Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: mR5dq/+uWZC8djVb5CshyEqglvPwEGqqCyE27SmL1co=
Subject key identifier: CF:12:EF:92:D5:37:B7:3F:07:5E:D8:E8:72:FA:0B:DA:38:F3:60:A6
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 019A71B938851E480692865A0DBE0E6DEDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 0AC8
Signing time: Tue 11 Nov 2025 07:02:35 +0000
Manifest this update: Tue 11 Nov 2025 07:02:35 +0000
Manifest next update: Wed 12 Nov 2025 07:02:35 +0000
Files and hashes: 1: LqqgWlluL1jyuXsBRZw9RUpy_xU.roa (hash: QQZFs0dWDvcdU2w068AQi10DYXURIlBm26Llbc6SIDU=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: +UYnu5ivi+GB25iC5TA/qUQqkTBH5nxOoyIQmhfdNq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:38:85:1e:48:06:92:86:5a:0d:be:0e:6d:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Nov 11 07:02:35 2025 GMT
Not After : Nov 12 07:02:35 2025 GMT
Subject: CN=cf12ef92d537b73f075ed8e872fa0bda38f360a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:ab:11:9c:ed:ce:25:8c:c9:54:ce:ce:66:
f5:74:92:b6:09:86:02:98:d0:d0:14:6c:35:a8:c5:
5c:8f:35:f5:64:80:cd:4d:59:d9:a5:68:25:0e:73:
e9:d0:33:3d:36:87:93:52:67:0f:18:5d:36:4a:9b:
dd:89:57:91:b9:47:ed:34:71:6d:e9:c1:ea:07:3d:
6b:52:f1:b6:75:90:b1:59:47:c5:ed:c7:c7:bd:67:
1e:33:2b:1d:11:32:0d:ec:79:d1:40:a9:83:3c:6c:
2a:24:32:c8:ab:46:a6:59:46:0d:1d:8b:97:f4:27:
95:d4:74:c4:82:bd:5a:9c:da:9c:2e:a9:35:20:a2:
30:fc:c1:4d:6e:68:c4:21:34:00:a0:c1:2e:7c:13:
78:8e:b2:b9:18:21:98:6d:98:b2:3a:7e:b5:d3:c9:
14:f7:60:6b:fa:63:70:59:b7:28:c3:8d:95:ad:fb:
a0:76:20:12:1a:b8:c5:d4:1c:85:fd:9c:ac:da:8d:
f4:29:ff:4b:50:f1:99:24:06:f1:11:8a:84:cc:30:
d8:89:5f:a8:36:75:74:59:95:2d:4f:b0:5b:64:c7:
30:23:26:fb:5a:0e:8d:d9:8e:98:97:ae:cb:42:73:
38:e9:d7:96:41:77:07:0c:1e:2b:98:1c:1c:c5:96:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:12:EF:92:D5:37:B7:3F:07:5E:D8:E8:72:FA:0B:DA:38:F3:60:A6
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:85:8d:67:c1:d2:0b:4f:46:dd:68:95:08:50:6b:e3:f3:26:
b7:f5:d0:9a:78:57:22:50:f2:0b:93:0f:90:44:46:65:5e:57:
fa:ed:a0:48:8f:40:a1:ff:78:95:d4:27:f2:1a:4a:ed:e9:2e:
a1:0d:8f:49:d8:a4:27:fa:bf:28:a6:92:be:c2:8c:bb:11:31:
e4:9f:0c:08:72:ab:3d:9d:5e:a1:c4:14:ea:ba:ad:43:73:ed:
eb:e2:83:ed:0b:b2:98:6d:c1:f4:0c:65:18:e8:fc:e7:d2:ea:
a6:40:32:24:32:00:c9:c2:1a:4e:84:67:ab:3e:9d:7e:bc:dd:
5a:49:70:05:af:eb:58:31:c9:ce:61:c0:53:f2:b5:33:a9:50:
f6:fe:af:29:10:ac:39:53:87:8f:1c:ab:39:8d:e1:fa:84:d8:
09:d2:a0:f4:6b:2a:a9:0c:a8:45:75:5c:ae:fa:a3:33:7a:4d:
a9:a5:b1:5a:aa:d7:f8:78:a5:71:7a:a8:ba:25:74:82:e9:14:
9b:4f:68:d5:04:7e:fc:34:e8:7e:5f:58:cd:a1:a8:5d:40:47:
26:1d:1c:be:04:b5:c2:1f:4c:72:e1:18:2d:59:b7:ce:35:f3:
1d:24:fa:cd:d3:ec:55:81:76:dc:43:7a:b1:82:87:3d:9c:f3:
fc:e9:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:21 2025 by rpki-client