Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: 5MzkbMRwS8lcBRQh5YfGImlHKO2dDTPx+A16lnzsy18=
Subject key identifier: 9E:F1:CC:27:9F:08:91:DD:B9:82:33:D8:3F:BC:69:F0:9A:7B:D2:B5
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 0199FCFD561337D4E02237C31144511E014B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0E27
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=)
2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: ss825wSaOf55zBzSbIqCrcIvNnm1J020RFEf8vY/N5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:56:13:37:d4:e0:22:37:c3:11:44:51:1e:01:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=9ef1cc279f0891ddb98233d83fbc69f09a7bd2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:0c:81:c5:6e:15:a4:00:8c:f0:9f:91:4c:
92:36:cc:79:6d:21:1d:74:bf:32:7e:bb:d3:4a:35:
54:40:1e:97:13:40:a6:48:f8:e1:12:82:86:5a:c9:
5a:38:81:4e:aa:dc:dd:91:67:76:19:fe:11:9b:39:
68:2b:5d:3a:36:76:cf:5e:34:49:65:2d:d4:82:b1:
55:7c:e4:7a:47:4e:17:4c:5d:12:d3:73:97:04:2f:
9d:ff:be:87:a5:c3:70:0d:ee:86:59:81:7d:92:04:
37:82:71:4f:a7:b3:b1:27:36:0e:40:50:39:ca:f1:
f9:02:61:d1:1c:08:88:22:bd:65:b4:30:b1:f2:fb:
74:4e:d1:2c:07:ab:6c:c2:d7:27:c2:b9:f6:64:54:
dd:7c:f2:42:67:d8:1f:82:4d:f9:6e:5b:97:ea:e9:
d4:ef:36:4b:56:1c:d5:f4:9b:97:26:56:50:44:29:
f0:22:33:c6:9b:c5:19:3d:fb:d7:41:a5:3d:d4:c2:
7d:1d:5c:e8:77:8e:77:48:8c:c9:48:7e:1a:8b:70:
dd:51:35:3a:34:db:a0:a4:b7:ac:63:72:0a:c6:71:
26:d1:fd:71:e4:21:51:bc:01:ee:37:02:75:76:02:
6b:0e:73:d6:6d:6b:00:48:f8:69:37:2f:12:3f:e2:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:CC:27:9F:08:91:DD:B9:82:33:D8:3F:BC:69:F0:9A:7B:D2:B5
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bc:08:9d:75:c8:d9:5f:af:08:49:da:0f:5d:27:d4:94:78:
3e:28:8b:e1:0d:44:da:7f:c5:43:b0:26:58:d0:17:4b:ac:40:
b5:46:72:f8:ba:a0:9a:56:c7:9b:50:58:07:79:1c:0a:fc:ee:
40:70:76:64:50:d1:a3:35:65:fe:d3:32:98:b0:c3:e8:17:2a:
f4:41:62:a6:32:9d:b7:7f:89:30:99:fa:3e:cc:8d:bc:71:45:
1b:cc:b1:4a:fc:98:bc:dc:b4:41:bc:21:97:ed:bc:e8:bd:92:
be:a3:f2:30:35:ee:44:1d:c7:b3:5a:3e:7e:24:dd:7b:f7:52:
29:ea:ab:c2:44:b5:d8:94:13:c9:d4:14:e0:6d:a4:93:1e:fb:
70:cd:aa:3b:48:92:0b:57:d5:ff:22:6f:41:8a:66:80:5d:eb:
30:7d:b9:7d:b8:53:3b:7a:51:f9:53:24:32:35:bf:69:1c:9a:
5c:0e:32:ff:cd:10:7f:15:1c:8b:47:be:b9:bb:ed:40:36:de:
d2:54:14:f3:1b:b1:cd:bf:29:7a:fe:70:18:04:84:e0:b7:90:
e8:a9:a9:8a:c3:6b:e8:5e:0d:9a:90:36:b3:4e:97:d1:e5:99:
9c:05:7f:ce:97:3f:0b:c9:24:6c:7c:65:ea:bc:7f:9c:d2:93:
ca:bc:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:44 2025 by rpki-client