Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: bA9lWwxlJ2h+0fJXibJ1V4tUX8Eyg66Mw7aK/3slBeY=
Subject key identifier: 62:A3:38:5A:F1:71:0D:26:C3:34:D0:27:49:B0:C9:4E:17:BA:79:61
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 0199FC218D46B7BD9A097CBCCEFF7E44AE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 0E3D
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: KrWaj3PmGUr__R-XWPo-LvjSSzE.roa (hash: D32/8FWqAF1z0NVQywtDopSVNiH+dneRDeaovNlaE+U=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: mjRJdrWJuSYsPleCyvNpVQbQ4Q6cj4C3bwxQuu2iCTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8d:46:b7:bd:9a:09:7c:bc:ce:ff:7e:44:ae:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=62a3385af1710d26c334d02749b0c94e17ba7961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:7d:90:0c:ab:36:a3:a4:f5:35:51:f4:80:
13:05:5c:fa:01:79:83:32:63:5b:47:72:4a:05:f4:
3b:35:b8:a2:3d:a0:55:ec:3a:56:db:19:74:ea:6f:
10:dd:94:13:fc:a8:83:e1:1c:55:3c:f4:3d:79:c4:
8b:53:c0:35:61:13:e0:78:65:13:e2:d4:cc:5b:85:
b0:cd:5f:d0:b0:1c:4b:2c:cd:d2:29:4d:aa:dd:9e:
32:c7:c1:8b:29:6b:62:a0:ea:e6:49:8c:6b:f0:37:
eb:1e:f2:63:79:ea:71:8e:24:37:9e:e3:22:28:02:
57:d6:4f:92:d6:b8:bf:ab:d0:b1:08:1e:4b:e8:38:
e8:bf:85:2d:6d:5e:b0:b7:c3:74:2d:f1:56:fc:8d:
b5:06:5b:18:00:58:42:f6:a3:be:0c:ce:a0:0b:5d:
f9:63:cf:0d:b5:43:82:26:fa:53:55:bf:22:8e:5e:
7e:b4:cd:6d:e7:99:3f:a6:e9:24:c0:f7:b1:59:a2:
67:c1:e6:f0:41:55:89:db:ca:2c:fb:8c:59:32:61:
e2:1c:ee:f6:89:06:83:11:97:1e:e1:11:34:b4:dc:
92:dd:c0:12:f3:21:79:78:92:f5:66:a4:40:82:78:
66:9f:22:96:73:c8:a5:97:36:24:fc:2f:d2:d8:87:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A3:38:5A:F1:71:0D:26:C3:34:D0:27:49:B0:C9:4E:17:BA:79:61
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bd:15:25:15:c5:bf:36:dd:98:fb:a0:8c:b2:8e:01:51:81:
3a:e1:d4:7b:42:2d:0a:2e:d8:5a:3c:d5:d2:b0:00:c0:45:bb:
7b:d5:63:30:7d:4d:e7:b9:68:b9:a4:b0:46:62:c6:90:32:a6:
4d:9b:f4:aa:19:5f:28:19:0b:e2:f2:75:af:1c:0b:7a:f4:40:
a9:36:1d:b1:d0:e0:37:37:74:19:eb:b5:cd:07:67:05:44:d3:
b2:7c:d7:90:1a:fb:66:bc:00:ff:09:c6:af:b5:85:e3:6f:0d:
57:27:49:75:ab:d5:19:2c:59:bd:2d:9d:53:1b:4f:c5:e4:ef:
04:2a:d0:c4:23:c5:26:9f:01:8d:67:b3:97:e0:b9:c7:15:06:
90:ad:da:bd:28:72:a5:45:70:3a:66:9c:07:b5:88:04:b6:df:
4f:5a:9e:15:a2:76:42:c0:24:42:7c:34:77:26:c3:4a:ef:4a:
1c:be:0e:af:80:d3:9b:2f:e7:4e:2f:3d:9c:b9:64:66:4a:67:
3a:89:d6:c2:fb:20:32:02:1f:61:91:7d:17:2c:e8:5b:2e:e6:
c2:f7:7f:a1:da:43:de:1b:fd:62:f1:6d:51:ce:82:9f:f6:f1:
cd:58:8f:d5:05:77:51:d5:b3:bb:d9:3c:fb:b7:41:39:bd:dc:
a4:77:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:52 2025 by rpki-client