Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: B2GjT2QGxI5fdP5NlSnLCS7h4U/VUtilYXvOGI/dzG4=
Subject key identifier: 78:53:11:D1:24:4F:64:5D:02:E5:5E:D1:25:59:73:2A:D4:B6:09:A7
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 0199FC58382CD49CC37FF22881FA1A31158F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 0538
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: LJJUxw3gy2/x+RFO50MKfR1XMfefMpcqGtRwCgPeZXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:38:2c:d4:9c:c3:7f:f2:28:81:fa:1a:31:15:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=785311d1244f645d02e55ed12559732ad4b609a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:1f:b1:0c:dc:84:33:86:41:72:34:7c:f9:
1d:f7:b0:74:e3:4b:58:34:1a:4c:1d:dd:27:16:63:
c5:ce:63:30:56:6a:30:18:4c:b2:c6:b8:4c:64:db:
04:77:bb:7f:ee:85:5e:2d:fd:c9:44:9a:68:00:ed:
af:8e:62:2f:e0:93:dc:09:8e:4e:19:58:55:84:bc:
fe:55:ad:b9:a7:d3:e8:2d:34:d7:19:81:f8:4b:7c:
72:33:23:13:0f:aa:ad:19:1a:e7:e1:c7:db:29:2f:
c0:c8:3e:8e:07:fd:39:55:85:94:55:ef:ee:4d:fb:
1b:79:90:a8:d6:cf:b0:2d:94:7f:19:9a:49:72:49:
18:b7:5b:63:0f:a0:e5:f0:c5:7a:08:14:75:49:eb:
bf:f9:4d:90:2e:2c:20:94:8d:81:4f:84:3c:73:1b:
9f:2e:3f:21:48:e2:5c:11:73:95:f8:81:0c:b7:94:
e6:85:ce:ea:b3:b6:88:94:8f:81:13:5c:54:c3:0b:
b9:d0:11:58:99:02:2c:7e:68:8e:91:7f:2c:ce:0c:
96:90:ef:b6:8a:18:a1:89:95:37:54:46:2a:78:e2:
ef:86:4b:5c:fd:33:ce:c5:d1:ff:f0:e7:ff:e6:98:
21:96:52:d1:d9:c1:44:6a:aa:aa:82:2c:bb:46:13:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:11:D1:24:4F:64:5D:02:E5:5E:D1:25:59:73:2A:D4:B6:09:A7
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:14:b7:c6:75:61:28:64:90:14:7a:ee:55:c2:43:e8:fd:42:
6b:fc:e3:2d:eb:e7:ea:0e:62:a9:02:56:56:e4:8a:4f:2c:e6:
95:c3:a3:ce:11:07:07:19:64:33:64:e4:4c:1c:32:c9:89:dd:
0f:e7:15:37:de:49:4c:42:39:05:3f:d3:3d:2a:d6:f7:e1:ae:
52:3a:f3:00:f4:7b:fe:3e:7b:af:16:59:b8:b5:40:fd:8b:96:
cb:7b:34:a7:7a:1d:42:04:ed:0f:50:a9:d9:d6:c9:ea:17:cc:
0c:4f:18:5f:08:9d:96:f6:f0:15:4e:87:3f:4d:11:a1:97:2e:
f6:75:ea:58:6b:d2:ae:0a:5e:31:6b:fa:e6:0c:66:98:f0:d8:
51:5b:05:f0:e5:e2:98:1b:fb:e5:9e:e1:2c:93:2e:58:71:7d:
d0:a2:67:d0:77:55:47:b6:45:a5:86:ca:6c:a3:54:6f:df:0a:
d1:1f:32:bc:18:05:99:2a:7b:82:30:15:ef:0e:0d:91:72:9a:
38:88:54:85:53:2d:28:27:28:77:bd:13:f7:66:3a:35:3d:02:
02:e6:69:ce:fc:d6:88:6a:a6:8a:9b:b8:29:4c:44:13:fc:94:
a0:f4:da:b9:e9:ee:e2:58:4c:c9:52:f5:d0:d6:e9:77:93:00:
68:21:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:38 2025 by rpki-client