
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: Ht1mf1lHfjMCzK77te2TZHvFZsCn9Ynz1RU8OBcJTEQ=
Subject key identifier: C0:15:FA:98:C2:5C:15:0A:FC:D4:F0:B6:68:3B:78:F2:02:D7:AF:98
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 0199FBEA79BC43DD0E2DF46BF778738DCC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 03AF
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (hash: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: qRPuVlNPwLpHV6RV7ZUoO9m8IlofgZMaHBPF4PbNSsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:79:bc:43:dd:0e:2d:f4:6b:f7:78:73:8d:cc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=c015fa98c25c150afcd4f0b6683b78f202d7af98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:f9:f6:8e:5a:7b:b8:4c:96:06:60:34:ef:
21:d6:b1:bb:fd:39:44:4c:5f:a4:f6:1c:dc:7b:7a:
49:85:55:69:42:ca:8e:ab:1c:68:5f:d4:a3:56:ba:
8e:85:df:26:d4:e9:52:84:89:7b:52:5f:45:fd:11:
88:fc:0a:d8:a5:20:74:c1:ab:07:68:bc:25:67:10:
c7:89:32:ae:55:58:fc:ab:4b:da:aa:3f:6a:3b:79:
a7:f8:18:ab:2a:8e:e2:f4:e5:f6:28:d2:f4:be:7a:
75:0a:7e:57:8d:64:7a:d8:ff:23:28:e8:ee:a0:14:
92:a0:77:e9:e2:8c:8f:8f:74:d9:7f:79:7e:2d:2b:
4e:be:2a:71:b4:1c:3e:03:64:c9:3b:53:cb:a0:40:
7e:7f:1d:89:65:fe:e9:53:02:f1:da:e6:16:91:81:
c1:05:8d:5c:bc:9d:0b:58:bb:c8:f2:92:ae:da:b9:
1e:bc:a6:48:d3:c7:19:04:f1:4b:de:d8:6a:a7:34:
b5:40:7a:5d:3e:46:63:0d:d3:37:b7:e6:21:ae:84:
7d:d6:63:6a:13:71:87:80:0f:cd:21:93:21:8f:3c:
5d:75:30:b3:31:89:0b:b5:54:5b:02:de:f7:d4:84:
3b:bd:b3:20:9b:a4:b5:8b:29:32:0e:fd:65:bf:9f:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:FA:98:C2:5C:15:0A:FC:D4:F0:B6:68:3B:78:F2:02:D7:AF:98
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a7:7f:8e:e5:3d:4e:4d:ee:2a:3d:23:b1:8c:d2:2e:7c:06:
8b:fa:e4:d9:51:ad:d2:f7:e6:19:46:77:c0:da:c0:79:f8:f4:
af:8a:ac:87:56:3b:b8:13:ae:72:6d:87:3e:c7:66:89:f8:ae:
75:f7:84:46:36:8c:94:d8:dd:00:47:c2:3e:17:bf:3b:a2:ec:
b0:74:da:30:e3:e0:ea:18:93:7c:0b:53:57:be:f5:8f:06:d8:
9d:84:6b:f2:59:be:c2:01:35:4f:78:3b:f6:b0:f2:ab:f9:10:
c6:c7:6e:f3:91:80:ac:52:e9:42:50:64:f6:03:fc:1a:f2:38:
32:b9:11:0f:cf:c9:05:83:f9:c1:f9:3f:68:89:15:a1:0f:25:
67:59:f6:a4:ee:60:8f:14:11:96:d2:59:d7:30:d6:d8:d1:ed:
83:73:b3:00:bc:4a:33:10:04:90:fc:23:ab:b3:9a:c1:31:fb:
27:e7:1e:c3:3f:9b:c8:b6:6c:c6:b0:9f:cf:2d:84:28:43:e4:
44:32:d9:3d:e2:73:53:4c:4e:6e:c0:8a:74:75:1b:9b:44:d3:
bb:05:16:56:d9:f4:76:f1:62:86:b5:96:5e:c2:08:e0:ef:3b:
9d:1e:66:b5:28:57:3e:c1:af:57:4c:99:ab:34:d2:20:fc:57:
a3:dd:b1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:13 2025 by rpki-client