
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: ZscmMUweXEvsVqTzxIlExYrK+zGxyGSOjlfd7AYutUg=
Subject key identifier: D6:AC:85:9B:3B:9F:95:33:8D:45:F3:C1:92:BD:05:68:E2:DF:9B:CF
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 0199FFFE8B5E58DB7C31D86D0683A64448CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0B8E
Signing time: Mon 20 Oct 2025 05:01:35 +0000
Manifest this update: Mon 20 Oct 2025 05:01:35 +0000
Manifest next update: Tue 21 Oct 2025 05:01:35 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: Ru9MLPklwLTJpkr+sNmxLLbPSaRvYglS1x7zvRxtwfo=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:8b:5e:58:db:7c:31:d8:6d:06:83:a6:44:48:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Oct 20 05:01:35 2025 GMT
Not After : Oct 21 05:01:35 2025 GMT
Subject: CN=d6ac859b3b9f95338d45f3c192bd0568e2df9bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:84:8e:7d:3d:5a:8d:1e:fe:ed:a4:14:e2:
37:aa:ab:e9:a2:f1:f9:4a:e6:24:98:85:1a:01:ec:
7d:d5:55:b2:3d:48:28:96:26:77:fe:35:a1:bb:00:
3a:3f:d6:d4:ed:7f:30:c9:73:91:12:f5:f4:26:bb:
1b:a7:58:c6:f7:2d:dc:65:d8:8e:2c:37:fb:83:8c:
5d:c2:22:4c:54:09:d8:30:43:86:b6:37:1f:84:74:
4c:70:d0:fb:ca:39:a0:56:92:d9:fd:1f:9a:f4:a7:
2c:01:97:03:8f:31:84:d3:ea:f2:e2:2d:bd:ed:76:
0a:61:1b:b8:d9:4e:19:1c:2a:61:a4:33:cd:fc:18:
ef:c1:83:9d:23:a3:1e:66:9f:3c:a5:b2:c1:06:38:
d5:25:28:a3:1b:0e:dc:a7:8e:42:01:94:4a:7d:42:
a7:f2:43:c5:fd:25:f0:59:22:12:60:2c:95:7c:0a:
9f:73:c4:a2:a1:fb:9e:51:5b:84:d6:58:53:08:60:
a2:1e:46:b4:3c:82:6f:44:65:8b:5c:38:22:fe:1a:
85:db:26:7d:db:32:ff:60:0e:e4:f0:16:d7:83:58:
38:72:fb:1f:ef:3f:ce:da:7c:5c:37:a7:b3:a8:63:
49:d3:97:14:0a:80:d2:30:5c:1d:2b:d1:05:62:11:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:85:9B:3B:9F:95:33:8D:45:F3:C1:92:BD:05:68:E2:DF:9B:CF
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2d:86:4b:20:37:ee:7e:a1:a3:4e:14:d1:c5:0d:58:f5:96:
70:d2:f5:06:1d:13:6b:88:d8:08:75:e6:67:ef:c8:ce:ab:00:
a6:1e:48:05:5d:2e:b7:f3:75:f4:48:40:9b:be:95:d4:cc:d8:
af:e3:03:43:0c:ae:73:d7:0e:46:b3:9e:fb:4b:fa:e4:4c:7b:
c3:a8:5a:47:73:11:f7:13:d4:b5:e6:ee:a0:91:97:b7:7f:91:
a3:87:66:aa:aa:fd:4e:b0:cc:cf:68:2f:38:e2:7c:c8:fb:8d:
99:c5:39:80:f7:9f:44:5f:ba:76:f8:bc:9f:ea:1f:9b:dd:a1:
e6:ce:a8:4f:9a:22:9d:0d:5d:c7:0b:0e:f7:87:9d:0f:b9:f0:
21:9b:6d:0b:d2:63:ce:b5:d8:3a:2b:f3:81:70:14:a5:ef:b3:
2d:9b:c8:e5:1a:53:1d:43:6e:f3:1c:45:c7:12:e2:6d:52:1e:
55:0b:ed:9a:18:43:2b:2b:42:ae:f7:90:e1:90:dd:46:2a:21:
1d:d0:26:5e:c9:dc:d1:5e:f1:0c:8d:8f:ac:23:4d:93:d1:92:
20:c9:e0:90:28:51:5e:53:b6:29:75:cb:40:ba:6f:bc:02:58:
e7:2c:d2:db:9b:56:07:7e:3f:22:a0:3c:6d:af:4d:b7:54:02:
69:1b:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:02 2025 by rpki-client