Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File: uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier: txLLMJTEQqyyHm25EfPWJt1PNQpCE7PXJ4PnrJOqH1o=
Subject key identifier: BC:0B:10:56:CC:74:6B:47:DC:F6:FD:A3:7F:E0:4B:D1:79:65:1A:11
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 019923D5B1C731FAB7A2947D749559969AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number: 15C8
Signing time: Sun 07 Sep 2025 11:00:31 +0000
Manifest this update: Sun 07 Sep 2025 11:00:31 +0000
Manifest next update: Mon 08 Sep 2025 11:00:31 +0000
Files and hashes: 1: FAbnnF69oHTmqk-_EL74zctuaA4.roa (hash: fltdyHSTKiTHvNl3z1Whswl3hhYadpjXzd/kAG+oHEc=)
2: aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa (hash: RYvSIhl4EMxqFZiyrQ0zAL7ZWanzg67h6dO8KAffWY0=)
3: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: HofBSsIJ+ezM5KA64Xv+DdtFKOlIPlkjfQGEJDAaEyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:b1:c7:31:fa:b7:a2:94:7d:74:95:59:96:9a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Sep 7 11:00:31 2025 GMT
Not After : Sep 8 11:00:31 2025 GMT
Subject: CN=bc0b1056cc746b47dcf6fda37fe04bd179651a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:57:25:9d:7e:eb:d5:10:7f:6f:e2:c5:48:
8a:83:5f:4f:85:de:24:dc:0a:f6:96:f5:18:03:9a:
8b:a0:b7:12:b2:86:b5:26:9f:1e:f5:eb:9c:fe:89:
67:2e:d5:a9:f8:03:02:62:cd:78:f2:e8:2e:95:29:
6d:dd:10:7b:bd:06:83:ac:ee:d7:e0:83:84:60:64:
4e:e5:b0:0f:1a:cc:3a:d8:39:f8:85:80:0f:a4:22:
6d:49:6c:4e:47:1b:9e:9a:c7:99:7f:27:dc:5f:62:
c2:d0:5e:ca:83:1f:3c:80:d6:53:7f:f7:11:b9:74:
9c:8d:9b:f2:8e:bc:55:e1:89:ec:5f:3e:f1:64:17:
3d:3f:c5:9e:e5:64:2b:48:78:65:1e:9a:82:50:b8:
16:b1:26:48:7a:06:b1:24:c6:70:54:59:18:86:af:
b4:db:fe:a8:df:fe:e5:52:33:fc:85:57:39:2a:b0:
53:a3:aa:87:a7:d5:31:63:06:cf:84:af:9a:b2:b8:
47:32:c9:df:8f:33:84:f1:54:c7:7b:0a:79:32:a0:
67:a5:06:6a:4b:4a:e7:ac:f1:fe:9a:84:a4:ea:e5:
b6:1e:3b:3e:58:97:ae:53:28:33:93:82:ee:0a:59:
a5:0c:46:b2:4c:6f:ea:04:0f:a3:3c:fd:95:32:3d:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:10:56:CC:74:6B:47:DC:F6:FD:A3:7F:E0:4B:D1:79:65:1A:11
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:54:17:fd:4d:3b:18:66:ae:67:3b:dd:21:0d:4f:3d:f6:ca:
7d:9e:05:0e:07:77:07:92:cd:95:ec:fd:b8:9d:d2:5f:76:59:
eb:c1:37:e6:61:ed:1b:8b:94:9a:af:7e:bf:05:fb:b2:b8:13:
76:72:26:32:b5:b5:d0:0d:fb:20:0e:3f:be:d0:b8:c6:98:3f:
cf:ef:b0:80:19:72:27:60:9f:e7:20:ee:2f:f8:fd:37:38:ff:
6a:f2:84:7d:dc:9d:26:91:e6:49:82:fe:61:60:b6:0b:46:33:
d6:a9:69:72:b1:38:5f:f3:bd:a4:d9:b3:f1:51:53:ff:b8:1c:
f1:a6:5f:8e:cf:b2:ca:51:3b:2b:5d:c5:2d:36:e3:d2:47:96:
3f:a5:ab:1d:f9:4a:76:2b:cd:ee:c0:74:b4:08:67:9e:b7:2f:
85:8f:19:8f:63:cf:df:3e:35:9b:a8:7d:56:c7:67:43:3d:ef:
7f:1a:92:fc:45:c9:a4:54:31:23:14:ef:3c:12:80:49:93:92:
9e:0f:a2:69:f0:08:20:3c:74:4f:9e:4f:80:2b:28:27:4c:12:
26:41:1c:2d:91:49:4c:b7:cc:63:63:24:61:49:b1:37:8b:54:
c0:73:19:eb:d8:64:68:95:8d:6c:2a:c5:dd:d4:a4:e7:2f:45:
e4:17:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:32 2025 by rpki-client