Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier: mtsn2eMJQ8+KgmZDqAlGwMhG1lCy/fuVwrCuhTiY+yM=
Subject key identifier: 1C:B1:51:63:30:38:6B:16:FA:E3:B2:36:A3:61:26:64:B1:7B:03:CA
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer: /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial: 019A22F702B31EC1CB58BD568AA67D2EA2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number: 0A2A
Signing time: Mon 27 Oct 2025 00:00:04 +0000
Manifest this update: Mon 27 Oct 2025 00:00:04 +0000
Manifest next update: Tue 28 Oct 2025 00:00:04 +0000
Files and hashes: 1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=)
2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: ZkpNhWdgf35gpOKnoBZoUV35em47oV+1zRJ1CYS+x8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:02:b3:1e:c1:cb:58:bd:56:8a:a6:7d:2e:a2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Validity
Not Before: Oct 27 00:00:04 2025 GMT
Not After : Oct 28 00:00:04 2025 GMT
Subject: CN=1cb1516330386b16fae3b236a3612664b17b03ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:b6:03:c8:40:7f:5b:18:9c:67:64:fc:c4:
6d:83:cc:8e:7b:67:35:58:47:ee:f3:bb:0b:b9:1e:
03:5e:26:cd:e7:a3:f9:34:1f:f9:6a:5f:cf:a3:70:
f1:1f:6e:4b:9a:7b:02:53:77:77:2d:a9:a4:14:d8:
7c:ab:43:d8:65:cc:8e:30:92:a4:ea:9a:10:62:1b:
42:42:cb:d7:a9:55:ca:67:65:1b:f6:34:99:7c:30:
69:3a:71:97:14:07:a9:53:78:e8:7a:72:a9:71:21:
4d:d8:03:4a:94:4e:ff:e1:0f:97:c6:bd:63:da:12:
f5:7d:39:bd:67:1d:5f:59:f1:27:bc:16:7d:59:b7:
96:b5:96:4b:29:a5:52:f7:00:fd:10:15:f2:20:8a:
54:f2:4d:0a:5f:95:3f:b0:c6:80:42:f6:4c:26:11:
98:38:e4:9e:18:49:cd:f1:0f:52:b4:1d:c1:8b:8e:
ba:df:80:a9:38:2d:a0:50:49:2d:f1:f6:d6:f0:f3:
99:73:61:be:07:5c:f9:04:c2:80:19:62:35:98:07:
04:58:da:cd:70:34:f4:d0:bf:8d:70:cb:ea:1b:8b:
aa:61:5a:b2:d6:41:3d:9f:b5:58:64:be:ea:b6:1d:
d6:02:a5:36:52:05:12:1d:e6:00:62:46:16:4c:9c:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:51:63:30:38:6B:16:FA:E3:B2:36:A3:61:26:64:B1:7B:03:CA
X509v3 Authority Key Identifier:
keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ef:a2:4d:95:7a:a8:ff:d6:28:3c:13:06:82:0b:50:20:f3:
6b:ac:e7:2b:fd:1a:42:97:43:44:14:22:2e:bf:3e:69:be:d3:
ed:37:67:0d:dc:2e:27:b6:9f:d7:7f:35:d9:dc:4c:f2:78:2a:
e4:8b:e4:a9:cc:cf:2e:ed:da:65:7c:dd:dd:c4:e8:29:2c:81:
ba:5f:fd:a0:c1:4c:4f:d5:76:4b:ad:e8:5f:e1:77:4f:ae:b3:
8b:98:59:8e:88:f6:9a:1b:8e:d9:0e:c2:1c:ee:4a:df:16:ca:
f3:8d:50:57:3b:c0:54:4c:be:a3:f8:39:00:e3:1d:0d:65:be:
79:aa:71:29:9a:47:e3:3d:4b:33:64:7f:a1:8e:58:37:f1:b0:
bf:6e:99:34:01:4c:92:4a:79:1c:23:6e:29:da:e1:71:c4:9a:
cb:40:0e:55:31:92:9a:12:32:d6:cd:6b:45:16:c1:5e:d1:9e:
a4:77:a1:a9:ea:01:b7:17:7f:79:29:4d:9f:c8:3f:97:85:eb:
5e:a7:41:68:83:51:9c:db:0c:f3:05:c2:36:d3:09:2b:51:13:
e4:05:9d:bc:2e:43:07:13:4b:e8:0f:9f:2f:84:00:d7:16:42:
86:29:a2:1b:77:08:85:6f:f0:1b:78:cf:ce:bd:1a:ab:e7:36:
e4:6b:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:54:47 2025 by rpki-client