Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: AuGgkhGKQjxzepdb3nKIJWd388mAlaaju8G5Y+NzL6E=
Subject key identifier: C1:C9:A9:5A:04:2B:59:7D:DF:15:8A:CA:E0:A3:FE:69:8C:CA:20:36
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 019A7149BC48A87136CEA675BD4E83F43BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0D60
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: D9/WDLTCClQSM8LkWQd4EIcpDl7/LdhUlymNRfZ9q1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bc:48:a8:71:36:ce:a6:75:bd:4e:83:f4:3b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=c1c9a95a042b597ddf158acae0a3fe698cca2036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:9e:93:1c:82:3c:08:8b:bf:97:23:ee:69:
21:27:aa:0f:74:75:e2:3a:5e:fb:23:75:e7:87:57:
50:aa:2f:62:00:d1:69:50:75:47:c4:9b:8c:59:78:
87:92:6d:04:ca:e8:43:6f:8c:78:73:92:0d:1b:ca:
5b:e7:31:31:27:3a:06:cd:6a:64:80:e1:6b:ac:a6:
cb:a7:4a:dc:5b:08:86:67:e2:bd:bd:c1:4d:6a:78:
f8:fd:1e:80:7f:2d:9b:c1:3f:a5:70:46:2b:aa:80:
89:37:4c:db:aa:f2:fa:15:3d:db:98:56:80:59:ee:
4f:2c:1e:18:78:67:53:aa:f2:bf:7c:1a:2e:90:68:
d7:48:c1:bb:54:87:ff:1c:98:78:b7:e0:90:c8:5b:
b1:6f:7e:f1:4b:7e:06:c2:79:2d:ca:ae:8d:17:9e:
3f:ae:a3:0e:1c:85:68:69:5e:72:d1:f1:4b:51:ae:
3d:a4:dd:26:e0:42:7d:80:34:6c:39:4a:e2:34:6a:
40:a0:f3:dd:19:20:3b:ea:97:57:ae:d1:dc:5e:84:
94:66:ec:66:9a:62:17:70:7f:18:6a:62:7d:69:e2:
25:ba:46:5d:b5:6a:6b:9e:92:af:cb:a6:6d:7a:d6:
26:22:26:d4:f6:95:a4:63:77:bc:15:b3:54:5b:95:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C9:A9:5A:04:2B:59:7D:DF:15:8A:CA:E0:A3:FE:69:8C:CA:20:36
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dc:5b:b7:f7:dc:ba:d9:ca:fb:0d:d5:0c:a7:36:b9:ab:1d:
04:69:8f:aa:11:b2:b0:7d:65:eb:80:db:3d:cd:a2:45:e3:d1:
a1:b7:79:09:71:d5:25:1b:da:fc:f2:5f:3a:a1:ad:96:df:14:
ae:9a:55:8e:b9:3b:8e:a9:b2:bd:07:41:10:4f:1b:52:9c:35:
d9:3f:02:57:7f:5a:3b:8d:72:eb:3f:b0:08:63:07:5f:b9:65:
8a:30:d9:51:c3:bc:1f:46:45:9e:69:98:44:00:39:5e:41:10:
f2:a7:42:b4:81:d2:f9:0d:ac:77:06:1c:6e:27:24:2d:32:ec:
40:11:b8:ac:51:3c:e7:0c:f3:a1:43:6b:80:34:7d:87:9c:43:
d6:0a:ec:59:81:27:c2:da:a0:be:7e:56:93:ac:69:ec:c6:f0:
ef:3c:dd:cb:b4:2e:98:5e:62:75:6e:67:a8:f2:0d:b1:b9:ae:
ab:18:dc:8a:ab:c6:5f:b2:1e:a6:78:68:81:83:21:27:94:45:
57:13:69:b0:79:71:c0:40:da:bb:ac:be:68:97:19:76:8a:16:
ce:58:b9:f7:6e:32:37:b9:dc:cb:49:40:0b:e8:83:c7:b6:c6:
18:60:b3:47:9c:41:c8:72:63:49:6b:8a:e9:ef:75:29:31:b2:
15:2a:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:06 2025 by rpki-client