Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: 5EI8tegquWsSWhFzZUOQQ4ThpOD8jOkhXpaWwl+ZTRA=
Subject key identifier: 8E:15:F8:75:7E:34:A1:B4:B4:73:09:18:6C:8F:1E:23:37:27:F1:62
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 019A1CBE5E3A2CED1C42718C2A858A592EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 13F0
Signing time: Sat 25 Oct 2025 19:00:29 +0000
Manifest this update: Sat 25 Oct 2025 19:00:29 +0000
Manifest next update: Sun 26 Oct 2025 19:00:29 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: v2L6v/mVJy66v5nPnH5GJjmLlZsd8rKsN3fgHeqSgyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:5e:3a:2c:ed:1c:42:71:8c:2a:85:8a:59:2e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Oct 25 19:00:29 2025 GMT
Not After : Oct 26 19:00:29 2025 GMT
Subject: CN=8e15f8757e34a1b4b47309186c8f1e233727f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:e3:0f:61:3c:72:0d:e5:0a:76:ae:29:64:
e3:db:f2:8d:65:3f:3b:ab:b4:d7:c1:60:6b:74:e5:
2c:69:bb:95:71:ab:85:25:44:8a:37:73:e4:5b:c6:
e6:6f:57:f6:75:71:44:9e:39:96:09:03:49:a4:76:
b4:b3:99:7d:09:00:04:f7:3d:83:61:d4:59:27:67:
97:5b:81:c8:fe:14:a4:24:1f:98:eb:09:07:92:06:
7d:78:8c:91:f3:58:06:23:04:4d:24:97:ca:8b:89:
d5:8d:e8:c1:73:25:b8:8a:bc:4f:41:7e:bb:9c:fa:
27:15:f4:7e:7e:dc:b4:cf:9b:22:2a:25:33:f1:91:
7a:8e:1b:2c:6b:7b:ad:9e:f2:4e:e9:73:12:ec:49:
7a:0d:ce:91:c5:fd:d8:bc:a2:ce:f5:ac:42:a8:e9:
dc:f9:f1:61:24:60:72:6b:47:e2:08:cc:ad:85:95:
67:9d:df:55:f7:66:9f:31:f9:bc:72:d2:9a:d5:8a:
72:47:7d:1c:51:5a:20:71:57:aa:d8:02:e7:c7:89:
e3:22:3b:fd:13:8b:d9:19:99:35:cc:d9:e5:47:21:
c9:c5:44:08:ce:57:1b:b2:5d:cc:b7:a2:87:5a:5a:
25:11:0e:14:bb:5f:01:2d:4f:5e:6c:d2:70:1d:9a:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:15:F8:75:7E:34:A1:B4:B4:73:09:18:6C:8F:1E:23:37:27:F1:62
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:aa:0d:11:e3:5a:8b:39:5d:f5:0b:f2:a9:d7:fa:8e:3b:31:
3e:34:40:22:5b:b1:f7:85:60:40:eb:7e:7d:8e:0d:12:cc:db:
cc:99:c3:2a:12:3f:5f:d5:bf:84:ec:9d:c3:3f:f1:eb:2a:8c:
b9:6f:ad:d0:4c:fa:49:21:b5:8e:2f:ff:ab:0a:20:c2:fc:19:
a4:ac:20:2c:f2:3b:6c:6b:0c:bf:2d:5c:2a:12:13:23:72:99:
7c:11:f3:4d:68:1a:96:93:af:9d:4d:49:8e:c2:98:89:9b:83:
ef:08:58:3f:ce:43:3c:80:0a:37:77:5f:71:1c:0c:30:9e:72:
7c:86:98:ae:9d:8d:0f:a4:bf:65:fd:65:7b:13:e7:a5:ae:30:
53:77:09:38:7e:34:46:98:9b:54:be:d3:99:34:74:82:41:b8:
0f:c4:e1:a5:85:0c:b3:42:cf:6f:08:71:d7:22:da:b1:fe:7c:
fa:b0:4b:a8:bb:06:32:54:aa:56:5d:ca:22:40:de:0c:12:e7:
15:e3:87:28:d3:59:0c:2b:43:29:2d:1f:ad:11:f1:17:cc:31:
85:eb:b8:74:68:bf:b9:6b:6a:5c:6d:08:ac:0c:6f:ff:28:37:
cd:49:86:28:c6:34:98:dd:32:08:b7:9f:2a:66:5b:a8:a2:02:
0f:74:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:09:12 2025 by rpki-client