Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File: uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier: 8ki400LQq7GgJl2zvzbxmZIyoW/qGlw7gXZKivbIZvo=
Subject key identifier: E9:52:CF:BA:DC:25:26:14:0A:47:E4:9B:6C:BF:B0:51:05:67:DD:33
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer: /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial: 019A1D2CCF006E051AD1707B8D0C692BFBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number: 06E6
Signing time: Sat 25 Oct 2025 21:01:07 +0000
Manifest this update: Sat 25 Oct 2025 21:01:07 +0000
Manifest next update: Sun 26 Oct 2025 21:01:07 +0000
Files and hashes: 1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: VuOI+yxo7Jgngvl6sFr85p4EYFgniK5rs2UoLZd5vvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:cf:00:6e:05:1a:d1:70:7b:8d:0c:69:2b:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Validity
Not Before: Oct 25 21:01:07 2025 GMT
Not After : Oct 26 21:01:07 2025 GMT
Subject: CN=e952cfbadc2526140a47e49b6cbfb0510567dd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:f1:57:06:ba:e5:d9:92:67:c9:6e:10:e2:
98:63:20:22:3e:2a:c5:f6:e3:b2:50:e0:69:07:0d:
af:df:7e:53:b8:18:fb:9a:c1:c0:1f:9e:2b:0d:d7:
0d:03:91:51:4f:7c:c8:d1:7e:91:58:6b:5b:1a:3e:
2a:b1:0a:ed:fe:e8:0a:a2:bf:2e:e3:b4:08:13:a5:
79:7f:b6:2e:fc:7f:63:0d:a5:28:c7:3f:8e:d7:8e:
c7:61:60:d3:27:34:bd:d5:28:a9:4e:44:a5:83:67:
69:a4:81:be:29:4f:50:6e:c8:47:eb:2b:a7:9c:97:
0e:5b:46:61:79:48:e6:e5:f0:cd:6e:8b:b6:e8:7a:
b8:ea:8b:9c:6a:ae:3a:ee:29:c2:03:27:95:f6:83:
94:d8:5e:20:52:cd:8f:62:72:31:0e:0d:f8:fc:bd:
91:f4:24:c9:fc:ad:ea:be:b7:fd:a7:0e:cc:ac:6b:
5d:5c:82:ff:78:bf:00:19:56:45:06:aa:c8:dd:c8:
c7:99:e6:9a:70:23:d5:1c:c7:d8:a6:17:9c:cb:88:
47:61:ff:df:8b:cb:a6:f6:29:8f:ad:08:91:53:17:
b0:01:0a:7a:e9:36:10:bf:06:27:3e:79:24:17:60:
ec:d4:f9:94:2d:f2:10:d7:70:64:2f:69:f2:ee:c0:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:CF:BA:DC:25:26:14:0A:47:E4:9B:6C:BF:B0:51:05:67:DD:33
X509v3 Authority Key Identifier:
keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:ad:64:0d:95:bd:0a:09:0e:75:27:f1:96:05:ee:b5:62:
c1:f6:72:cc:0d:b2:46:cf:0d:c7:e4:00:43:44:35:0b:2b:d0:
60:27:93:f5:f5:97:15:19:89:35:d2:aa:3f:bb:c2:27:99:56:
fa:cf:9c:6a:78:4f:a9:f2:62:f2:fd:a6:86:fc:31:c8:90:2c:
7e:d5:b4:8d:fa:cc:fd:85:a1:0c:e6:87:b0:35:34:a2:b7:20:
fe:51:8b:18:87:2c:76:2e:36:af:69:c2:2d:f7:03:1e:35:68:
f0:fa:4d:46:b8:11:66:08:20:4d:6e:01:88:fb:38:b9:0a:b5:
0e:3d:e0:cc:77:46:1b:2c:30:c0:f4:9b:67:5d:47:1e:7c:68:
d2:50:1b:9d:25:3d:c0:da:f7:3c:00:fa:f1:dd:11:7a:90:e5:
b5:d6:65:6f:81:fc:93:15:1d:62:43:d7:74:55:49:5e:01:10:
a0:cd:54:34:4c:66:b7:44:9e:21:3b:7a:58:9d:53:c9:a4:d7:
22:ca:cb:10:83:f8:c5:eb:fc:05:5e:bb:d9:16:4c:52:9e:75:
5f:e7:44:53:eb:84:04:97:11:1d:1d:8a:a9:ce:43:cb:76:76:
2c:2b:ad:5b:cd:ed:d6:e9:77:9e:21:64:84:f2:23:84:57:67:
e0:1e:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:18:03 2025 by rpki-client