Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
File: uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft (raw, json)
Hash identifier: DLNj5i/BXrZ9hdZfMfw6EOWTztrAEd+pB7CKDXWEYo0=
Subject key identifier: 62:D6:A4:0E:D1:FF:3E:E8:D7:38:51:9A:DA:ED:84:1F:74:D2:CA:E6
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Certificate issuer: /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial: 019A7149FF280BB8001C4142D4D220668604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: _TEO-D9jrybziMu2xnzwuWG94rs.roa (hash: gvjyne6fyAmTYA+W7d4BhDm5SjPlc1vi2jOA+Mdu/dY=)
2: uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl (hash: BXJ/mB3HL5dUDykSHQfK//BkosOsAQvDFuJgkyu5z2Q=)
3: wxKG5jJyEUEWYP2K3IlbB4dpRac.roa (hash: zPVL9UpKikAfpdB95a7Pp0+KJ7gkFwsrq1gFtJ1j0h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ff:28:0b:b8:00:1c:41:42:d4:d2:20:66:86:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=62d6a40ed1ff3ee8d738519adaed841f74d2cae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:66:ad:c9:60:3a:96:6b:d6:bb:0c:98:a0:3f:
98:9c:bd:8d:7c:9b:3c:f2:50:f6:70:ee:f7:21:92:
6d:4e:42:c5:b8:ea:a8:5f:56:64:24:4f:63:4e:bf:
db:5a:55:bb:76:cd:fd:03:db:6c:90:18:67:76:d7:
25:21:03:3a:cc:d7:3c:bc:b7:a9:9f:d5:83:e6:00:
a3:12:18:5a:89:5b:5c:9a:56:32:53:84:37:1e:d9:
7b:ea:3d:67:96:2d:dd:87:40:ee:1d:ac:8d:3c:b0:
69:38:7a:57:80:48:22:8f:57:f6:ad:1e:95:af:08:
16:06:17:ba:8c:59:b0:a9:77:d2:cc:6d:97:08:e7:
67:a4:79:7f:7d:1c:3e:78:ba:5e:e0:54:4f:7e:21:
96:1d:90:aa:96:b5:47:7b:86:e6:48:b4:36:58:32:
7e:53:46:26:07:8c:7f:09:5c:10:66:4c:f5:bf:60:
4f:72:31:71:d8:c9:de:c5:85:a7:b4:3a:dd:a5:e1:
c0:5d:fb:c8:dd:9b:cc:e9:eb:c0:f0:e1:9a:4f:4a:
f0:12:0e:d1:ce:26:57:aa:ab:96:8e:dc:c4:a2:b2:
c0:cc:05:9c:9c:71:73:09:b7:88:c2:a0:e2:18:80:
96:d8:3e:2c:c2:ef:d6:67:22:a7:b9:cc:43:b2:d4:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D6:A4:0E:D1:FF:3E:E8:D7:38:51:9A:DA:ED:84:1F:74:D2:CA:E6
X509v3 Authority Key Identifier:
keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:82:b2:f1:aa:fb:f3:a1:89:de:0f:75:ac:03:23:9f:34:
b8:22:71:20:6a:7b:ef:a2:55:86:a0:4f:9f:b7:c3:87:62:88:
85:93:15:7c:14:87:f9:b4:fa:0a:19:f9:93:90:4c:14:f6:fc:
fc:7c:7b:e1:e4:55:df:45:bf:dd:4f:f8:b9:89:f1:24:aa:f7:
04:6a:45:18:5f:f5:b6:59:ec:43:eb:f8:1c:25:ef:f6:83:b2:
ef:72:a0:0d:02:67:44:d7:49:5e:0d:19:48:46:44:e3:23:18:
74:23:d1:d3:ac:89:29:e2:08:1a:63:6d:7d:b6:ab:3d:6d:14:
fa:ed:d6:4b:54:6a:97:cf:4d:9b:c6:dc:00:5f:00:69:6d:27:
2d:88:c0:f3:61:a3:25:e5:e5:02:9c:59:db:27:97:f0:98:58:
aa:0b:95:01:ab:c1:16:2c:45:b3:64:6a:cf:63:50:83:7e:ee:
da:70:60:78:20:2d:ae:a1:ac:fe:80:ed:05:f1:79:18:3f:45:
0f:5e:8b:94:b9:d4:55:0c:9c:e7:3f:30:1d:33:66:0d:2a:39:
b4:2d:26:1d:00:5e:b2:a8:fd:f9:be:77:7a:f7:32:20:08:70:
89:66:20:a3:9a:e3:74:71:3c:79:b9:4a:0a:44:db:7d:8a:09:
24:82:b3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:23 2025 by rpki-client