Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: bCdxNO+88+5wHLf5ugYrLXS115o+KkFv5+1eKMZYk5c=
Subject key identifier: 1F:E6:EC:29:93:4E:22:24:1A:57:92:45:36:27:37:5B:3E:AC:36:D4
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 0199FDD9F6F698AE5882FCF16791B2B25D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 0A8C
Signing time: Sun 19 Oct 2025 19:02:24 +0000
Manifest this update: Sun 19 Oct 2025 19:02:24 +0000
Manifest next update: Mon 20 Oct 2025 19:02:24 +0000
Files and hashes: 1: LqqgWlluL1jyuXsBRZw9RUpy_xU.roa (hash: QQZFs0dWDvcdU2w068AQi10DYXURIlBm26Llbc6SIDU=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: dUw1zuCLY5GZauA107wEns4ctoW+7VmzBzyPpcc4vh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f6:f6:98:ae:58:82:fc:f1:67:91:b2:b2:5d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Oct 19 19:02:24 2025 GMT
Not After : Oct 20 19:02:24 2025 GMT
Subject: CN=1fe6ec29934e22241a5792453627375b3eac36d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4d:2f:b1:ff:46:28:58:c0:db:d4:1b:c5:ec:
13:5c:b6:0a:bb:ab:de:15:d8:62:26:79:82:1d:d7:
ae:cc:35:81:63:33:28:57:69:69:98:3a:64:f8:93:
0b:81:83:9f:fa:0d:96:18:9f:d8:6a:bf:30:a9:ae:
7b:b0:f0:7a:53:4d:09:62:e7:ea:74:df:11:60:50:
6c:f3:bd:66:08:d6:af:0d:e7:75:10:a8:9f:28:41:
a2:6a:91:fb:ac:e4:fc:8d:3a:9f:52:9e:46:77:9e:
29:35:83:54:2c:8d:ad:e6:39:fd:89:6d:ce:6c:49:
31:51:70:28:e5:38:5b:2e:e9:25:d6:a2:c6:ce:9c:
85:34:19:85:b9:b2:ab:34:13:71:2a:84:1f:15:08:
99:56:b7:92:85:ad:9c:07:6b:55:33:9f:ab:d4:4a:
10:6c:e0:b5:bf:0d:81:43:5b:7e:b0:7f:c9:0e:f8:
fb:78:c7:00:aa:48:ce:8a:bb:ef:06:a9:14:e6:b9:
ce:57:64:43:1a:b2:24:d4:03:91:57:fc:17:79:04:
4c:38:83:bc:24:9e:d4:ec:25:ed:da:92:9c:f9:88:
9e:29:6e:59:4d:41:3d:9f:ba:41:64:cc:67:bc:f6:
92:c8:78:4e:8c:35:60:47:02:12:6c:bb:75:7c:c1:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E6:EC:29:93:4E:22:24:1A:57:92:45:36:27:37:5B:3E:AC:36:D4
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:48:4e:88:b9:26:92:ab:bd:84:80:77:b6:0e:85:c4:77:f8:
0d:8b:2d:e8:28:f8:06:46:06:94:66:60:be:8a:32:2c:e0:d7:
da:4d:04:ec:f1:72:49:e4:f4:15:b2:16:35:95:66:46:98:de:
77:0a:69:33:10:f0:74:4f:bf:70:2d:ef:52:0b:3b:a8:2e:aa:
8a:6d:a5:78:47:c9:7d:2f:4e:d8:62:44:e0:f6:c1:3a:54:b3:
3b:1d:58:83:50:c8:06:31:1d:0a:4d:c8:5c:ae:4c:af:87:20:
45:56:c6:41:a5:2a:ec:fb:15:73:89:04:4f:9e:ad:b4:cb:1b:
f5:66:a5:b3:f7:c5:4b:27:fc:13:c6:f0:f4:93:e0:01:1d:31:
54:76:33:b2:83:34:d5:98:56:14:ec:66:d8:6b:a9:c4:7c:cd:
e9:67:6a:59:f1:01:37:cb:4d:62:be:0b:ac:71:74:57:f7:f5:
f6:ba:d0:da:90:75:a3:62:e6:e6:47:8e:d0:70:9e:5e:44:79:
45:7d:63:b5:4e:59:0e:47:e2:97:56:41:f0:80:43:4f:f4:b0:
86:81:08:50:b5:ae:d9:90:54:f2:e1:73:7a:1a:24:fb:a3:1b:
68:86:6d:84:92:8f:40:14:b6:43:30:66:86:15:b2:67:e2:73:
b2:60:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:19 2025 by rpki-client