Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: Ngsiz+oCrSq2vRKxcAGW37++jW22LunwTmsykd1VLlk=
Subject key identifier: E9:A1:41:31:42:95:00:93:88:EE:64:B7:0F:3C:B7:8A:8C:AA:77:FC
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019A288BCF1C5A027D5FF8EE0F82D8D0C05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0F6E
Signing time: Tue 28 Oct 2025 02:00:42 +0000
Manifest this update: Tue 28 Oct 2025 02:00:42 +0000
Manifest next update: Wed 29 Oct 2025 02:00:42 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: PycpfJS9iTZeGhLxWdiaK5ARlmz0Xzt/Vcpp1kYoukQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:cf:1c:5a:02:7d:5f:f8:ee:0f:82:d8:d0:c0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Oct 28 02:00:42 2025 GMT
Not After : Oct 29 02:00:42 2025 GMT
Subject: CN=e9a141314295009388ee64b70f3cb78a8caa77fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:39:7c:75:52:12:72:62:f6:ed:89:1f:00:86:
e5:9d:85:71:3e:72:af:8d:f2:93:81:82:af:c2:9d:
bc:c6:3e:8c:84:7f:5b:3d:a1:3e:24:82:f8:8a:8e:
87:60:a3:4f:ff:0e:6f:29:21:ec:cd:64:5f:48:04:
51:e2:db:00:b3:a6:ba:3c:3f:42:92:11:93:ff:a3:
07:44:aa:a1:02:72:32:5c:c0:71:92:0d:d7:6f:20:
50:d6:6b:b4:ba:31:43:ab:8a:35:87:92:c9:77:a0:
70:9d:9c:7b:65:af:68:c4:84:88:03:0b:73:6b:51:
32:c1:27:75:0b:80:6c:a2:da:4c:1c:39:bb:c4:c8:
1d:0e:18:4d:de:78:b8:44:c2:27:45:3a:d1:4f:0d:
6c:9f:af:d6:dc:f9:08:ec:c2:e5:70:78:ec:ea:59:
5c:1d:8c:e7:d0:68:0f:ba:34:68:16:a7:08:c1:6b:
a6:13:7f:3b:4a:ca:1f:0a:e8:c7:46:c2:ae:91:5e:
57:fd:b9:d5:b5:ee:97:9e:e3:d2:b6:28:08:83:1c:
fe:1a:65:f3:d0:65:b3:49:57:7f:c0:00:01:15:fe:
28:20:59:d3:d2:8a:97:e3:2e:bf:92:6a:6c:e1:2a:
58:8b:5e:15:93:fe:82:2b:16:48:56:f3:22:77:d3:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:41:31:42:95:00:93:88:EE:64:B7:0F:3C:B7:8A:8C:AA:77:FC
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:35:ee:7a:0b:ca:86:8f:e1:24:35:91:cc:b3:ba:9b:87:90:
e2:cd:a1:be:57:e1:a1:37:a9:cc:4b:cf:a1:e2:0d:a6:84:49:
17:28:9a:f1:24:59:2e:26:21:e8:61:a0:f9:79:ca:d6:30:ec:
54:fa:dd:47:c5:4d:31:bd:52:7d:45:75:ea:d0:86:ac:cf:89:
9b:f1:20:2c:b4:d7:9b:b3:ad:55:77:c2:b7:a0:ea:14:ab:fc:
17:ed:aa:9b:f9:0f:48:62:e0:4a:7e:df:c1:65:ff:4b:71:2b:
b1:6b:74:c4:9c:ad:48:47:c1:45:25:15:df:1a:36:b8:a5:38:
40:0e:ec:59:b0:bc:4b:a9:44:ce:c0:5d:d5:44:9b:42:11:c9:
88:2c:53:7a:99:d4:a0:37:1d:2a:32:cc:8a:12:13:a6:fd:9f:
61:08:4b:70:19:0d:3a:ab:cf:49:96:b0:30:1e:8a:17:ff:e6:
87:07:ac:8b:df:52:2e:f8:44:62:61:65:f8:fd:77:3b:44:e7:
d9:d4:ea:20:a4:4a:cc:c5:89:51:48:43:fd:9b:a1:c2:b4:34:
13:8c:08:5f:1d:73:f5:4b:64:c3:25:a8:56:a7:b0:74:29:63:
fe:bf:84:5c:69:49:2f:46:94:a0:42:80:5f:d4:79:3f:30:d3:
ce:97:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:35:45 2025 by rpki-client