Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier: SqCzsUkDKtI1PIVl8OaHWN6HNk+HKkHNaG8oRXPSIGg=
Subject key identifier: 9D:B3:7D:56:85:A4:7B:49:43:BB:07:FC:CA:4A:A3:AE:2B:09:47:10
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019A1FBF1743530B705E4ECE07597AC31402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number: 0497
Signing time: Sun 26 Oct 2025 09:00:08 +0000
Manifest this update: Sun 26 Oct 2025 09:00:08 +0000
Manifest next update: Mon 27 Oct 2025 09:00:08 +0000
Files and hashes: 1: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
2: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
3: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: LNukCXpxKz5181zqwEWpk7o5a9o3LxMIKXU8l2Ycm1w=)
5: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
6: ohgVS6vR-4SGEXaj_tFUb-UB3m0.roa (hash: FUu97z1QXGuNnK2gooake8eelYh7e6wKHA9hoFvMoKQ=)
7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:17:43:53:0b:70:5e:4e:ce:07:59:7a:c3:14:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Oct 26 09:00:08 2025 GMT
Not After : Oct 27 09:00:08 2025 GMT
Subject: CN=9db37d5685a47b4943bb07fcca4aa3ae2b094710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:ef:b2:9d:65:a3:6a:c6:2f:e4:5b:ac:52:
bc:eb:93:14:60:53:e2:6c:33:90:15:fa:5b:a2:44:
2a:55:77:b9:18:55:0c:5b:12:34:b0:b7:06:8a:55:
b5:9a:95:05:ee:b4:cd:08:09:af:dc:3a:f9:d4:d3:
9b:5d:fd:e8:95:7e:60:25:9b:e2:8a:7a:01:3d:5b:
d6:47:4f:59:a9:be:13:e0:ca:95:e5:ea:db:d9:01:
f8:f5:66:44:24:98:c0:4f:ed:fc:57:a2:a5:e3:af:
b8:ae:98:25:27:85:8e:20:49:40:c2:87:c6:a3:ee:
34:09:f6:36:2b:ad:75:2e:99:67:cf:e5:fe:1a:3d:
64:5f:7d:60:bc:0c:47:a6:9b:9c:9d:ff:af:d4:31:
29:52:30:6d:1b:8a:74:22:0f:76:d7:1a:12:d0:77:
2b:5e:5f:45:ff:49:64:60:6c:59:ab:ef:46:94:f8:
47:27:58:15:1b:9d:45:0d:98:12:01:4f:8e:9a:16:
5d:ed:9e:ac:05:dc:ac:79:ca:35:63:51:ab:9c:d4:
96:1e:53:59:57:81:f8:1a:2e:36:3e:da:47:08:27:
e7:11:b2:29:5d:a5:56:ca:7b:c3:d2:81:2d:6e:17:
90:11:82:fa:9f:2d:6a:df:12:6a:63:01:7f:56:c6:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:7D:56:85:A4:7B:49:43:BB:07:FC:CA:4A:A3:AE:2B:09:47:10
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:24:5f:81:2a:65:ee:19:39:37:e8:7d:9c:cd:9c:ab:f2:db:
bc:fe:88:48:64:29:40:50:4d:96:73:5e:7e:62:22:8d:bb:72:
da:ad:2b:b1:f7:5e:2a:d2:35:16:31:17:e7:35:ac:da:16:8c:
07:ac:80:48:48:94:02:40:8a:3b:a9:c6:ba:4c:72:3e:8c:61:
b8:0c:a1:72:4c:91:70:5f:95:a9:17:34:1f:d6:b0:2f:b6:d2:
3b:fd:73:a3:e2:b2:8c:c0:ad:52:02:00:44:42:23:fa:d8:de:
02:cc:b9:c9:30:0d:55:da:71:1b:e1:d5:15:cf:23:8d:fd:9c:
3f:c2:ed:3b:58:03:4e:c7:05:53:8f:0f:b3:95:57:a7:4a:de:
7f:d6:fc:aa:5b:fc:d6:f8:5c:71:0d:f9:8c:71:75:cf:0a:f7:
a0:e3:99:df:56:90:fb:e8:3f:6d:03:7f:4c:90:05:2a:49:fd:
53:65:24:95:ac:d0:7d:45:dc:93:f1:82:aa:ea:84:16:17:da:
92:05:2e:b8:af:71:ef:d5:a7:6c:49:7f:b8:bd:9f:59:1e:5f:
a2:85:42:de:93:10:9d:2f:33:67:cc:a2:37:dd:17:d7:13:a1:
21:7b:22:b8:45:e2:e6:80:e7:93:b3:cf:dc:b2:d5:cd:b4:c6:
4a:17:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:06:24 2025 by rpki-client