Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: iy5oNcaiyCnhib2tp9N952atpPy2WA/4mADcOdGGtIc=
Subject key identifier: 68:54:E1:B8:C9:63:32:78:37:FD:F1:C6:F2:E3:FB:9B:FD:9C:F7:9A
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 0199FAA148C1082649E04552C63C7E6F1072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 14EC
Signing time: Sun 19 Oct 2025 04:01:37 +0000
Manifest this update: Sun 19 Oct 2025 04:01:37 +0000
Manifest next update: Mon 20 Oct 2025 04:01:37 +0000
Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: X2ZzGDwsrcBU/8NdX3lT4pt175Az80c0t88vrR3yJIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:48:c1:08:26:49:e0:45:52:c6:3c:7e:6f:10:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Oct 19 04:01:37 2025 GMT
Not After : Oct 20 04:01:37 2025 GMT
Subject: CN=6854e1b8c963327837fdf1c6f2e3fb9bfd9cf79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:e0:40:d5:76:36:d9:55:2c:64:ec:f0:a0:
50:7c:da:9d:6a:7e:9d:cb:a4:16:d5:0d:01:30:76:
5b:82:34:8a:23:ff:ef:2a:57:bc:e0:4b:2c:f9:65:
1d:59:20:89:c3:7f:89:96:0a:47:87:1b:64:0f:71:
63:a0:0a:f1:ae:a1:13:6d:b6:7d:68:ba:ad:54:78:
4a:c7:c3:a6:72:96:b1:56:05:cc:43:f6:ea:66:d4:
91:fc:67:65:24:2e:1c:ec:ba:cf:f0:fc:60:56:43:
44:3d:29:a9:14:6d:99:1e:87:92:74:11:6b:69:13:
eb:e3:ba:bb:81:ba:f0:9d:62:f2:43:1f:0c:09:36:
8c:85:3c:55:46:39:b4:ba:f0:73:95:4e:44:78:ba:
70:b1:9f:1b:fb:c2:9d:01:1e:73:5b:90:e1:8d:92:
87:59:0a:8f:cf:40:3f:70:6b:73:4c:82:e5:3e:50:
21:7b:15:26:c4:68:c6:c6:21:85:38:c7:00:43:9e:
94:45:3d:3c:00:12:71:1e:4c:61:48:9d:e3:26:b2:
45:0b:e5:6a:fc:05:23:db:bb:c2:39:0d:8c:9b:33:
e2:6a:d0:58:a1:26:9b:7a:df:b6:ce:13:73:57:61:
41:23:c7:cd:a4:7c:a2:43:79:c8:1f:59:f5:32:2a:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:E1:B8:C9:63:32:78:37:FD:F1:C6:F2:E3:FB:9B:FD:9C:F7:9A
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:16:17:6b:e0:66:cb:a1:c1:98:c0:01:b8:25:f0:9b:86:3d:
63:3f:f6:a5:46:ca:14:60:11:1f:11:f0:7c:41:63:48:74:c9:
e2:17:ae:f3:06:6b:1e:03:a5:85:09:5b:e0:45:b1:65:7d:ac:
03:bb:bc:b3:30:7f:e7:1f:e1:9f:6d:c0:9d:af:4d:e7:c5:b2:
d1:5a:52:54:2e:b7:00:3b:f0:54:d0:5f:0c:e8:ad:24:e9:04:
15:4f:8c:ed:cf:7c:d2:fe:9e:4f:19:ac:35:dc:bc:a4:57:18:
d8:82:a6:af:50:34:92:ee:45:71:6e:cb:ab:55:92:5c:59:c9:
79:77:69:15:a4:37:1d:a9:ae:f3:93:2f:a8:36:e9:5d:1e:90:
8e:5f:f5:26:b1:3c:c0:6b:02:05:a0:55:ef:a4:7d:5a:ea:6d:
9b:34:80:20:25:47:c0:a7:c1:2d:3f:a5:0d:3c:6e:11:6a:d9:
2a:aa:0d:d0:fd:b3:29:20:42:69:21:85:75:a6:2a:b9:73:35:
81:f7:d8:4f:d4:32:b0:cf:7d:b7:33:25:e1:ea:ff:18:d7:c2:
6a:77:d6:95:6c:fb:d5:bc:1a:b8:a0:36:24:09:92:a6:db:83:
93:f4:a4:d9:6a:f2:30:0e:7a:c2:33:22:b7:7b:50:73:4e:c6:
f5:8b:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:43 2025 by rpki-client