Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier: odgsjCD9PjN192jCAK7krX70YFxO2fSmU55SolmfeBQ=
Subject key identifier: 4C:15:53:98:B9:C6:5E:25:5B:CC:1D:7F:00:DE:49:CF:08:29:1E:CB
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 0199FDD952402AD99AB31D8B50799C657DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number: 0EE3
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=)
2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: lY8jEJv2z51MpfPDvsKNbaOLMsrwI7TttfuM/IucmNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:52:40:2a:d9:9a:b3:1d:8b:50:79:9c:65:7d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=4c155398b9c65e255bcc1d7f00de49cf08291ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:9d:bc:49:38:4d:4f:7e:87:80:84:a0:c2:
1c:1e:07:b8:c5:8d:29:3c:4f:d6:5e:d2:2b:1c:c6:
5f:00:d0:7e:26:a1:e5:96:b7:57:07:af:49:aa:00:
9b:92:f3:3a:22:9d:4c:27:81:b2:1e:01:4d:d7:0f:
aa:34:c3:36:98:2a:43:05:d7:f2:31:72:07:0c:93:
3c:c0:ac:dd:a4:81:2c:31:b0:f8:ad:f1:34:d7:66:
9d:da:98:52:5b:a9:ca:7b:6f:ea:5b:5c:e5:e3:a3:
cf:a0:fa:91:b6:54:ef:c6:4b:d6:91:2c:df:7c:80:
7d:cb:6a:12:4e:61:2e:ad:22:04:da:54:27:42:7f:
2d:10:61:c2:89:44:85:67:3f:64:ad:69:83:2c:02:
cc:5f:1a:cb:59:30:07:9e:b7:ed:cf:7c:02:d9:81:
0b:74:55:50:c9:ee:9c:d0:80:5e:80:d3:38:57:d5:
f5:67:30:66:cf:bd:bd:08:f7:bc:7c:e7:21:cd:a2:
a8:3d:d3:2d:14:08:d1:b3:3f:db:88:0d:9f:4e:60:
7f:ab:be:3f:77:fd:d7:f7:a7:c4:7d:f5:01:1e:04:
82:cd:15:bf:1f:70:7a:51:d8:2c:5b:de:eb:1b:0c:
97:fb:6d:a7:78:d8:e1:65:79:72:6b:c2:76:97:30:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:53:98:B9:C6:5E:25:5B:CC:1D:7F:00:DE:49:CF:08:29:1E:CB
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2c:d2:99:08:14:d5:a0:14:66:dc:4e:6e:d1:96:be:8f:06:
74:5b:dd:7b:7b:5c:8c:e4:bc:79:11:29:a9:54:7f:a0:9c:00:
14:e7:6d:c4:03:e2:3a:72:0b:67:a4:cd:80:c6:0a:73:12:91:
8d:9b:05:f5:8e:65:9e:67:d8:bd:5d:59:44:39:1f:64:ec:a4:
ca:2b:de:73:42:a4:38:e0:c5:47:bb:2d:f7:fc:50:1a:8c:33:
8b:6c:68:f1:22:8d:bf:66:6b:0b:d6:16:c0:73:e3:8f:ca:4d:
c3:29:bb:37:ba:a9:a0:a3:c1:02:a0:4a:0c:b3:67:dc:c5:55:
87:a7:dc:fc:2a:c6:ce:fe:13:1b:69:8b:f3:aa:b8:62:74:bd:
de:d0:d0:73:3d:73:0c:71:8b:64:6c:89:44:07:fd:c4:61:4b:
fc:d1:0e:ea:80:c7:8f:1f:ae:d6:a9:97:7b:2c:58:5d:ca:e4:
91:8a:df:da:5b:35:54:f4:f7:20:75:4c:51:59:b1:b3:b4:b3:
b1:83:8c:a6:a8:59:15:d4:8d:41:9f:2f:f5:c0:5a:71:85:84:
52:5d:66:6e:69:3d:95:98:9c:51:45:62:7a:d5:c8:33:d3:89:
57:4f:4f:8c:72:66:07:f2:c4:f6:b8:ba:95:2f:25:cb:bf:25:
a2:cc:11:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:37 2025 by rpki-client