Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
File: uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json)
Hash identifier: YmcJSKZW2YO83mYy8psE6qiMruybvaB/4TYyVjDOK3E=
Subject key identifier: A0:FD:B9:BA:37:3A:56:B0:55:8E:92:59:E3:AA:DF:50:33:9B:47:06
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial: 019A70DBE3AFE2EBC74D9AEBADCEB23B92C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
Manifest number: 0C64
Signing time: Tue 11 Nov 2025 03:00:49 +0000
Manifest this update: Tue 11 Nov 2025 03:00:49 +0000
Manifest next update: Wed 12 Nov 2025 03:00:49 +0000
Files and hashes: 1: GoiZfyB81lKATNd_KFA7YnPWFpM.roa (hash: YbMwTV3MQ9D3n56EjVHhkL6PRU8hYP51h8oBrPXUcjo=)
2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: JxEy9hudd0MyzPEQS+pIKsJG6G53vhsIP4fO9Bl2N4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e3:af:e2:eb:c7:4d:9a:eb:ad:ce:b2:3b:92:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Validity
Not Before: Nov 11 03:00:49 2025 GMT
Not After : Nov 12 03:00:49 2025 GMT
Subject: CN=a0fdb9ba373a56b0558e9259e3aadf50339b4706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:40:93:3b:bc:e1:fe:8b:12:c9:92:aa:8d:
17:81:af:22:ad:ab:ba:57:c2:ce:29:ab:94:5a:dd:
30:5c:43:c7:19:1d:d7:0b:3a:22:7c:23:f2:57:f7:
95:e8:ac:fe:e2:7e:57:2c:28:b1:7e:b3:13:38:48:
4f:bf:d7:a2:53:6a:e4:02:6d:91:ff:d6:e3:d2:68:
ae:e5:f2:88:b0:81:22:71:36:ab:39:b2:4d:2d:9c:
fe:52:53:62:1b:98:73:81:4e:0e:d6:62:f0:a7:0c:
e2:4d:f4:ae:9b:a2:14:06:27:08:6b:12:6f:fd:85:
64:f9:de:08:b3:14:ce:39:17:6e:d6:3e:24:8d:7e:
9c:dc:ce:97:55:a7:22:5a:9e:bb:51:61:a1:b4:28:
71:20:f3:ed:c8:1b:23:d9:5a:c5:b3:56:d9:5c:c6:
90:b1:30:b6:89:4e:ba:c0:43:ba:91:3a:96:b2:25:
36:4d:7d:7a:e2:1e:46:ec:aa:a6:07:df:38:7e:24:
e6:c3:7e:b9:7d:9c:b0:12:1f:d6:71:f8:e3:60:25:
e4:d7:3c:62:5e:e9:7f:a2:02:e5:e0:55:b4:4a:7e:
cd:26:91:a5:45:26:a8:b6:7f:6b:88:05:99:b3:3d:
c3:29:83:16:7e:b4:a6:da:7f:e8:bb:d4:26:e3:f8:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:B9:BA:37:3A:56:B0:55:8E:92:59:E3:AA:DF:50:33:9B:47:06
X509v3 Authority Key Identifier:
keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:90:10:10:e0:31:15:13:df:63:09:f0:ff:bf:c8:89:ee:f2:
a0:ba:fa:90:8a:64:9e:89:7a:a8:49:18:c0:93:8f:55:51:9d:
bf:00:84:c1:98:51:3c:e4:65:e0:79:29:43:87:e9:bb:f5:8b:
2c:2d:9b:ea:6d:f0:75:01:06:eb:ed:36:40:16:53:c0:6b:ad:
0b:c2:98:68:55:a6:70:09:43:81:d6:f3:20:f7:2d:c1:5b:3f:
52:15:3b:80:9e:2a:f6:57:72:72:7d:40:32:41:28:71:1c:a9:
ef:35:49:f2:b3:e4:67:b1:4d:cf:2b:f6:bd:89:62:40:fb:ed:
64:d7:3f:a6:82:bd:fa:cb:9b:93:0c:54:bc:68:b4:dc:91:45:
06:9a:41:6f:23:b3:d8:14:1b:3c:4a:b1:06:4b:73:42:fb:1f:
7e:c9:85:40:98:28:37:7b:21:e7:2c:b4:ec:29:47:18:2c:03:
47:fd:f6:02:87:d2:6e:2a:b2:fc:ec:40:7c:44:d0:f7:e5:b0:
0d:8e:a9:49:80:02:ec:07:47:7f:6b:f1:e5:2b:d1:e6:cd:69:
97:35:a8:9e:d6:58:b1:da:08:f9:65:95:87:6d:c5:54:d4:f4:
98:3d:b6:ec:ec:2a:70:16:a3:6b:97:45:03:ca:07:b1:3a:a3:
c7:54:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:54 2025 by rpki-client