Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File: uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier: 3VxhdU10vn8rXuYXo3YZ+nrKl1c0C8oXQRmgrSI9OMY=
Subject key identifier: AA:11:51:43:C7:97:21:8A:B1:4D:9E:8D:28:0C:24:A1:29:83:3F:AD
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 019A71B8AAEBD4115D8C541AB79C8E789CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=)
2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: PuBjyqQB943KUSqGtmgLh7C4EhXgtsy3m1fsuAC59Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:aa:eb:d4:11:5d:8c:54:1a:b7:9c:8e:78:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=aa115143c797218ab14d9e8d280c24a129833fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:48:ee:0e:e7:72:3b:29:fb:7f:75:b1:bd:
d2:b7:5b:22:f2:2a:3a:47:87:8a:33:8c:83:97:0d:
b9:92:a0:cb:5f:8d:df:c9:f3:5d:7c:10:ef:b8:62:
34:69:50:4b:f5:f2:32:c0:98:56:cf:0b:76:e7:a4:
be:b0:22:b2:db:11:a5:30:4c:bc:24:10:fd:a0:31:
93:a7:77:5f:36:2e:ef:02:f0:50:c7:97:cb:64:da:
5f:5f:76:92:28:67:5f:dd:3d:ac:57:c2:53:a5:11:
12:c6:09:8b:9c:eb:d9:a1:b6:dc:ac:f8:14:3a:c4:
e8:52:16:14:53:cb:ad:84:e5:af:ff:e5:73:02:dd:
57:e9:5d:bb:5b:e1:b3:dc:b3:06:76:23:1f:9e:bc:
2c:b7:5a:40:47:b2:8c:51:d1:a1:37:a5:c4:c3:a7:
ef:b5:39:fc:5e:6a:0a:99:c1:2a:4b:e1:a4:89:1d:
31:2e:93:09:fe:7b:dd:40:d9:08:b1:7b:b4:de:0b:
4b:d4:eb:17:a9:a6:5d:b2:74:5c:af:59:c4:99:03:
e4:79:a8:e6:ee:5e:98:f8:a4:14:59:14:4c:bb:c1:
5a:b8:a6:93:be:cd:35:4d:a6:af:a5:fd:68:86:03:
72:ab:a1:9b:b7:b1:92:e1:2d:b9:25:20:2f:73:9a:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:51:43:C7:97:21:8A:B1:4D:9E:8D:28:0C:24:A1:29:83:3F:AD
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:01:22:33:b8:f6:1b:57:3b:c3:13:ca:0a:47:48:bd:13:1c:
85:ec:a6:89:a5:6c:c1:15:ff:4e:1b:bb:ef:2b:26:ef:a2:76:
4b:23:e4:50:3f:f6:85:01:9e:01:f9:2a:df:36:bf:c9:5f:29:
17:2c:8e:05:c1:db:5d:b8:0c:a3:65:fb:b6:5f:7d:3e:a8:35:
3e:ac:51:5e:3f:59:fa:4d:5c:e7:d7:9a:26:64:a6:7e:db:aa:
15:a3:57:9e:5f:4a:d8:85:d3:cb:d2:ce:e5:04:38:29:13:57:
23:2b:a4:d3:9a:6e:61:53:49:2e:64:34:c7:66:7e:1c:ab:a5:
59:ee:e6:0a:12:13:af:7f:75:92:f5:21:e2:d6:6b:73:6a:17:
98:0c:9c:56:1b:18:9a:7e:55:42:a4:41:db:98:f2:c2:ed:b2:
34:22:54:4b:cb:80:39:04:c8:69:a6:e7:5a:1a:f9:a7:7d:0b:
7f:cf:8d:26:63:ee:a1:78:50:66:fb:64:8e:c1:80:48:b1:73:
76:60:ea:29:39:ad:bd:01:6d:bd:f2:63:a0:36:b8:2d:c6:89:
80:4a:9d:c8:73:7b:43:37:0c:b7:ca:bd:30:38:a0:10:35:f6:
3d:9e:b2:51:fa:1a:7e:3e:b6:33:f6:32:24:47:7a:16:a6:8d:
25:6b:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:05 2025 by rpki-client