Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
File: uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json)
Hash identifier: +ia+yCIoOdBcxcFah89Yu5ED/6KrEP0rLn5HqwMIuYA=
Subject key identifier: B2:11:6D:40:AE:A7:85:B5:18:D2:E0:7F:91:0C:53:01:02:3C:FD:3B
Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
Certificate issuer: /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Certificate serial: 0199FBEAABEFA5BF151754C63301FE63CC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
Manifest number: 0DAE
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: UEiFsCsSTC0Pg31Jp2WQ3gV01xE.roa (hash: ITQdPL8nWruiENBkvvq4/6T+xWub5wb4OWq1AfgZvKY=)
2: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: VtxuzKXbnZtwoXTe3JZ15vx7MQAQ/E1Gmda7Z0ZqB24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ab:ef:a5:bf:15:17:54:c6:33:01:fe:63:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=b2116d40aea785b518d2e07f910c5301023cfd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:fe:cb:81:ba:30:94:b5:8c:f8:80:24:0b:
fa:21:a8:2a:35:3b:d2:8e:61:9c:76:ce:a2:00:3f:
77:b0:11:77:b2:64:98:12:1f:ef:5e:5d:30:c8:05:
6c:20:6d:12:41:ed:f1:b3:e7:37:10:d9:06:a6:19:
16:f4:96:40:95:22:19:28:85:81:a6:d0:11:97:64:
31:ad:04:2f:d9:ef:79:a9:cf:dc:fb:99:2d:fb:4e:
99:51:f9:cb:13:97:92:1e:f9:d9:48:07:66:b2:92:
3d:5c:01:01:71:7a:ee:43:a3:53:49:56:ce:e3:d3:
a1:60:62:1c:e2:42:2d:46:6e:72:d5:bf:a9:11:ad:
20:18:67:8d:5f:48:8c:0b:8c:09:0d:1c:b4:b7:af:
bf:a0:a6:c1:a0:e2:ab:bb:02:d2:c3:76:c0:51:9b:
25:9c:b8:cb:39:4d:13:ea:9a:dc:55:c0:42:96:aa:
ee:4e:1d:78:06:29:e2:34:2b:e7:a9:f0:16:d3:90:
79:f3:27:b3:e2:77:a2:6f:f2:55:b5:88:f7:1b:5f:
b9:32:49:a9:db:85:32:48:e3:ae:e2:95:79:d8:90:
3a:b9:5b:5c:9f:01:a8:5a:f5:54:75:e2:74:b5:64:
3b:66:e1:b3:10:fe:bb:fb:80:df:20:45:27:f1:39:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:6D:40:AE:A7:85:B5:18:D2:E0:7F:91:0C:53:01:02:3C:FD:3B
X509v3 Authority Key Identifier:
keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:57:95:cd:3d:49:ff:17:f3:16:58:bb:59:e6:9f:7c:07:57:
3c:bb:a9:04:66:34:ab:d1:d4:c0:52:cd:3b:f4:56:b0:4f:85:
5e:45:8e:e8:a7:a8:fd:a4:1b:10:29:3e:85:77:a9:e3:a9:9b:
8f:8f:71:c6:4c:4b:df:79:0f:81:df:31:8f:5e:0b:24:ea:d8:
ce:98:76:19:53:42:d8:0e:b2:c6:f5:5f:2a:ab:3d:04:6b:99:
9f:5d:51:b5:b6:ed:e3:54:6b:2d:66:9d:e8:91:7b:c4:29:ae:
3d:18:e5:bc:8a:c6:74:48:0c:7b:a7:68:c5:cf:4d:2f:ea:e0:
69:5a:57:5e:d8:46:65:08:c1:4d:0f:fc:98:54:07:4c:85:65:
de:24:b4:6d:88:71:31:ef:a0:b0:3a:60:3d:96:ed:7b:8f:61:
e0:e5:38:38:36:34:29:18:ad:75:56:bd:bc:fe:02:1a:48:63:
75:23:26:b6:db:db:4b:a0:6f:93:eb:6e:43:e1:b1:83:e9:be:
39:9c:5a:8e:c1:04:03:28:8b:02:6f:15:35:41:92:ce:82:24:
ec:3d:ec:f0:e6:89:0a:0c:80:81:fd:c0:11:10:c9:12:7b:e8:
02:e3:e7:4e:ab:ee:33:01:c4:a0:4a:19:4e:45:de:88:f7:81:
6e:b9:24:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:48 2025 by rpki-client