Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier: dXMbaYSlk3qph6PwIVxXIFDX4eib0hgoqg7f1Z01tkA=
Subject key identifier: 1F:5F:84:08:1B:28:5E:14:A7:25:DE:20:BB:C4:0D:44:05:21:CB:7B
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 019A70DBF46EEB0393351FB6977F55FA348B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number: 1353
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (hash: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=)
2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: HEmFNloXOef6kPv60por8+jzb+Hn/d69gewGnfCBqxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f4:6e:eb:03:93:35:1f:b6:97:7f:55:fa:34:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=1f5f84081b285e14a725de20bbc40d440521cb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:ab:98:c0:06:1a:b3:f9:ce:99:a5:f8:fc:
4f:84:c0:c4:ad:7c:65:a6:d6:f8:a9:00:ca:25:62:
5c:94:e3:81:9f:e3:06:38:78:c6:26:24:b7:a3:df:
dc:ed:90:3a:7f:48:6b:fe:d2:e0:4e:74:48:5b:d1:
d6:b1:5d:ac:5f:67:59:d0:64:7f:4e:c8:02:ac:c9:
fd:b4:18:4e:96:c9:64:cc:fa:ec:78:99:50:26:8b:
98:b8:e1:7b:3d:22:19:19:be:1f:41:5f:89:52:04:
80:e9:b8:90:87:a4:0e:f4:4f:13:0d:ed:87:2f:31:
52:e2:ff:63:e7:00:72:39:3c:6c:db:2a:97:2e:8b:
0b:ea:3c:06:3e:66:67:c1:19:65:ea:19:08:9b:e4:
c8:33:f5:ce:9d:44:fc:1c:fb:e9:ab:d7:e3:f4:9e:
b9:c6:85:38:d3:b9:ea:04:b1:ad:60:a3:8b:1d:9d:
13:9d:af:b9:f7:64:01:04:7a:ff:6c:b0:d0:ea:b2:
5e:7d:07:0e:03:95:1d:61:80:6b:18:2b:b5:f7:e8:
ed:f6:ef:9c:de:95:1c:d3:fa:e1:cf:3f:9c:64:2d:
ae:76:e0:47:67:6e:66:ac:db:16:b8:36:3d:2f:32:
be:12:03:5e:40:6b:5f:41:17:9e:26:4f:f8:48:ca:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5F:84:08:1B:28:5E:14:A7:25:DE:20:BB:C4:0D:44:05:21:CB:7B
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d4:d1:87:b8:2c:66:b8:ff:41:09:c2:b5:cc:fe:9e:2b:cd:
f3:0c:8e:10:23:21:e9:c0:d4:a8:63:6a:aa:f8:bb:f6:b1:d4:
7b:cf:93:3a:d5:e6:03:c3:6a:2e:28:30:3d:f0:99:92:7e:25:
16:6d:0e:c1:e1:ff:40:a8:82:ee:1c:86:76:e0:16:8e:1f:cd:
82:d8:54:66:ad:8d:5b:ec:63:40:03:0b:28:a0:d6:7f:35:5d:
e0:61:54:07:bd:f8:f9:24:fa:56:bb:c8:67:29:5e:57:ae:7d:
14:57:32:a2:80:8b:78:73:1c:f5:c6:d9:d6:32:cd:16:f7:1a:
05:53:cd:29:e4:2d:7c:fc:b2:e0:0f:36:7f:75:eb:8c:95:1d:
7c:cb:4d:ec:1a:1e:22:68:02:ab:5a:bd:7c:d4:1b:59:82:8d:
d9:d2:7a:79:7e:f3:6a:30:9e:b9:18:5b:55:74:b3:93:61:20:
f5:3d:bd:43:64:1a:4a:23:09:8b:66:03:28:72:57:b8:6e:7b:
06:1b:45:f4:8c:07:05:f5:d9:01:dc:9a:1d:34:da:5f:cb:cf:
03:6a:73:05:be:88:4a:4a:20:e0:12:d7:f5:56:1e:7b:06:31:
80:0a:a2:ae:3e:71:56:78:2d:83:50:54:b2:a6:89:22:8f:5e:
61:6a:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:39 2025 by rpki-client