Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: jEbx5mEIZvuseqnf8876+m+FeZItTRIYhFg2mtx+kKU=
Subject key identifier: 1D:1B:10:49:A9:2C:E9:6C:86:66:AA:E1:C1:A2:5A:57:C7:D8:C6:BA
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 0199FD6B021A31B89E680F8CC51A6CF97DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0D32
Signing time: Sun 19 Oct 2025 17:01:12 +0000
Manifest this update: Sun 19 Oct 2025 17:01:12 +0000
Manifest next update: Mon 20 Oct 2025 17:01:12 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: gEptuRgJwUIDHWP5ZIySc5PaIq4dWhRM4lOEzLkUMoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:02:1a:31:b8:9e:68:0f:8c:c5:1a:6c:f9:7d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Oct 19 17:01:12 2025 GMT
Not After : Oct 20 17:01:12 2025 GMT
Subject: CN=1d1b1049a92ce96c8666aae1c1a25a57c7d8c6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:73:a6:bb:b7:93:68:43:63:ce:22:77:54:
87:3d:13:e8:91:40:f3:d6:53:71:70:33:4c:e9:86:
c1:39:68:ab:8f:72:3d:7a:42:c3:6c:49:53:4f:32:
46:2e:20:7b:cc:92:df:c3:37:c1:cf:49:a8:06:bb:
36:88:4e:a3:bd:aa:fc:d3:f5:29:c6:8f:58:d5:a7:
04:f5:2e:c3:1b:41:c4:d8:58:67:3a:82:5b:0e:91:
a8:38:01:44:ea:bc:22:c2:e8:bf:d1:e5:97:4f:32:
6a:47:dc:c8:d3:ae:4d:4c:24:0d:3d:f9:88:b2:7d:
bd:e5:8e:38:e6:e1:27:84:66:66:87:25:ec:b6:54:
ed:a6:a5:7b:74:8b:ae:b2:a2:04:99:71:d8:3d:58:
1a:71:82:64:08:38:44:41:6f:fd:43:f5:0e:9c:ae:
f1:30:97:3a:e4:68:84:fb:3e:c1:a3:df:96:62:ab:
8d:59:fa:a7:ca:09:99:87:30:e6:7f:68:0b:ce:b5:
88:02:ae:a3:46:2a:26:56:3b:76:58:2d:77:21:2d:
19:0b:14:06:39:93:9a:6b:80:b4:7c:27:aa:26:b4:
84:ff:1e:80:5b:c4:16:d3:84:5f:fb:ee:00:76:1c:
7c:55:85:61:ec:e7:81:c2:47:9d:d8:13:2c:00:44:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:10:49:A9:2C:E9:6C:86:66:AA:E1:C1:A2:5A:57:C7:D8:C6:BA
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4c:1a:8c:4b:62:85:b7:fa:3f:5e:71:f6:cf:c6:00:a2:4d:
76:a5:c1:f6:76:e1:56:7f:e8:69:24:1a:d1:d8:f4:3e:98:f0:
60:d3:72:da:72:5d:ae:49:d0:17:b2:d8:46:96:03:f5:ae:a3:
27:7c:c9:1a:a5:6f:7b:19:47:04:7e:f3:d2:63:c8:46:79:29:
e3:d5:f2:6e:ca:ce:f4:63:e6:b7:65:c0:51:cd:0e:19:5a:33:
ec:bf:9c:74:0b:00:55:99:f9:b4:62:4c:27:3f:b2:df:17:b4:
c0:ca:30:d4:9a:d2:e4:07:2c:23:1a:5c:09:d3:9c:04:ad:8c:
50:6a:c4:77:fc:b6:58:b5:49:fe:c0:aa:c7:2e:54:bb:6e:43:
78:12:9a:bb:f0:69:2e:bc:80:96:9a:fe:68:c3:b9:92:48:0f:
3b:0d:50:59:ab:9f:6c:d7:29:d9:36:75:71:90:06:00:25:8b:
25:1f:da:86:93:e7:30:73:18:3f:64:e9:49:7b:13:a7:7c:64:
f9:6f:d5:61:42:da:49:02:ed:00:1c:ee:00:fa:db:96:3c:85:
da:d0:18:c2:b7:d1:ab:c5:d8:a0:93:a6:0e:f4:ec:8f:12:09:
f7:81:c1:63:f5:99:db:50:92:8a:e5:a3:b8:13:56:ff:d4:cf:
cb:40:7c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:51 2025 by rpki-client