Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
File: uKUWv-ySscjHVz_4hNhBaA5veD8.mft (raw, json)
Hash identifier: 51tzR4zRNXXf/4oC70teloqXZgmt8ci4tKaLF5S5Puc=
Subject key identifier: 7E:F1:BD:93:8D:A9:03:49:46:6F:4B:F2:F1:8B:7A:6E:30:40:E1:D8
Authority key identifier: B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
Certificate issuer: /CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Certificate serial: 0199FBEB5045B1065475318BF8043769EBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
Manifest number: 01A7
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: 3y2tjY2wv2hPWo8Jjs9g1G9k2XU.roa (hash: qyjRMAEUAmhHrAhDYNjvXf2jg8IqGPd2UJBcfxCKTEk=)
2: uKUWv-ySscjHVz_4hNhBaA5veD8.crl (hash: LUlleYALFqNXmWbQ4R3n+6kYFW7hUagqcps9HlNf6ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:50:45:b1:06:54:75:31:8b:f8:04:37:69:eb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=7ef1bd938da90349466f4bf2f18b7a6e3040e1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:50:fb:83:e3:ec:5d:42:0e:bb:cf:46:5f:
02:e5:83:c5:df:4b:98:94:71:73:a4:ea:c2:e7:91:
6c:00:82:66:08:01:60:b3:15:e2:81:9d:ee:ad:71:
cd:9e:c5:b9:de:56:ad:b2:43:d5:db:d0:62:5c:41:
81:c2:a1:4f:62:51:4f:ce:dd:0a:ad:5e:15:e5:fb:
09:44:05:de:7f:51:1c:94:9e:54:d0:a4:1b:5e:4f:
1b:9b:d8:2f:56:c6:d3:e0:2e:a4:40:22:67:50:44:
52:78:e8:0b:8c:56:78:f6:11:1f:60:b1:e1:d1:d8:
b5:9f:91:c0:ab:58:e8:7b:2e:85:38:2c:c4:6e:a7:
a9:3d:f5:e2:4a:4c:53:38:86:e3:2e:3d:73:9c:29:
cd:5d:e2:40:3a:d8:3c:41:cf:70:2f:94:71:44:8e:
b8:c4:bd:6c:d1:96:34:92:eb:82:bd:5d:95:af:4c:
b0:5b:3a:47:3e:a7:d6:57:23:1e:dd:65:91:be:c8:
fd:52:9f:14:a7:2f:0b:5e:c5:92:c9:9b:5d:ee:36:
2e:ad:60:32:27:e7:5b:de:f9:cd:85:ec:96:8d:da:
7e:ce:22:d3:24:97:1e:b6:54:60:b8:db:fd:f9:4c:
a9:82:2b:11:7a:91:c9:cb:7d:36:4a:53:12:be:cb:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:BD:93:8D:A9:03:49:46:6F:4B:F2:F1:8B:7A:6E:30:40:E1:D8
X509v3 Authority Key Identifier:
keyid:B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8f:05:ed:8c:b1:3d:14:ab:36:f1:1a:2c:ed:60:c5:92:4c:
fe:86:bb:c6:ad:3c:76:80:cf:5d:59:d9:e5:db:bc:24:35:15:
ac:86:fc:0b:e5:7b:5d:1c:17:63:91:85:dd:37:7f:4e:65:51:
de:6b:ae:ea:7b:05:34:31:f3:a0:91:2d:53:6b:cf:2a:95:07:
eb:e7:3e:ab:76:4c:58:52:1f:27:03:72:13:dd:d6:90:1f:e0:
cc:9f:cd:24:6e:08:82:f5:b1:1b:3c:51:1a:a5:1f:57:65:3e:
e3:2c:7e:47:43:8e:1b:8c:6f:6d:51:3e:20:de:e0:ef:1a:79:
d9:a7:fc:9d:09:13:17:6c:12:e2:85:7e:4f:d1:9c:dd:8d:b0:
ef:4c:4d:fb:f4:29:61:70:f3:a8:52:a8:84:ed:fd:04:b9:5b:
2b:1e:06:a7:4c:f1:37:44:42:e6:b8:44:c0:61:15:01:4e:df:
09:61:0e:a5:58:76:0d:d6:5d:5e:1d:e5:e4:77:6b:48:3a:f3:
57:f4:d4:a5:d6:32:77:8b:53:d3:10:99:4d:4b:f3:95:82:03:
b0:2e:07:c4:74:c8:f1:8e:08:da:5d:66:4e:8c:88:40:e4:3e:
38:c5:ec:1e:c3:69:1d:2c:15:f1:f6:50:0d:51:2d:25:de:65:
bd:ed:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:51 2025 by rpki-client