
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: MNs6ax9sEhw/XocIUOJQPQOVLKbjwv70q919AaTUpPc=
Subject key identifier: F1:41:A2:84:04:07:04:59:09:1F:3E:69:69:34:DB:3C:86:C2:16:60
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 0199FBEAA0950C932DEE146F657C1F49F928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0EED
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: gqkIGk4R6xHztBzkhZNJU/w1SmO3wfQhiNpDCdyPAwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a0:95:0c:93:2d:ee:14:6f:65:7c:1f:49:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=f141a28404070459091f3e696934db3c86c21660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:99:a5:4e:e8:e2:1a:98:63:60:61:7f:43:
4e:aa:c5:8b:e5:e7:b8:cf:e7:0c:ea:9d:15:01:94:
d3:d1:61:89:d3:27:8b:a2:54:6d:ef:d6:95:50:d5:
4f:7d:4e:b7:68:34:d6:30:d9:89:c9:ad:ff:55:7f:
f3:da:34:cb:1e:bb:e6:68:38:a4:67:22:d3:3e:63:
cb:45:ee:37:60:a8:af:e5:6c:5b:fa:9f:fe:6a:8f:
c2:5b:fd:ac:05:2d:3f:2a:9a:65:61:d8:55:4b:2e:
1a:3e:48:62:88:4b:58:a4:4b:bc:ce:1b:b1:59:a1:
0e:06:1b:09:81:c6:91:6f:99:ed:07:c3:80:bc:cd:
0d:09:d4:22:0a:0c:45:7e:88:69:5f:4a:42:40:a3:
88:23:77:2a:20:0e:77:75:89:f9:55:00:d1:35:10:
44:98:35:d6:96:b8:a6:d8:bf:a9:ae:76:f6:48:ec:
b6:c7:67:f3:2c:a2:7e:c7:da:5e:e1:6f:90:c0:ca:
dc:73:f5:05:24:11:0b:c9:d0:8f:46:44:4f:d7:df:
58:f3:aa:c0:ff:ea:24:9b:a0:0a:01:b8:6f:ce:f1:
61:be:92:10:e5:1b:30:d9:db:52:18:0d:12:b6:fb:
8f:d5:40:04:79:56:94:c0:ca:6e:5e:4b:b3:6c:c7:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:41:A2:84:04:07:04:59:09:1F:3E:69:69:34:DB:3C:86:C2:16:60
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f9:7f:5e:59:25:9e:1c:61:e8:73:37:6d:eb:f3:68:e7:33:
41:21:e2:17:f2:59:e8:ed:4a:0d:0c:6f:71:68:12:a6:8a:3c:
57:73:f2:85:54:ab:8b:81:37:5a:69:ca:08:cd:56:01:a2:a8:
0b:a3:6a:6e:89:ac:4c:c1:13:1f:48:c4:ac:51:a1:61:8a:74:
8b:4e:e8:50:83:1b:77:a4:7c:5b:b7:44:b6:02:58:8f:07:0b:
8f:49:c5:f3:d0:6f:71:e6:9e:57:b2:f4:b7:52:05:1d:3c:a3:
cd:15:5d:a9:88:0e:ea:89:17:1e:53:bb:7a:a4:29:b2:24:77:
20:e5:2d:97:ae:30:1c:99:31:fe:5e:b0:31:1c:53:4d:8d:30:
38:23:df:d7:47:4f:a5:62:51:2d:b8:15:0e:4b:af:16:68:27:
76:6f:26:3e:bb:4f:85:f3:5c:d4:e5:6d:74:30:2d:ab:fb:eb:
13:79:ec:bc:ec:5e:0c:27:8b:3f:83:7d:a3:54:dd:a7:c5:66:
3b:d3:71:9a:e7:0a:7f:02:2b:7e:9a:46:3b:9f:89:61:57:6b:
92:6e:7c:49:34:b8:9d:a8:6d:27:14:05:d2:26:2c:cf:d3:9d:
74:8e:98:76:8b:50:57:37:dc:95:f9:df:ee:a0:28:0d:6d:bc:
6f:a1:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:11 2025 by rpki-client