Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File: Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier: ubj+9gCZonaGWQBAHHCERGPjobPmMbn+GjOExtQDZlw=
Subject key identifier: 21:7C:0A:36:28:BB:6A:84:47:C9:1E:10:6C:57:F7:40:67:1E:C4:5A
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 019A00A2D027D42B88136FA592B014E9DC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number: 0E23
Signing time: Mon 20 Oct 2025 08:01:01 +0000
Manifest this update: Mon 20 Oct 2025 08:01:01 +0000
Manifest next update: Tue 21 Oct 2025 08:01:01 +0000
Files and hashes: 1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: f61f4AkRTjIHTRv4aNrph4ne0svYvhu7B49YqShaGs4=)
3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:d0:27:d4:2b:88:13:6f:a5:92:b0:14:e9:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Oct 20 08:01:01 2025 GMT
Not After : Oct 21 08:01:01 2025 GMT
Subject: CN=217c0a3628bb6a8447c91e106c57f740671ec45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:48:c4:c1:62:26:84:8c:92:80:4c:45:14:
0f:41:b9:fe:ce:58:d7:9d:ec:5c:55:66:87:72:7e:
ed:78:bb:f8:31:f2:69:75:7a:e7:04:ae:93:1d:db:
3b:e8:49:1a:d4:c3:4c:ac:45:b2:2a:14:c8:55:c4:
d0:07:6a:8b:51:59:ed:a1:54:e7:2e:71:ec:79:0d:
1a:1f:85:ce:5d:3c:47:ff:87:12:bb:82:d7:c1:f0:
47:f4:ea:7c:16:a5:18:c6:1c:dd:6a:01:ea:1b:f3:
64:6d:f1:01:e6:27:45:f7:09:04:08:06:67:72:88:
df:32:b2:66:91:e5:2f:fe:84:f6:5a:1d:89:61:9c:
9c:af:fe:69:c3:90:cd:e4:b7:b3:f4:40:01:5c:e3:
19:78:f9:2c:99:1b:a8:04:98:9a:d2:33:1d:f1:76:
20:1e:85:99:b9:0f:37:2d:2c:14:29:c6:90:07:6b:
09:ae:85:3f:d9:4c:cb:1a:57:c0:ce:17:fd:f3:0c:
1b:53:88:38:8e:a4:40:90:e8:5a:55:08:77:85:e3:
25:2b:d6:40:cb:58:f1:dd:46:fd:9a:0c:ad:33:bf:
27:cd:89:43:a2:3a:87:e8:05:29:b4:6b:f8:2a:69:
3b:60:b3:8e:ba:ed:45:58:bc:5f:55:63:2f:2a:ca:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:0A:36:28:BB:6A:84:47:C9:1E:10:6C:57:F7:40:67:1E:C4:5A
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:98:87:8b:de:77:01:70:74:f9:e3:63:80:d0:df:7d:1d:45:
90:34:b8:3a:38:11:7d:56:2a:d9:84:30:50:b6:25:dc:e4:8b:
14:d1:a9:ca:07:86:e0:17:d8:ee:54:c3:c1:1c:47:3b:e9:9e:
47:0e:88:42:5d:ea:ed:d2:43:50:97:b5:2b:99:1c:d1:9c:62:
8b:05:15:12:1e:2a:5c:eb:28:85:50:41:03:b6:15:25:58:43:
bf:f8:49:63:64:72:09:4d:9d:40:28:9a:12:af:f2:32:e6:25:
db:98:f6:3e:0f:70:b2:dc:3f:63:f8:37:6d:3f:64:40:e5:f3:
eb:7a:3d:36:88:66:1d:7d:eb:26:53:35:08:66:b5:65:78:bc:
8c:96:78:f4:19:8b:3f:fd:c9:f3:2d:6d:5e:89:7e:87:01:51:
04:b5:31:7e:87:92:c3:c8:d1:63:8b:e8:f1:b5:b0:49:f0:b5:
3a:99:5f:77:c0:9f:f2:24:90:11:e0:b3:d9:07:62:3a:23:46:
b4:04:93:48:09:46:ef:bf:18:cf:11:0c:ab:d5:6b:11:83:a9:
c9:34:93:6f:18:50:8f:c0:7d:70:89:38:76:43:b8:47:56:fb:
af:6c:a9:36:f3:6c:4c:64:2c:5a:20:d4:00:4e:e4:2b:f7:96:
9a:26:93:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:25 2025 by rpki-client