Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File: uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier: XR+JHeaniHZqFKWji2NX6VByO4Lf0KxeknkeLIbXvrk=
Subject key identifier: 91:10:25:CA:F1:4E:4C:DE:F4:7C:41:0B:F7:03:F2:2B:84:7B:C3:70
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial: 019A71137431136349B259ACCB8232B17026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number: 1501
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: I2i9yA5EVrLNdh1kPgeFrmpQYHlRnDwXVUcsKafV/OM=)
2: xqGa5yw14tF9pw6-eYINusEUh7E.roa (hash: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:74:31:13:63:49:b2:59:ac:cb:82:32:b1:70:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=911025caf14e4cdef47c410bf703f22b847bc370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:44:e8:49:83:e3:47:3d:6a:dc:5c:51:b1:
98:9f:3a:68:1f:1f:cb:3a:c8:9f:4d:83:3e:9b:80:
b6:f3:06:3e:0a:25:c7:9e:6a:1b:0b:f0:58:76:44:
23:29:c8:cf:ad:f9:ae:24:95:be:6d:70:21:21:68:
d0:c8:02:21:77:88:5d:41:c4:61:2b:e5:e7:61:89:
b1:cb:e1:44:e3:e7:87:89:db:3c:94:f9:48:96:74:
83:3a:29:60:5b:49:42:50:10:f1:0d:b7:a0:02:39:
83:b6:6f:e6:2e:df:dd:52:3f:03:8a:e3:28:a5:ed:
4b:25:eb:2b:f3:2d:87:a0:d9:f0:07:2b:78:9e:2c:
a6:10:1d:a4:5f:c1:1f:42:a8:cd:40:82:f5:8a:42:
58:4b:79:17:06:eb:1a:2a:4b:d6:1b:85:2c:a2:b6:
82:52:28:05:8c:56:1a:f8:4f:49:87:51:7a:f1:91:
2c:34:0a:b6:4c:4a:97:3c:d5:e1:8c:d0:9a:2a:dc:
18:c5:5f:5a:aa:58:67:0a:d0:b2:d1:21:c3:91:25:
0c:fa:9c:21:a5:66:25:6d:a9:c3:dd:37:d5:3b:b6:
29:4d:8b:42:c9:58:43:3e:f4:23:1d:24:9f:02:72:
bb:67:e1:95:30:b4:1e:04:2f:74:05:5e:a6:24:a6:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:25:CA:F1:4E:4C:DE:F4:7C:41:0B:F7:03:F2:2B:84:7B:C3:70
X509v3 Authority Key Identifier:
keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7b:bd:c5:07:89:3e:2d:b4:68:c4:b8:df:29:01:a9:26:2c:
8f:89:52:d1:8c:56:c1:3d:56:e7:de:7a:6d:11:53:db:5d:98:
de:12:ed:bd:6d:1b:8b:cd:7e:a4:63:c6:2d:72:45:2a:d4:fa:
5e:e7:67:bd:11:1e:75:a4:bf:39:eb:d6:7f:d4:43:c4:7c:95:
6a:c2:ad:7c:c9:09:df:c5:b9:09:93:4c:55:8b:cc:91:87:ec:
7a:94:dc:df:35:79:bb:e5:5b:0d:54:f2:29:10:66:97:d5:07:
95:09:d8:31:2b:c8:ae:49:15:5e:49:ff:ce:36:58:45:32:56:
b7:ed:d7:cc:60:7f:ef:d8:89:7f:fe:d1:16:1d:c1:19:bd:3f:
db:46:8b:b7:ef:8d:74:57:16:b7:58:74:c8:f3:ff:e5:d5:f5:
7b:91:6b:69:37:27:63:27:72:c2:9b:28:93:bd:88:1d:d3:4e:
a6:a2:38:0b:98:df:ce:cf:ce:a6:4c:89:51:c2:f2:52:3d:62:
8e:3e:d4:0e:87:58:8e:23:12:9a:7f:77:e3:b2:ec:65:68:86:
11:51:3c:5c:ed:b1:5d:7e:f7:78:b8:5f:b2:95:d4:59:08:e7:
f0:cd:e8:9f:ce:72:81:4f:fa:18:cc:2f:8e:80:ac:45:23:43:
5e:44:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:32 2025 by rpki-client