Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: 0fwBrMQDR+XqYsBM/O/EIgActgKki7xjqeCAj/vwCKg=
Subject key identifier: A8:94:CB:D5:74:9E:E4:F1:E2:61:DB:E7:33:DB:E7:FE:EB:93:D6:5F
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 019A0147AAB96F39C811546776FCAAF7F45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0F68
Signing time: Mon 20 Oct 2025 11:01:05 +0000
Manifest this update: Mon 20 Oct 2025 11:01:05 +0000
Manifest next update: Tue 21 Oct 2025 11:01:05 +0000
Files and hashes: 1: LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa (hash: mQpu5Z0eDQkFYVXPC9Ju2CwxJctFEU3LSWItHzUvqPk=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: DnVdJGv97hCDBBkU+AbfwfGqoEhghkqLUw/MVQoDO8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:aa:b9:6f:39:c8:11:54:67:76:fc:aa:f7:f4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Oct 20 11:01:05 2025 GMT
Not After : Oct 21 11:01:05 2025 GMT
Subject: CN=a894cbd5749ee4f1e261dbe733dbe7feeb93d65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:19:17:95:28:bf:fe:8c:5b:29:0b:30:11:
76:fe:17:0e:27:cc:b8:f6:36:a4:ad:e7:6e:09:e3:
9f:f3:19:3c:7d:33:9e:b5:1d:c9:f0:0a:45:10:58:
19:af:ae:3a:5a:13:e2:bf:20:a3:40:0d:31:88:41:
57:8b:0d:9c:41:7e:59:5a:f3:6c:35:0a:18:34:d4:
27:23:e1:70:87:ec:1c:a6:39:50:1b:ce:66:9c:0a:
12:c4:57:b7:3e:32:42:2c:84:2e:29:89:2c:68:7b:
81:8b:89:5a:d2:88:fe:35:a8:b8:f8:8c:28:7f:9a:
eb:18:3e:f7:95:93:4e:a7:50:83:82:8d:2a:8d:40:
e7:43:75:89:ff:15:f1:f4:e7:77:11:04:6a:29:99:
e4:15:30:45:92:aa:9c:7f:5f:29:01:9a:8f:14:6e:
b6:b3:0b:ab:c7:23:a2:65:7c:b6:ed:74:79:8e:b6:
84:d7:db:b8:6f:b4:bb:77:2c:cf:e1:9c:cc:e9:9e:
04:70:47:cf:36:a9:16:af:b7:96:08:e0:18:75:bc:
85:87:70:dd:ea:6d:d2:82:19:74:68:b3:88:c3:ae:
75:b5:4f:f1:75:0d:17:f5:7a:bb:10:3e:27:f7:ad:
63:04:bb:d6:f6:25:a5:3d:c1:fa:f0:f7:ee:d9:1e:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:CB:D5:74:9E:E4:F1:E2:61:DB:E7:33:DB:E7:FE:EB:93:D6:5F
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:da:48:f2:73:a2:e4:42:0b:cf:ab:fa:c2:02:df:d3:75:ef:
52:1c:2d:ea:fa:6a:b3:d6:1b:50:3f:2d:40:bc:c6:d0:76:41:
f3:0b:ba:93:cf:f6:74:32:14:75:c4:d6:6d:ca:c9:8f:e5:48:
c5:22:78:e5:ce:db:29:ef:be:8e:a6:13:ba:1e:c2:a1:2f:8b:
25:83:cf:9b:25:64:32:71:33:af:3a:13:b7:7c:6f:9f:1c:0f:
30:d2:ae:93:7c:ce:74:2b:30:41:5c:8b:46:64:d9:ec:65:ae:
d6:85:16:63:b9:93:ed:eb:7b:e3:d1:d7:83:1b:23:b5:33:5e:
14:9b:6f:c5:25:43:85:03:be:a7:f8:70:32:f6:fc:9c:23:41:
8c:67:83:c0:ca:75:11:4c:b0:3e:9b:0f:87:ab:8c:80:6c:51:
43:44:28:b2:ea:29:be:27:73:70:1b:76:b8:4d:55:66:75:66:
27:29:a1:2f:e2:5d:da:57:4b:a9:28:21:1c:3e:9a:39:b9:fe:
30:f4:d6:ea:7f:ae:53:2d:8b:a9:22:53:41:d4:ad:75:48:64:
fd:55:18:bf:c9:9e:7d:b9:7b:6a:28:7d:2e:42:ae:8c:cd:3e:
29:ca:08:c6:ce:11:67:32:91:48:b8:c9:5f:d4:da:c2:33:99:
48:15:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:49 2025 by rpki-client