Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
File: uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json)
Hash identifier: TqMHY6hQLcZfUa1qANkU1tUYgLbhOjhco+BObDHQCT4=
Subject key identifier: 5D:FF:4D:74:47:56:E8:FD:55:D9:D7:BC:3C:88:B2:F3:E7:ED:CC:13
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Certificate issuer: /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial: 019A71135A31FDED02A786748F461D264E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
Manifest number: 12A6
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (hash: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=)
2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: 72fo8s333W8rcreCVVxVxO7zC45/n3vjWFSPJH+qoYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5a:31:fd:ed:02:a7:86:74:8f:46:1d:26:4e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=5dff4d744756e8fd55d9d7bc3c88b2f3e7edcc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:fc:a0:f9:6c:42:87:00:f2:eb:9f:f8:c8:
25:44:22:41:be:ed:b4:8e:18:04:4a:87:5a:77:2f:
6c:0e:5c:50:43:46:81:43:74:de:d9:53:dc:98:b3:
36:b2:02:aa:5b:a9:08:31:6f:e6:6e:9d:22:c2:55:
49:39:f4:a1:3c:3d:0a:94:76:41:64:dc:2f:31:e8:
dc:52:86:dc:3a:7e:cb:98:14:82:75:94:2b:a4:09:
50:a4:00:16:08:e6:30:e3:e6:37:bf:e4:26:ab:17:
4b:f9:1d:f0:1b:41:50:a3:20:71:0b:fd:d2:ef:8d:
cc:00:c5:6a:31:ec:79:9f:1d:2f:66:82:15:c2:f1:
d0:d5:be:ca:2d:20:81:9d:76:cc:58:20:cd:7b:76:
17:4c:b2:b7:8c:4b:29:19:ae:7a:8d:ce:26:b3:58:
06:f9:46:83:81:67:98:cc:69:24:1f:ab:1f:97:75:
de:7a:fa:21:f7:b8:2f:5b:79:a2:9b:a9:21:0c:9c:
2a:02:ec:b1:f5:1d:92:25:e8:ae:68:a9:76:a3:71:
c2:34:cc:d9:48:2c:38:1c:fb:8f:8a:4d:e5:12:53:
ec:ee:a6:43:9b:ee:58:56:76:15:0c:6c:ab:8b:7d:
4f:94:8f:34:1a:37:57:d4:cc:29:42:7d:ed:2a:73:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FF:4D:74:47:56:E8:FD:55:D9:D7:BC:3C:88:B2:F3:E7:ED:CC:13
X509v3 Authority Key Identifier:
keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:72:f0:b2:81:af:8c:fc:f0:4c:c6:be:75:cd:09:72:b6:19:
d8:9f:d5:1a:a3:5f:38:2e:ea:63:69:f6:f3:bb:c7:b9:1d:6c:
75:46:8a:a2:5e:84:c2:20:0e:2a:60:78:02:e4:e0:d4:a0:b0:
92:dc:ba:ef:61:ba:2b:ae:4f:eb:eb:90:0d:f1:63:b6:bf:c2:
83:f3:44:eb:3e:3e:da:1c:5d:cc:f7:87:6a:b4:47:c6:a9:f5:
7f:1c:8c:6e:91:49:4a:40:67:bd:97:b3:ca:64:7d:4d:af:06:
c3:96:56:cc:7d:0a:bb:7e:a6:35:3b:5d:f3:34:46:82:46:86:
80:ef:58:89:93:53:10:f1:66:06:4d:e4:49:6f:24:47:7e:9f:
c0:fa:8f:a3:a0:48:c1:ea:8f:4d:32:37:17:f5:f7:fe:f1:32:
bc:55:09:48:60:a3:a2:92:7f:5d:45:6d:d3:1e:30:56:c2:8a:
93:3c:c6:10:e6:45:9a:29:3f:02:22:af:02:7e:12:90:3f:9d:
ff:0e:03:60:dc:33:07:f6:c4:2f:1b:6b:d0:ab:00:3e:07:7f:
cd:64:a7:9c:ac:79:a4:1f:79:ac:66:ae:48:80:fb:21:e8:15:
8c:d8:f3:c8:58:76:63:b5:9c:5b:3c:48:4a:6f:ce:88:af:67:
70:ee:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:13 2025 by rpki-client