Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier: 9AULu3sncFn+gi89TS6jHZ+K+8vGowTyoc6rYnOr4BE=
Subject key identifier: CF:09:91:67:9A:1F:28:B5:A8:37:AA:D4:E0:BD:E8:61:3A:3C:EB:24
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial: 019A7225F1E26DC3B6C19F15926572593D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number: 0998
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: L9CG-uKBgPcQQjIG2xRR57nEAUA.roa (hash: ZHHT6JiUh3jUpW8AwMlMx74U4JBCKKASfzMtrPAJssU=)
2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: XoQTRkha/9DwOh2qCjR0oUAtbwOI7KbWh8400u9JqU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f1:e2:6d:c3:b6:c1:9f:15:92:65:72:59:3d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=cf0991679a1f28b5a837aad4e0bde8613a3ceb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:6b:96:98:01:37:e6:c1:18:cf:5d:ba:43:
7f:2e:75:f6:79:32:bf:99:f2:31:5d:0c:0c:40:f0:
96:a4:5d:9a:79:5f:0d:48:81:69:f1:f6:c2:24:cf:
75:eb:cb:0b:75:ed:bf:b0:86:23:2f:b0:4c:82:79:
1e:9c:41:13:87:9c:d0:e7:5f:13:83:db:e9:91:5c:
b3:c1:d8:43:ef:99:04:8f:63:dc:93:70:0a:41:e0:
92:a2:b5:79:af:2b:68:53:79:4f:66:27:a0:6c:9b:
17:74:de:60:51:f8:e2:d7:ce:24:20:76:98:31:40:
b7:70:f5:d8:c3:3c:6e:45:8b:3f:35:e0:1d:d8:1a:
02:b8:05:73:25:70:40:d9:52:75:0a:8f:ee:c5:f9:
34:01:d7:99:06:b4:81:7d:6d:68:69:45:b4:a6:e5:
53:27:3d:44:b8:f0:4c:9b:6c:b0:18:52:3b:f5:09:
da:36:da:d1:e8:5b:0c:c4:3c:19:07:23:27:15:9c:
71:53:d9:ac:10:54:16:c0:ca:db:26:c9:0e:cd:60:
92:94:37:1d:87:15:36:45:ba:96:96:91:d7:bd:75:
a5:b0:1c:95:43:dd:1b:ac:5a:cb:d3:1a:8b:ab:16:
cb:35:d8:fb:ed:d8:d3:04:39:da:de:26:0e:a4:5c:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:91:67:9A:1F:28:B5:A8:37:AA:D4:E0:BD:E8:61:3A:3C:EB:24
X509v3 Authority Key Identifier:
keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4d:2a:ba:fd:e4:b1:63:1b:53:f6:22:3b:c8:78:3f:3b:9f:
f5:6d:81:28:3c:1c:8d:1f:49:6d:c9:db:ae:02:b4:a5:f0:b2:
6b:33:c6:a8:fa:3d:35:f7:9c:2d:ed:2b:93:98:94:54:1d:93:
5b:84:bb:c0:d6:e7:01:97:81:d9:bb:f5:24:81:fe:74:da:63:
7e:c3:3b:4c:34:1f:2c:67:73:87:dc:06:b1:42:d4:2f:e2:3a:
b6:d8:3f:de:d5:95:27:fd:52:41:47:fe:06:24:7b:60:ba:28:
3d:e2:6a:aa:c6:43:30:d2:5b:ce:55:4b:0c:c3:1d:62:6f:41:
4d:14:9b:c8:ed:2d:f1:94:9c:15:8c:53:e4:c4:d4:d7:be:2c:
44:16:be:66:46:fe:d3:94:04:24:4f:13:92:67:f2:6f:8f:7f:
9b:0f:14:e4:76:56:43:68:4c:4f:1f:8f:dd:a8:80:03:d2:75:
2e:f2:a5:0f:78:5d:97:46:58:56:53:7b:65:8c:fa:5a:8f:03:
c0:b2:6e:47:7c:9a:22:ea:5e:d5:fc:29:76:6a:ed:8c:14:00:
af:5a:41:d0:3e:e7:72:3a:9f:40:24:2c:48:b4:a4:31:84:1b:
b0:95:c7:ca:8f:23:03:0f:2c:10:87:a1:d9:d5:bd:23:f3:56:
88:6a:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:30 2025 by rpki-client