Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier: Ah5nlg37iJOAesn10U0CIjOwFdsALjiR7uQdZqjrQBw=
Subject key identifier: CB:D3:63:E1:34:8A:83:AB:D6:D8:8A:A4:5D:2B:5C:D3:CE:58:13:2B
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 019A24780A8553223DD0A030A9811B4B6256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number: 11D1
Signing time: Mon 27 Oct 2025 07:00:38 +0000
Manifest this update: Mon 27 Oct 2025 07:00:38 +0000
Manifest next update: Tue 28 Oct 2025 07:00:38 +0000
Files and hashes: 1: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (hash: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=)
2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: dWZX0mUPZbsm9xzi0NfMI/XVEEePa7dVW55emfJlwhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:0a:85:53:22:3d:d0:a0:30:a9:81:1b:4b:62:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Oct 27 07:00:38 2025 GMT
Not After : Oct 28 07:00:38 2025 GMT
Subject: CN=cbd363e1348a83abd6d88aa45d2b5cd3ce58132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:bf:9b:d2:36:cf:e6:f0:35:bb:d2:28:ed:
f4:c7:dc:51:9d:e3:e8:4c:65:d7:4e:0e:a9:69:76:
60:f0:e8:e2:48:52:54:cf:ad:a6:9f:53:c0:d4:16:
7b:f9:74:80:e6:74:66:73:a5:76:a1:fd:70:c7:70:
95:45:d9:87:d8:44:e9:51:bb:26:b0:c0:35:52:b0:
f4:e1:d5:c6:b1:9a:4b:6f:0d:c6:85:7d:b5:e1:e7:
2b:c3:44:00:e1:75:78:05:42:c7:4d:ff:cc:15:27:
08:f6:d7:0f:a5:9e:65:1c:be:d2:92:4b:00:0d:31:
05:67:12:55:45:5f:3f:e4:d4:54:93:b6:42:2a:59:
e6:b7:04:3b:40:44:be:39:42:c8:83:80:e7:6f:cc:
e0:8c:91:18:28:d7:38:43:8d:be:c6:f2:d9:b0:21:
f7:02:ae:c3:31:67:0d:1d:03:8c:20:be:5b:c5:8c:
74:c1:53:5a:46:d9:ca:77:0e:9a:f4:06:b8:20:f6:
0b:e5:19:95:8f:40:f7:b7:e2:c7:54:bf:4a:3b:69:
0c:a6:08:b0:57:ae:e6:f6:50:6c:2f:a5:0c:b7:36:
c6:24:18:79:96:be:97:84:4e:eb:82:b7:2d:8c:0f:
52:3d:7a:f8:31:cc:62:c6:d8:7c:07:6a:74:b6:58:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:63:E1:34:8A:83:AB:D6:D8:8A:A4:5D:2B:5C:D3:CE:58:13:2B
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ed:70:55:e4:21:b7:2c:61:b5:b8:f1:e9:2d:ae:5e:61:88:
15:a5:e7:b9:e3:fd:ce:00:50:ea:5b:ba:81:b8:86:a5:1a:84:
f1:0c:6d:87:c2:e3:25:44:57:2f:f1:ec:de:5e:fe:49:af:90:
b2:69:6e:6e:8d:71:a5:8e:f4:fb:02:cb:b2:70:38:3a:3b:53:
2b:a6:00:61:42:89:80:16:6b:c2:15:63:22:09:7a:9d:ec:0d:
ba:ee:25:c7:83:44:f4:32:d6:26:05:bb:59:3d:b6:22:ec:7e:
b4:81:ec:4e:61:68:d0:cc:96:4f:b6:18:dc:45:52:1a:1c:05:
8c:2c:d9:b2:2a:e1:b4:9e:5e:99:df:ac:ac:67:c8:c3:b0:e6:
9a:b1:78:0b:4a:d8:e0:ae:be:c5:42:f7:85:0b:d8:19:68:43:
c0:19:8f:e8:8f:88:a4:b4:e9:0b:c9:8c:95:1e:7e:e8:f3:5c:
10:04:e6:03:b0:48:f1:5c:c3:69:df:fc:fa:11:48:46:d8:07:
0d:68:bc:4b:52:27:66:52:eb:2a:2b:c6:0d:61:f7:90:fb:c4:
9c:83:90:55:c0:3b:bf:90:2d:cd:f2:8b:c1:40:9e:21:cb:d3:
c4:66:51:a2:cd:f2:34:c5:1c:48:b5:1f:dc:a0:36:43:b8:3d:
4c:bb:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:10 2025 by rpki-client