0:6f:a3:95:d5:c8:db:42:be:2a:
0e:7e:a8:a0:41:30:7f:ec:e7:e8:85:11:e6:26:ed:
c7:1e:d0:a1:68:13:59:d6:ad:98:2a:a9:18:c5:24:
68:23:ec:2c:f4:9a:c0:0f:44:e9:47:28:99:bc:78:
28:cf:aa:0e:7c:20:03:1d:37:75:e7:b5:26:5a:19:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:5E:3F:AA:6C:9A:22:DA:D7:E7:FE:43:E7:0F:D5:54:DC:9B:2F
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a3:5b:f2:3a:33:59:85:30:f6:5c:f8:5b:9a:f0:35:40:54:
51:5b:fa:9d:8b:74:e5:53:0a:62:9f:e9:a4:79:47:5a:a7:68:
de:2b:1b:ce:35:53:57:05:8e:e1:0f:27:ab:86:4b:0b:ce:3f:
c2:3b:bc:dc:db:e6:6b:c9:9b:7f:7f:4d:82:49:f2:a5:89:0d:
69:01:40:07:80:d4:3a:30:cb:31:6a:6d:61:4a:77:3e:6d:64:
72:39:9f:15:b7:6d:0a:e1:2b:40:b7:6a:63:04:9d:fd:33:47:
51:89:70:9e:79:bd:f3:2b:be:6e:43:73:96:66:48:4a:13:88:
d3:8a:9e:76:c7:21:98:67:be:27:7b:8d:77:98:a9:48:93:34:
4f:f6:41:1a:19:13:38:f5:c2:4a:81:48:b0:55:4f:b1:80:29:
ca:75:23:57:bb:4e:7d:27:2e:6b:2a:c9:38:d7:24:d4:9c:8b:
22:ce:cf:10:ee:96:74:75:6c:ed:9b:b0:87:8c:84:81:0b:20:
05:49:93:b1:eb:a9:fb:a5:39:ba:0a:a6:c5:4c:e8:73:e3:9e:
1d:5b:c2:da:2d:30:9f:3a:61:36:6b:57:18:e1:fe:73:6d:e8:
56:3f:a9:de:55:ed:33:ec:e5:31:50:21:4c:74:c5:62:6a:66:
4a:84:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:55 2025 by rpki-client