Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: TRo1dKJx7J+ai2P+OKkA1pV/o2Sc6zhcIZntKqFpeHo=
Subject key identifier: 61:86:2C:C4:99:17:DA:01:27:36:D2:AE:44:50:5F:DC:FA:49:68:F1
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 0199FB7C9E0D8AC7A9BAC732BEE3133374DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 067A
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: kADfnunwBjGUHdEoNYUYDw/04+7jlw09uYFAOcIb0vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9e:0d:8a:c7:a9:ba:c7:32:be:e3:13:33:74:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=61862cc49917da012736d2ae44505fdcfa4968f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:ff:81:88:f5:1e:cf:f4:96:81:b3:3a:26:
36:ee:46:39:0d:4c:9f:1a:33:b9:25:84:7c:9f:82:
32:ae:2b:0e:38:c8:70:87:2f:bf:65:a7:a1:8a:82:
94:3c:04:7c:cf:df:07:24:cb:f7:dd:03:d8:fe:80:
70:3e:73:4a:43:be:9a:61:67:22:ba:64:7f:a6:51:
34:3d:99:21:c1:63:91:c5:f3:54:73:f0:e0:2d:02:
6a:76:17:a5:ea:ba:17:40:58:4e:03:c7:f1:b9:08:
d9:d7:33:b3:99:98:29:3f:f0:55:9d:1f:1c:e2:46:
52:8e:37:7d:69:34:2b:29:2b:61:d9:bb:19:06:2d:
4b:49:9b:56:3e:ae:b6:c2:09:ba:31:a0:4e:b7:08:
03:b0:38:ac:a3:c0:eb:26:e4:30:22:d9:15:1e:e3:
97:fd:c4:15:81:c8:10:8b:31:e1:04:8e:41:42:f1:
1f:c8:83:1a:6d:a9:0f:10:6b:ad:8a:47:fe:ab:6a:
da:aa:20:40:4b:dd:96:ff:b3:09:bd:8f:19:7d:7d:
af:60:af:f7:63:09:dc:e1:bb:77:0b:a3:a8:69:28:
a7:a8:bd:e3:fd:5e:ae:07:7d:71:7b:44:bd:b8:e7:
0e:95:28:ac:86:b0:21:ae:4d:69:c7:b4:a5:74:2e:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:2C:C4:99:17:DA:01:27:36:D2:AE:44:50:5F:DC:FA:49:68:F1
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c2:94:7e:7d:73:6e:02:9f:16:af:53:63:0a:63:c0:a1:cb:
1a:e8:52:2d:45:0e:99:b5:4f:20:22:99:fc:dc:c2:79:9c:8e:
18:cb:12:5e:44:67:d1:4e:7a:af:f4:26:94:13:28:5a:05:bb:
de:50:49:3e:35:60:48:e7:d0:b8:8a:d9:28:65:d8:10:cb:b4:
ee:14:9f:fb:8b:52:de:25:bb:c2:c7:73:c1:a6:d4:96:6e:54:
51:60:c2:2e:1e:10:b4:48:aa:45:41:2a:ff:4a:c7:a1:0d:89:
ab:29:5f:73:8f:4d:6e:d5:d3:01:7f:a0:ad:9b:e3:78:f0:75:
1a:e5:13:e9:fe:fc:0f:47:a0:38:68:4b:b9:bb:0d:a3:32:74:
6f:e6:84:d7:a3:2d:42:37:de:78:18:9e:8d:8d:f4:fe:9c:31:
88:4d:85:22:7d:06:6e:50:a7:31:0c:34:01:3f:01:7c:88:b5:
9d:e8:65:28:af:55:35:1a:32:5a:84:35:02:78:db:3d:c2:16:
03:2f:24:3c:b1:a0:70:07:89:64:a9:77:a7:be:5a:24:23:24:
d8:c3:88:76:f0:b3:62:e8:cb:e0:01:b3:c9:e9:a3:3e:13:7e:
a4:06:c4:b9:fd:1e:74:0e:10:da:54:89:29:59:83:3f:1a:6f:
9d:24:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:51 2025 by rpki-client