Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: Elktxb8dEuT35nEXvzNLDBhadDRzbhE23MieBv3UeWk=
Subject key identifier: 2C:9B:0D:22:60:3A:36:FE:4B:6F:A6:8C:CD:66:D5:7A:6E:8B:F0:D1
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 0199FD6AD0BBB672625BC5DC5AF1E2809130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0D60
Signing time: Sun 19 Oct 2025 17:00:59 +0000
Manifest this update: Sun 19 Oct 2025 17:00:59 +0000
Manifest next update: Mon 20 Oct 2025 17:00:59 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: 5CDjJAth9h0qauN1ZRSGlCi8cdCNvI6znldQ82R2myE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d0:bb:b6:72:62:5b:c5:dc:5a:f1:e2:80:91:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Oct 19 17:00:59 2025 GMT
Not After : Oct 20 17:00:59 2025 GMT
Subject: CN=2c9b0d22603a36fe4b6fa68ccd66d57a6e8bf0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:31:93:4b:e4:e6:64:d1:fa:1f:c0:82:8e:
c0:d1:76:69:35:fc:8f:53:dc:00:78:37:0d:55:3e:
bc:4d:7f:3a:d6:7f:70:54:7b:95:7c:c4:55:79:6e:
6b:33:ed:62:6c:81:52:ca:41:07:d4:e3:cf:2c:36:
be:40:74:9f:e2:2d:3b:7e:69:fa:cd:78:9c:68:ff:
db:6b:c3:0d:9e:8d:2f:cb:4e:26:f4:94:6d:fc:5c:
86:a2:23:2d:e0:35:4e:b9:d4:19:e7:fd:45:0c:9e:
7b:5d:bf:b6:32:84:0f:b8:ab:b9:53:3c:30:e4:4b:
ce:6b:88:0c:7b:c7:ac:7a:e3:e9:90:83:9a:57:58:
f2:01:f6:32:25:28:f6:2d:d9:c5:5f:7a:53:75:b1:
d1:fa:04:0d:5d:db:6a:c6:9f:20:23:9e:18:60:ac:
86:74:b4:2e:1b:62:fe:de:9e:35:0e:4e:a9:c4:42:
cd:50:ae:21:86:b8:66:62:54:8a:36:d6:92:47:bd:
29:6b:18:6d:66:19:f3:30:3e:f0:ac:1f:ad:83:14:
49:e2:a6:5e:4f:e3:66:42:a7:59:d0:72:8c:90:fb:
2a:b5:b3:eb:07:eb:c5:4d:ac:08:90:04:aa:7d:1b:
f5:10:a5:e7:0d:71:29:dd:42:a0:df:3c:ce:01:03:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9B:0D:22:60:3A:36:FE:4B:6F:A6:8C:CD:66:D5:7A:6E:8B:F0:D1
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:76:b8:81:ba:da:f5:69:2c:0f:cf:72:f1:c0:e6:db:68:0d:
b9:f4:c0:90:ff:d2:cd:7a:d7:6d:47:44:d2:c9:37:cd:98:75:
cf:a1:c3:a2:ab:6a:34:91:31:bc:1b:1e:54:70:d1:a2:c7:45:
1e:f7:96:b4:8d:a3:e5:76:f2:0e:7b:bc:bd:f8:07:5d:3e:cd:
b6:24:f6:e0:d6:98:64:68:b9:4c:ab:e9:9b:b9:45:cd:f4:eb:
75:36:59:05:4f:3e:55:dc:1b:e3:4e:1e:a9:22:be:0d:a4:86:
0a:06:cc:d5:18:bd:7b:dd:b4:40:07:01:80:ab:dc:20:ec:c2:
21:ae:20:9e:74:67:5d:5e:75:ab:34:d7:70:e3:41:cf:61:14:
1a:3b:43:7c:43:9d:ee:c3:f5:c4:0a:bf:8c:ad:6f:cf:4a:eb:
81:10:ac:45:ed:05:c3:1b:18:2e:f9:f4:ad:50:0c:88:e5:58:
b6:2e:a4:5e:a0:cc:00:01:72:1f:a1:13:44:70:65:15:a3:f5:
ee:40:42:75:57:b9:8e:73:74:56:36:0d:86:71:6a:31:0d:4b:
00:54:30:fc:4b:84:08:d0:41:63:3e:b5:07:7f:d8:5b:b4:51:
14:2e:92:1d:98:75:5d:a4:a7:82:e5:67:76:b1:9c:30:64:c8:
87:ef:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:46 2025 by rpki-client