Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: pFFoVNYfKLZYs81sx05yfJfAwkB4LLTKHFuuAZPZpL0=
Subject key identifier: 56:9F:F0:C8:15:44:A8:59:84:0B:B6:8E:88:65:5C:E7:CA:CE:C3:DC
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 0199FD34033CCB8AA3E652C381321F1476CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0E0B
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: 3eC8nP2y0M7Dk50w-cz0uqTipws.roa (hash: oL1pIlz/bhILnljMZOEBWQ6dy5AQHNGyWJuSJLm2sWA=)
2: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=)
3: mj78j7-0AeevMahy3Oa3oEUR37o.roa (hash: GV37V8PynELJMOdG95g3RGrNY37XlDLhQkTKeFw+n+A=)
4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: bUKaGjsZI9xioscFu9uENFeunhV3DO6yUzuxWs4XPUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:03:3c:cb:8a:a3:e6:52:c3:81:32:1f:14:76:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=569ff0c81544a859840bb68e88655ce7cacec3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:e4:ec:4c:79:fe:ff:6e:7e:dd:16:5c:10:
cd:bf:47:b6:f4:87:1b:ec:82:4d:fa:08:f6:68:6f:
98:aa:c1:2b:7a:85:a8:44:f3:a2:58:ce:4e:38:46:
2b:15:f1:a1:66:fe:05:6b:c6:43:57:36:51:09:a7:
57:00:c9:7b:82:1f:a2:42:45:11:3b:36:7e:1b:f1:
a8:fc:67:66:f5:5e:81:cb:49:8c:7f:8c:0d:e9:90:
6e:6e:70:e8:1e:3f:aa:0d:ed:b6:1b:8b:00:81:39:
f2:11:f3:48:c7:43:64:12:e5:38:fd:04:30:52:66:
ef:e7:8a:aa:4a:18:e1:ab:35:b9:7f:12:90:9f:31:
68:c9:50:26:95:29:52:a0:a7:81:fe:c1:43:e7:2b:
50:15:70:6e:95:5c:37:4c:f6:9c:29:48:b4:7d:58:
f4:cf:87:12:06:f0:e8:07:b8:19:73:d6:fc:b8:38:
26:26:b7:14:ea:cf:04:14:43:4a:c2:c8:04:78:17:
7c:2c:b1:69:09:45:6f:48:d0:15:13:a0:75:ac:46:
df:51:05:b9:aa:0d:fb:2b:c6:42:bb:df:9e:c5:c9:
de:98:0b:b7:15:be:90:0c:98:5d:5b:03:82:f6:1a:
92:33:ed:27:97:7a:be:d4:99:20:9d:95:bf:05:62:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9F:F0:C8:15:44:A8:59:84:0B:B6:8E:88:65:5C:E7:CA:CE:C3:DC
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b4:c1:5d:f0:89:96:98:d2:67:e6:7e:d5:5d:da:dc:04:6f:
1b:a1:b3:62:a0:97:7d:4d:ae:d5:8e:a0:5c:46:83:47:37:86:
7b:48:94:51:22:bc:d9:46:33:39:14:24:a8:a5:61:55:29:c8:
27:bf:8f:e7:7c:1e:15:94:7d:6d:5e:7b:d6:5f:7a:9c:56:cb:
8f:54:c7:bc:a4:8f:4c:7f:6a:75:6f:f9:64:c0:75:32:30:fc:
bb:5f:8f:ef:f0:f5:e6:c8:27:c3:77:ef:81:b8:16:70:c4:f8:
1c:3b:11:8a:fd:df:53:50:cf:1f:c6:ff:e5:b3:2f:da:7f:a2:
2e:70:fd:a4:e3:fc:30:c3:43:28:ff:d1:6f:5d:14:f3:00:69:
91:1d:83:46:c8:3c:8d:e7:27:8a:64:6f:ab:d9:3e:9e:a3:e6:
d3:87:76:cd:c1:50:06:67:36:74:fc:bf:89:85:97:7d:af:43:
36:74:4a:92:7d:da:e3:20:89:0d:c1:ad:19:e0:e3:20:9a:51:
d9:57:e4:40:4b:26:d9:d6:49:c1:a1:69:46:82:3a:79:de:47:
e9:11:45:b9:8c:d4:2e:6d:b3:d3:d0:2f:89:f2:37:59:34:b5:
df:8e:1b:8b:ce:f6:c2:9b:cf:72:18:21:ae:2f:87:29:87:66:
86:39:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:38 2025 by rpki-client