Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: QgWCAroI8DdKLoKHVENswW9xqgOn4DCu5WWVw7RfsVA=
Subject key identifier: D8:1D:D1:B1:33:35:D3:BA:65:F1:8D:8F:23:AE:1C:1E:4A:1F:F6:F2
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 0199FC8F449907A3C24740FD0FBBC49BD53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 145B
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: 0CbtDNQGB9RQH3QI21EGcBiCDVsad9swQ8Nn4YP5PJU=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:44:99:07:a3:c2:47:40:fd:0f:bb:c4:9b:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=d81dd1b13335d3ba65f18d8f23ae1c1e4a1ff6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:83:e6:a4:91:6f:8b:6f:94:4e:42:f3:a7:
20:73:4e:02:99:f4:67:9d:a5:8b:4a:f4:0c:5e:d0:
ad:cd:1f:8c:25:57:cd:07:df:e4:7f:8f:a7:1c:c7:
64:c6:f4:86:18:ea:be:f2:63:cf:40:6c:21:6d:99:
24:05:42:dc:37:b3:e3:57:af:6a:aa:d1:2a:c9:75:
f8:00:fd:ec:e9:eb:4f:4c:94:e9:83:91:08:d5:91:
b5:16:28:16:67:fd:87:be:e9:f2:57:86:9b:86:6c:
95:5d:dc:fb:c4:f2:aa:38:f0:5d:e2:91:e5:d2:fd:
a8:d9:7f:ac:66:d3:66:97:28:ba:1b:23:a2:0d:65:
4a:27:5d:c4:a8:e0:b8:e9:32:cb:2d:1b:c9:e7:da:
1b:03:37:c9:12:db:cb:6f:0d:4a:a3:9d:f9:1b:a0:
d4:66:0c:00:18:eb:9c:84:02:50:22:fd:9d:cb:9c:
f8:de:19:ed:91:a5:19:4f:30:30:55:8f:e9:0f:75:
e6:4d:16:9a:eb:49:a3:c0:90:c1:51:b0:96:57:95:
2f:1a:77:11:d0:2a:5a:fc:96:56:e4:c4:f3:f5:2a:
45:b0:ca:57:c5:21:18:29:d1:49:db:81:ba:8c:2b:
b0:f8:d3:d4:0e:ae:7d:5c:14:f0:ed:4e:8a:b1:13:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1D:D1:B1:33:35:D3:BA:65:F1:8D:8F:23:AE:1C:1E:4A:1F:F6:F2
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b2:e3:fc:a9:b3:d3:15:df:23:8c:40:bc:60:ba:13:4d:91:
e7:59:89:e4:2f:07:8c:e9:55:3a:c4:90:47:47:3d:9c:7d:14:
e1:7b:f0:79:d8:c3:cb:b6:1a:cd:51:eb:83:7e:9a:19:64:e5:
73:ac:88:c7:20:02:69:90:79:c0:68:98:64:5e:82:6e:ce:4e:
ce:5a:ad:3a:b5:39:d1:c7:45:95:63:f0:69:60:c1:ea:e1:2f:
97:82:b4:b0:64:38:21:c3:cb:e6:38:0c:90:94:74:d9:99:18:
95:c1:05:ad:ff:87:03:e8:ec:af:4e:74:2d:de:1f:ea:53:64:
e4:f8:f9:cc:13:a9:50:1d:dc:45:38:93:21:be:ad:51:ee:38:
b7:5a:23:e2:9c:41:a8:d5:d6:14:84:d1:9c:b3:74:ec:bc:04:
37:b7:40:c5:59:09:b4:59:64:91:c5:ee:d5:f4:d0:71:34:46:
92:7a:e6:29:09:b3:29:46:9d:2b:88:c2:f2:d8:66:51:d5:d8:
37:06:c6:cb:85:fe:b1:8b:dc:ce:a9:3a:d2:a8:2d:e9:8a:9b:
25:a7:22:9b:80:70:6a:49:34:0c:9a:57:44:5b:33:e9:96:46:
a6:46:5f:7d:6c:e1:64:e1:f0:64:d7:9a:d9:b9:69:bd:e2:08:
a7:11:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:59 2025 by rpki-client