Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File: Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier: ZKLHUzNd1YvL2iYOGeh1/msQTzM2A+uoTI11bG6HDIE=
Subject key identifier: C0:C0:4B:8C:37:09:33:32:5C:6C:0D:EB:A3:89:38:88:0E:4A:F2:E9
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 019A7112ED17050F40FA358658883AD6B430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number: 0D9E
Signing time: Tue 11 Nov 2025 04:00:56 +0000
Manifest this update: Tue 11 Nov 2025 04:00:56 +0000
Manifest next update: Wed 12 Nov 2025 04:00:56 +0000
Files and hashes: 1: 0kA2_ewOMVMAEYLVnBFhn9DnxNQ.roa (hash: VLhUVQVXXK/9mGvNIufCMC2i+nvhDBmLPb4hciIr/qU=)
2: 6fpTUBj4_bNH_UUZdkvOYnGb8NE.roa (hash: PlXgEgBQghszn8El/TxK0a2TFgaJeGliB29YkDf0Zsc=)
3: 7MYms7RIOoUO2o285IfZbjWVePI.roa (hash: yO2Sj8XRd0zshIE7s3ZciOp7WY+fc2AkNg79N4X3TaQ=)
4: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: /yflwbwxEhVf7o3aregQiuM5Ce46w5zdtXVvWWmCGy8=)
5: Ztetkk4bdJv5vcyHrtmKUOqZ7DY.roa (hash: UiZIzCeT9foT0pPnNWPu5tyLanoiyyPQHnGD82mCoIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ed:17:05:0f:40:fa:35:86:58:88:3a:d6:b4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Nov 11 04:00:56 2025 GMT
Not After : Nov 12 04:00:56 2025 GMT
Subject: CN=c0c04b8c370933325c6c0deba38938880e4af2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:39:60:15:7e:ab:ed:a5:25:da:7f:62:8c:
24:9c:aa:91:a1:fc:85:dd:ad:08:f1:e5:ac:1b:ea:
45:13:cc:6c:4c:a9:ee:b9:7e:e2:72:60:c2:a3:15:
7c:f9:90:d5:0e:85:97:5c:b8:92:ce:42:a7:2d:90:
41:9f:67:eb:64:f8:a3:cb:ce:b8:36:2c:4c:35:41:
bd:63:36:75:b4:e9:c8:62:97:9e:de:cb:26:01:19:
80:50:1a:d6:4f:5a:82:f1:26:ce:64:16:76:e3:30:
cb:84:df:70:65:fd:6e:f6:6f:f4:62:08:f7:b0:61:
de:2e:43:c8:f5:d3:68:68:00:e3:13:93:84:bf:6a:
22:d8:e3:e6:b8:ed:08:4a:c0:d6:d8:7e:7c:10:9a:
f8:77:30:ba:01:eb:90:9e:17:4d:9a:28:d4:9a:4b:
26:d2:44:67:c8:bb:f2:ce:c5:b5:77:22:ce:37:f5:
b7:3e:38:f3:c2:52:a9:03:45:2a:26:0b:c6:a4:c1:
c8:98:6b:cd:2e:32:ea:1f:ea:02:bc:6e:41:be:3c:
81:b4:2f:63:16:9f:32:21:05:cf:07:13:f7:d1:eb:
7c:e3:6d:09:87:b3:0e:dd:49:b3:36:85:ec:94:4e:
c9:01:50:fb:88:8e:62:a5:1a:3d:d6:6e:84:6b:33:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:4B:8C:37:09:33:32:5C:6C:0D:EB:A3:89:38:88:0E:4A:F2:E9
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2c:4e:ec:2e:57:da:e2:d2:28:df:a0:f7:8e:80:34:6d:9a:
a4:ad:f8:0e:48:d8:00:c5:4e:89:f5:69:c1:02:3c:35:d7:5d:
7a:96:45:45:e4:7f:da:2b:17:6f:f9:4a:fd:bf:a1:4b:f0:0d:
a6:e0:f0:f7:3b:03:7b:7a:5e:9f:e9:d2:6b:77:55:90:8a:a2:
7d:49:70:1f:25:48:d1:d7:fb:6d:e4:70:dd:61:b0:0d:2b:2b:
0c:93:78:11:05:62:f6:c3:16:08:95:0c:cc:49:8d:d8:35:56:
6b:70:ed:81:eb:d1:b9:cd:21:62:09:41:8f:c5:0b:25:fc:cc:
fa:3c:c8:fa:0c:4b:1a:0f:71:42:cd:45:16:22:06:0d:63:4d:
cf:7e:2f:a0:e4:18:c5:97:fd:af:40:36:40:a8:53:49:9e:e1:
97:f8:de:39:33:11:92:df:33:47:7e:b5:55:66:48:dc:e2:d5:
75:39:b5:13:1e:36:cc:9a:f2:ce:2e:77:cc:77:a7:59:a6:ac:
46:d6:73:53:c1:a4:4e:a5:de:c2:bb:4a:c0:c2:1c:1a:dc:8d:
80:7e:b7:b7:e9:d3:38:dc:63:e4:55:97:e5:e4:d3:99:44:5c:
71:01:a5:8f:81:88:e8:3c:ef:9b:ca:14:d7:3b:40:f4:dc:14:
f4:0b:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:13 2025 by rpki-client