Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: 6BIwwwlAJXd3JW3WKNPznWYLFjVrx4AsjSCJ3ieGHoo=
Subject key identifier: 2E:81:FA:D1:15:84:0E:AE:15:30:B5:37:F5:54:B8:F4:67:6D:30:A5
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 019A19BD17EE6291DFB0ACB8A3D0B5680FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 1683
Signing time: Sat 25 Oct 2025 05:00:14 +0000
Manifest this update: Sat 25 Oct 2025 05:00:14 +0000
Manifest next update: Sun 26 Oct 2025 05:00:14 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: rvFKwM+Taz1ZyBwhFkKNUVV9WOfSWLWfIIGHTVYJUC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:17:ee:62:91:df:b0:ac:b8:a3:d0:b5:68:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Oct 25 05:00:14 2025 GMT
Not After : Oct 26 05:00:14 2025 GMT
Subject: CN=2e81fad115840eae1530b537f554b8f4676d30a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4b:8e:4d:69:8f:55:82:ca:fd:64:47:c5:86:
ff:c7:d6:1a:01:db:1f:89:59:68:3f:3e:7d:a4:eb:
2d:0a:a3:2a:0e:c1:4e:fd:5f:8d:de:bc:55:7b:d7:
b2:2f:c6:da:0c:eb:e2:6a:74:7e:74:01:d4:06:dc:
f7:83:2f:4d:fd:4a:52:b9:27:a9:d5:56:25:6c:c4:
5c:1c:6c:19:30:7a:6c:20:28:23:6c:74:08:25:ab:
c3:2a:05:57:4b:33:9e:e6:ed:80:8e:bc:f4:e6:2d:
9d:98:33:7e:3e:61:44:b7:05:2f:28:dd:35:c5:bf:
a6:f5:04:ed:d6:a2:e8:67:42:2f:16:d0:b1:ac:54:
02:72:c4:24:e3:a7:b1:c4:a7:71:b5:2c:b1:a6:f4:
78:59:70:e0:2c:5f:ff:50:16:1f:bd:83:26:f9:8b:
bf:83:a2:76:a5:78:4e:2b:b3:63:09:a2:10:c0:ef:
71:3a:44:61:08:56:89:3c:65:f3:ef:88:80:79:ba:
43:0c:0f:ed:88:e6:1d:81:cf:7e:1b:35:49:b5:5a:
f9:6a:28:56:e4:c1:eb:68:01:8b:d1:be:c0:21:17:
b1:94:f0:01:b8:b7:75:f3:ee:d3:4f:be:74:f7:1a:
e6:1b:9f:88:37:e7:34:36:4e:44:a9:e5:53:08:49:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:81:FA:D1:15:84:0E:AE:15:30:B5:37:F5:54:B8:F4:67:6D:30:A5
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:80:68:5a:4e:3b:ac:24:5b:0f:fe:19:0e:7b:fe:fc:93:67:
e0:94:a6:0e:d1:de:1c:0d:6b:c8:e8:af:64:15:ff:69:a0:63:
07:13:1c:0e:ba:34:7c:f7:2b:b8:1c:b1:d6:73:b1:b6:49:8e:
a0:f5:56:00:9e:33:97:5a:c8:8d:12:e2:c7:b2:24:3c:a2:5f:
60:74:e1:16:51:4e:75:76:f7:8c:f3:2c:1f:8d:8a:60:87:af:
d1:d9:7c:b7:c8:01:aa:7b:29:54:75:da:4a:1f:14:8b:0c:d3:
9d:73:32:7e:11:51:94:f2:df:f8:a9:e0:42:02:9a:f7:17:10:
ff:25:2b:20:a8:07:de:f4:27:65:e9:3e:19:4f:81:17:cd:69:
0a:4d:79:1c:97:6c:53:1e:81:c6:17:8d:71:5b:5a:f5:3a:0c:
d9:73:87:25:21:35:eb:36:47:d8:8a:2e:25:d4:60:48:1a:1a:
f0:89:34:e0:b8:03:54:88:05:4b:c5:43:ee:5c:4b:cc:22:0e:
24:81:bd:92:34:7b:93:f9:39:b9:e8:c6:d2:c3:1b:bd:5b:e0:
b2:51:65:32:16:25:f2:f1:68:c5:e8:91:45:ca:e4:fe:a7:ac:
b3:ea:a3:78:c8:31:86:20:4b:06:78:4a:14:53:c7:dd:f8:df:
85:c7:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:39 2025 by rpki-client