Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: bYHGk14FS0HlfeRn68XfeyfXzxw7R+yOjM/NCiawWi0=
Subject key identifier: 4F:8C:E0:B2:1F:94:29:6B:46:F3:9A:D7:6A:6D:F2:E3:9C:A0:D0:98
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 0199FE0FD8BC81324F67DFE08EDDE6723F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0B8D
Signing time: Sun 19 Oct 2025 20:01:15 +0000
Manifest this update: Sun 19 Oct 2025 20:01:15 +0000
Manifest next update: Mon 20 Oct 2025 20:01:15 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: F54sX7tY5egJ2C2FHMWOMNv8bBXOIjYQfbIjh/Wndis=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d8:bc:81:32:4f:67:df:e0:8e:dd:e6:72:3f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Oct 19 20:01:15 2025 GMT
Not After : Oct 20 20:01:15 2025 GMT
Subject: CN=4f8ce0b21f94296b46f39ad76a6df2e39ca0d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:75:3f:82:af:2c:6c:c1:d4:a4:01:5d:93:
53:a0:09:09:fc:a1:a1:ce:00:6d:9a:75:69:23:6f:
68:10:1e:4f:25:88:ee:d2:1d:86:5c:b9:2c:04:d1:
46:4a:c1:95:5d:ab:06:33:25:f6:db:d4:18:ef:4e:
b2:29:5b:8b:79:d8:ed:11:20:f9:f9:27:9c:16:83:
ed:a5:28:c7:e4:8c:85:d1:6d:b0:f0:b4:ba:a8:1b:
09:d0:6e:5f:4d:73:e1:7a:83:40:91:35:b7:c5:69:
42:54:04:8c:fd:f5:e2:50:0c:0a:42:1a:77:e6:e2:
5d:87:ad:6e:f8:d6:61:21:b5:53:e7:f4:cd:1c:62:
d7:ac:ef:48:43:27:3f:11:9d:99:c7:68:41:01:e2:
64:64:23:c5:b2:6b:ba:51:ce:77:09:81:c5:89:0e:
2b:24:37:3a:6c:0b:68:31:46:cd:26:93:63:e7:fc:
bb:b5:ee:04:9a:9b:0c:00:49:8b:3f:96:65:af:44:
d6:37:14:71:77:31:9e:cf:91:7f:d1:c4:b2:08:a9:
4e:8e:bf:d5:41:0e:36:ef:2d:79:8b:62:4f:67:52:
7a:29:4f:1d:ff:f9:2d:a3:c5:7f:5a:7f:4d:32:fa:
79:22:ab:f7:70:31:69:b5:d3:fa:b4:8f:c8:b0:88:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:E0:B2:1F:94:29:6B:46:F3:9A:D7:6A:6D:F2:E3:9C:A0:D0:98
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:00:6f:7f:b1:1b:cd:55:ad:0b:30:25:ab:3c:47:14:9e:50:
05:31:fb:73:b5:b2:9f:dc:de:7a:a2:44:dc:7e:65:c8:b9:c1:
71:be:9f:7b:f9:88:3e:1c:de:1f:c7:a9:a6:6f:e1:d6:b1:81:
48:d6:fe:fb:69:18:0c:4e:00:17:0b:39:43:06:b0:dc:a4:94:
0d:53:7e:34:7f:01:85:f8:f0:a3:56:89:a9:2c:3c:99:a9:51:
0a:03:f9:a1:68:51:d9:cf:8f:07:f2:8c:8e:2c:d5:47:a4:9e:
36:00:a2:15:85:00:3a:b4:3a:36:81:6a:f7:3a:ad:38:09:a2:
2d:90:c6:b1:f4:15:fe:87:b1:61:bf:ae:b3:92:20:cf:f9:2e:
45:a3:f6:fd:af:4f:f7:a0:29:60:c4:ad:21:25:af:70:2d:23:
7a:42:ae:58:e1:73:63:5e:b3:8e:c7:09:b3:4b:60:bc:5a:0b:
4d:ed:81:08:2f:d9:4a:8e:fd:e9:65:c8:1a:0f:e3:07:f6:c2:
1b:c4:8a:69:fa:70:cd:3c:10:17:c9:90:1b:8f:23:39:24:5f:
e4:3b:5f:b6:0d:eb:c8:8a:25:d3:fc:cd:b5:c9:88:22:f5:94:
0d:cb:b9:5d:4b:fe:7d:a5:51:10:8b:a4:2c:d9:99:6b:4b:f0:
13:dc:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:03 2025 by rpki-client