Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json)
Hash identifier: 3/s3pZAigbAubEvLRh0P5wqVxrJqJqfYOrPi604hV5g=
Subject key identifier: 4F:8A:FF:D7:D2:AC:C6:E5:18:78:8F:BC:36:BD:9F:8B:24:C2:56:5B
Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Certificate serial: 019A337CDB09D0C5FB77AFDBC3851E7EBF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
Manifest number: 4D
Signing time: Thu 30 Oct 2025 05:00:11 +0000
Manifest this update: Thu 30 Oct 2025 05:00:11 +0000
Manifest next update: Fri 31 Oct 2025 05:00:11 +0000
Files and hashes: 1: M9ok_oEA-Cq66PnPmgpXlFaH8Sc.roa (hash: Bj68sqknRNEMUK6hrMTUuevwXIra7kusoFg9lZhmyJM=)
2: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: Fkx3S8tVjTB5zxnMjIlGIKi08nSgaGxCS2UolKBGpUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:7c:db:09:d0:c5:fb:77:af:db:c3:85:1e:7e:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Validity
Not Before: Oct 30 05:00:11 2025 GMT
Not After : Oct 31 05:00:11 2025 GMT
Subject: CN=4f8affd7d2acc6e518788fbc36bd9f8b24c2565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:1a:55:58:c9:60:f5:46:35:1d:bf:e4:21:
da:0e:3d:34:9f:8f:06:f8:67:ca:0f:85:b5:db:c6:
d3:72:7e:9f:50:87:44:42:ae:4f:31:98:9b:b6:0f:
02:c0:46:91:ee:a0:1f:18:b7:e4:89:b4:a5:40:d1:
07:21:b1:52:f6:82:24:e0:87:b7:22:91:5f:5e:9c:
af:1e:31:96:4b:a5:6d:94:36:34:bf:81:d1:f6:fd:
14:4a:76:c4:ff:a5:8d:6d:f2:10:3b:06:17:4a:f6:
95:0b:30:8a:94:12:e2:3c:e1:f7:ca:cd:b7:21:a4:
52:d0:eb:14:22:32:54:76:9c:d9:ad:91:3d:0f:53:
b5:5b:1d:27:8a:98:d9:58:6d:18:5f:a0:84:95:10:
f7:f3:03:af:cf:3e:c7:42:5d:44:7f:b0:73:6c:35:
c9:79:ce:62:f6:83:a8:fc:ca:a9:2d:20:ed:df:52:
2d:d1:12:93:0e:5f:b7:7b:d6:b3:fa:30:7a:75:85:
f0:b3:9f:67:f1:b7:dd:49:c9:aa:14:79:cf:7c:28:
f4:38:f4:a7:bb:a4:c0:3e:47:8f:be:6c:08:9f:40:
a6:7e:b2:97:fe:93:53:a3:72:e3:da:b5:cd:50:ff:
aa:62:0c:60:a6:67:e6:f6:1a:80:6a:40:ff:c6:12:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8A:FF:D7:D2:AC:C6:E5:18:78:8F:BC:36:BD:9F:8B:24:C2:56:5B
X509v3 Authority Key Identifier:
keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1a:d2:48:03:f3:6e:e2:f6:c3:eb:af:7a:2e:ea:33:76:f9:
30:1e:01:02:79:d8:1e:79:b1:9b:7a:33:5f:c2:fd:1c:69:bb:
97:71:ab:68:6a:27:13:84:54:ec:b5:77:81:31:17:ec:17:0f:
c3:6f:12:50:25:ab:b1:df:bc:7e:6c:9c:0d:da:76:31:9e:9b:
b5:c4:9f:1b:5f:4f:28:b7:61:bc:c3:b8:36:26:14:f3:c8:ab:
1c:5f:55:b6:1c:4e:d9:07:e4:89:16:f3:6d:b7:f4:28:79:82:
57:fd:6e:a7:be:76:e8:8f:ee:d2:e1:31:e7:1a:d9:38:d9:4b:
4f:db:e7:a0:32:6f:0e:cd:92:3e:ad:eb:a6:45:09:dd:d3:7f:
ee:55:26:5a:f3:13:06:51:b0:d1:cb:50:87:7c:d2:00:79:f2:
fc:42:8e:c1:8c:94:56:9a:ab:95:ba:48:61:9d:e9:0d:b3:5b:
6a:e2:dc:8e:e5:83:12:13:63:eb:23:41:a4:70:28:4a:0b:e9:
1c:63:2f:54:b4:5c:f0:87:b8:a2:6a:82:7f:c1:8e:9d:28:9d:
bb:16:d4:bb:ee:de:76:db:b7:0d:57:e8:c0:8e:e1:ff:47:95:
c3:ab:61:f8:b5:5f:d0:a2:3a:c1:d6:14:cb:b9:00:78:86:3f:
58:c2:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:47:25 2025 by rpki-client