Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
File: uBsD4ih1uwcLG3xY6touS7Gqvn8.mft (raw, json)
Hash identifier: kGO4t8k5Zz8RhEK8fWbIYez3EWy8ptDmmKhBRI/+lQ8=
Subject key identifier: FA:A6:26:26:13:8B:FB:AA:42:BF:9D:65:E1:57:1F:BF:00:D2:FA:AF
Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
Certificate issuer: /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Certificate serial: 019A71B8F2E33FFE944EDC1D1456C5BD4DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
Manifest number: 14EF
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: uBsD4ih1uwcLG3xY6touS7Gqvn8.crl (hash: XvdtNq2MY19JouConUiCX8OKbWE7ggDQJKCp2AndEBc=)
2: um_x7j6zVmhOP4mF-URUgPyGQ3E.roa (hash: wUkyiUgLCwXSzxn/Wm+Q/r/1YAgpYiWS11qqDTfEJoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f2:e3:3f:fe:94:4e:dc:1d:14:56:c5:bd:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=faa62626138bfbaa42bf9d65e1571fbf00d2faaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:09:dd:0d:92:2d:7e:d2:1a:1b:4e:74:22:
c1:fd:c5:c8:2e:fd:e0:65:2f:9d:6f:51:08:5e:c0:
ea:00:e4:27:91:2d:0a:67:01:f6:fe:35:0c:2f:33:
97:82:1e:b4:2f:df:d3:c9:86:0c:a7:1e:c0:56:5a:
81:d0:28:01:d8:3e:b9:c2:70:2f:f6:b9:40:82:5b:
bd:df:93:21:5d:71:b2:65:f6:5b:6e:ae:17:7e:15:
31:f6:ec:bd:3e:e8:f1:5c:be:f5:a4:28:ef:ee:a0:
35:bf:a0:bb:92:4a:fa:a5:bf:3a:e6:00:13:d6:5c:
85:18:8d:cb:68:ac:9d:42:b7:14:2c:91:20:49:24:
ca:ef:be:dc:c0:b7:ad:34:0a:23:c8:8f:9d:b7:c9:
9a:98:30:85:3c:d5:73:df:6e:a0:78:75:e2:5e:db:
31:70:10:2f:9b:9b:a1:4b:89:51:91:d4:40:93:ca:
4d:e5:16:be:9b:4a:fc:fc:81:9c:bd:96:25:bd:f8:
f4:5d:8b:bf:79:96:c7:a2:03:29:10:62:2e:73:46:
e3:70:ff:78:be:e4:34:c6:1e:a7:c0:51:95:d5:dd:
26:5f:55:45:e9:72:08:b8:76:b5:82:7a:4e:2f:de:
b2:4e:ef:c2:a5:2f:12:2c:94:28:58:fa:16:1f:37:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:26:26:13:8B:FB:AA:42:BF:9D:65:E1:57:1F:BF:00:D2:FA:AF
X509v3 Authority Key Identifier:
keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c4:f4:cd:72:45:91:50:f4:7b:e6:c2:2e:91:a0:a5:9f:e2:
97:cb:5b:3d:a9:cf:6d:de:58:41:78:dc:4e:12:14:d8:27:16:
6d:34:80:33:c8:95:f8:22:c2:4c:41:c7:30:2c:c0:3c:9d:f1:
92:62:7f:06:41:c9:08:84:a7:3c:29:00:3a:a8:39:3a:af:ce:
0a:11:4a:dc:ed:48:92:7f:98:f1:6c:76:b7:8d:96:f5:0e:2e:
2c:fe:64:32:70:79:e5:79:83:b2:10:14:16:b1:07:d6:02:f7:
bd:17:e1:bc:0d:5a:85:22:52:24:72:24:bd:ce:95:ac:1a:71:
e0:46:72:85:b2:71:bd:1b:e8:65:28:a3:c2:57:06:46:e3:04:
5a:2f:62:55:4c:ef:4f:e4:8f:62:f6:0f:97:e5:29:c2:1e:b9:
3a:ac:6a:fd:aa:2f:16:fa:27:21:0b:4c:84:f4:1d:81:0f:4a:
c5:c4:99:1c:99:b7:f4:a3:79:b4:93:9c:c5:59:fb:93:89:bd:
a3:ab:9f:ae:ca:02:b3:6f:cb:70:b8:59:59:07:d9:d0:6b:c2:
69:de:24:be:93:c6:48:1a:b1:a9:32:4c:08:86:d2:3e:a7:d7:
a5:5e:fe:48:a9:03:dd:5d:25:96:7c:01:e9:85:69:f8:5a:84:
5c:18:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:34 2025 by rpki-client