Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: LU53m3uNENAxWDXkP9Vf6BGLVIZMzMCiXQShByQL3xM=
Subject key identifier: 8F:71:AF:EF:CC:A5:D9:0D:06:CD:62:3A:2B:FF:72:3B:14:96:23:22
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 0199FC216CC878C9D57697CE491AA33D86DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 1429
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: wU9lBpVR+/KFx1ZQjFfjGLg5dTM6v+kLl/jmUPrgyjk=)
3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6c:c8:78:c9:d5:76:97:ce:49:1a:a3:3d:86:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=8f71afefcca5d90d06cd623a2bff723b14962322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:a4:15:1c:71:3f:b7:0e:73:25:47:ed:35:
4d:33:29:5e:de:0b:d7:91:32:18:cc:91:06:40:f9:
53:89:dc:2b:af:22:bc:77:ee:17:f0:aa:58:1f:5b:
4c:b9:55:5f:77:f8:75:af:f2:45:28:0c:20:a5:88:
32:3e:94:9f:bf:8d:b3:df:04:c1:24:e7:ce:a2:17:
3b:f9:82:fc:e6:88:11:dc:a6:90:f2:5e:13:e4:8b:
d3:d4:2f:9e:63:18:d4:87:1f:f1:0c:97:44:5a:aa:
d8:da:4b:7b:56:ac:8a:9d:b5:ac:81:38:f3:70:3d:
d9:88:2d:82:e6:80:b2:d8:be:f5:f6:03:be:58:d0:
84:89:f2:69:0f:c9:5a:1c:c4:94:6d:1a:ff:0f:b9:
e1:2a:4b:fc:51:ae:cf:39:27:dd:c0:15:aa:4e:51:
cd:c5:83:cc:07:05:20:3e:4a:ea:c5:f6:be:6d:58:
dc:48:27:34:60:d9:78:9a:c3:41:98:2b:2c:3b:e7:
fe:62:4c:be:95:79:cf:3b:c9:7a:11:0c:19:88:af:
a7:d3:86:f4:90:61:d8:a3:e1:9c:68:82:2c:02:26:
b2:e0:36:c3:b4:26:ab:08:d7:86:68:b6:bc:00:ff:
5d:fe:16:0e:5e:6c:a0:f9:1b:e7:63:15:f1:51:92:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:AF:EF:CC:A5:D9:0D:06:CD:62:3A:2B:FF:72:3B:14:96:23:22
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c6:a2:5a:13:79:73:be:95:0e:f3:a4:cb:e2:e3:f8:62:69:
b3:ac:e5:e5:c0:15:81:b8:8c:5c:79:35:c5:65:51:93:46:e0:
bc:1b:32:62:9f:a8:48:43:aa:fe:9f:ee:85:90:6e:22:23:80:
25:a6:8b:19:37:03:0d:0a:a1:8f:a5:2d:4f:67:d0:67:6a:f8:
03:f5:ab:2a:70:58:e4:de:65:fc:98:2f:b1:5c:8d:f8:c5:f6:
64:d8:d9:dc:a9:68:a6:24:36:3d:04:9a:44:a7:ed:f9:c4:8f:
66:98:0d:6c:65:7b:17:31:9c:fc:fa:ef:44:92:71:97:be:4c:
0f:8e:f6:6d:9d:58:c0:d2:b3:84:87:fd:1d:bb:6b:62:4b:24:
3f:be:84:03:76:10:3b:9c:4c:89:4d:0e:d9:99:de:0c:d3:c8:
62:c1:ed:7a:53:a0:eb:93:f3:9e:35:11:d9:80:e8:f8:15:45:
c4:76:80:49:a1:82:59:40:53:f6:96:29:3e:a4:dc:4b:1b:ac:
9a:b8:b3:50:51:52:1c:2c:fe:9b:b3:38:fa:bc:3e:1f:45:c2:
71:da:75:69:26:64:3b:76:84:81:54:e2:78:86:3c:57:52:8e:
f6:93:28:b8:2a:43:0e:2c:2b:50:fe:51:67:00:34:b3:77:f8:
01:c5:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:35 2025 by rpki-client