Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier: JpaC6LkJiqf56WZNPxYl/FmbQxvJo04hOOwk8yX3cMQ=
Subject key identifier: 5A:1E:E5:C6:97:CA:74:0B:85:C1:3B:28:14:DD:F6:05:B4:4A:A7:83
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial: 019A24E630ECE957C08E5783E608163FF204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number: 02C2
Signing time: Mon 27 Oct 2025 09:00:56 +0000
Manifest this update: Mon 27 Oct 2025 09:00:56 +0000
Manifest next update: Tue 28 Oct 2025 09:00:56 +0000
Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=)
2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: A90ntGPJFkPSSerIgrmgWZeakyXIyg2H5q5SzTS/nfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:30:ec:e9:57:c0:8e:57:83:e6:08:16:3f:f2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Validity
Not Before: Oct 27 09:00:56 2025 GMT
Not After : Oct 28 09:00:56 2025 GMT
Subject: CN=5a1ee5c697ca740b85c13b2814ddf605b44aa783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:66:88:6a:6a:ef:9a:04:47:c4:a6:1d:d9:
69:6c:1a:88:84:b8:d1:b7:63:9c:c3:ac:aa:3c:82:
3b:4f:52:eb:73:14:6e:c8:02:17:a5:07:1b:a3:51:
33:4e:d2:dc:cc:f3:90:6b:43:19:6e:ed:54:e1:5c:
cd:a2:35:d8:94:17:32:f4:57:e6:2a:6b:00:4f:a2:
85:e4:39:8e:87:e8:71:76:27:42:a5:2c:81:a3:a4:
68:e9:73:56:67:7c:13:ef:43:c8:66:ce:ed:31:34:
2c:ee:ef:79:99:fa:38:c8:f5:b2:77:7e:a9:d4:d5:
21:5b:c4:5b:90:25:f7:7b:0b:e9:9e:53:db:2f:1f:
d1:92:d6:6a:71:f7:d3:db:01:d7:bd:8c:46:b2:97:
a5:48:1e:c4:8a:b9:5c:a0:6d:d1:69:72:d0:7e:f0:
90:dc:73:5c:cf:e1:15:d9:af:27:c4:2e:ea:16:d0:
32:5c:ef:7b:c3:f3:fd:b5:57:8d:0a:bf:39:2b:12:
0a:4e:50:e8:28:59:ce:94:4b:31:75:c5:69:32:3a:
e5:47:6b:17:cc:19:80:2f:f4:66:09:95:71:fd:73:
d6:00:53:83:ed:a3:23:a4:d1:88:df:7e:5a:22:f2:
50:1e:f2:e8:78:aa:da:a9:d2:76:42:5b:be:e0:aa:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:E5:C6:97:CA:74:0B:85:C1:3B:28:14:DD:F6:05:B4:4A:A7:83
X509v3 Authority Key Identifier:
keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:08:80:2d:14:c8:6b:3f:e5:d1:86:cd:a3:46:f3:0a:ae:d9:
c6:81:85:72:65:30:89:3d:69:d5:85:da:67:c4:fd:29:cb:da:
41:73:d4:7f:25:5d:1e:af:97:e6:c4:16:8e:27:5e:71:7e:af:
c1:a0:f6:f6:aa:48:ff:15:b8:81:b2:24:63:ca:96:1a:f7:10:
41:92:d5:b5:54:35:b5:d6:2f:95:38:d0:f1:f1:e4:ba:4b:00:
33:a4:0e:66:48:d9:51:12:9e:f6:67:3a:d3:a5:f7:59:2b:6f:
d3:06:66:b2:9f:3b:06:8a:ef:1d:e0:6a:30:9e:ba:a5:ee:1c:
29:87:b9:dc:16:a1:c0:d4:06:69:3a:06:0b:40:6c:35:b4:af:
93:62:28:2d:d9:17:98:3f:99:98:9b:f7:6c:ca:bf:2f:28:86:
b1:fe:3d:40:32:44:ad:b5:c3:79:f4:b5:13:d6:05:96:b9:83:
8e:bd:76:2f:25:5a:78:7d:64:3f:3c:26:c3:d5:52:e1:ae:83:
94:c7:15:ac:c0:1b:ac:e3:63:d7:f0:c0:8a:5d:b1:06:a3:2d:
ac:7c:a5:ca:a2:5f:f8:17:b6:78:37:3c:51:96:25:50:35:b3:
a7:fe:2c:8e:33:a4:29:60:38:b0:8b:ad:94:3b:3f:7a:6d:23:
e7:97:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:27:51 2025 by rpki-client