Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
File: uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json)
Hash identifier: FG6Bm6yUhnKr40rAKSx98sDgobisWQuLndYYWMeV/Z4=
Subject key identifier: 46:E1:69:08:AE:E6:23:83:23:57:2E:AA:06:BE:6E:62:62:47:82:4E
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial: 0199FAA0CA75740FE999890EABA8F82E977A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
Manifest number: 089D
Signing time: Sun 19 Oct 2025 04:01:05 +0000
Manifest this update: Sun 19 Oct 2025 04:01:05 +0000
Manifest next update: Mon 20 Oct 2025 04:01:05 +0000
Files and hashes: 1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=)
2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: 05BCTbXWCHxgJEW6hI5HyMhBdixcq2m9gJy0cnYEfLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:ca:75:74:0f:e9:99:89:0e:ab:a8:f8:2e:97:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Validity
Not Before: Oct 19 04:01:05 2025 GMT
Not After : Oct 20 04:01:05 2025 GMT
Subject: CN=46e16908aee6238323572eaa06be6e626247824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:d1:6d:88:3b:25:9a:c6:1c:a9:5e:2e:0a:
7e:8e:89:91:83:26:f6:24:1e:dd:f2:6a:1e:7b:56:
3f:28:aa:42:db:77:42:24:40:9b:5e:65:d7:db:4a:
55:1d:bb:18:81:77:05:56:37:f5:34:25:fc:9c:9b:
37:be:a9:77:35:02:c5:be:18:f8:29:6a:b2:7d:cc:
39:65:61:ef:ef:f7:53:d7:09:37:a3:80:3c:72:83:
d7:af:7e:3d:b0:bb:15:f7:dc:a4:38:8b:72:d0:b9:
2c:11:10:fa:0e:26:10:93:5a:a9:fd:1b:63:75:2a:
04:85:0a:b5:5c:91:e7:f8:a0:7e:fa:57:3d:94:d4:
d3:b0:7a:e2:d4:0e:4b:2d:d0:80:29:95:7b:55:06:
f5:88:b7:bc:83:9d:05:26:e7:ce:ec:95:35:ec:76:
02:a5:c1:6b:61:fa:ae:04:97:3e:d3:61:9b:ec:f2:
44:03:45:0a:ff:6b:94:5c:b6:1b:45:2f:dd:69:39:
97:0d:2e:0f:95:65:5a:3f:d6:b8:a9:9b:cc:88:0e:
56:dc:13:a7:66:a6:44:b5:7d:84:4f:02:2a:d6:9a:
d2:90:ba:e2:45:43:84:8f:76:dc:bf:1f:87:a9:69:
89:4c:20:55:04:f4:91:a1:68:fa:17:c2:03:95:dd:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:69:08:AE:E6:23:83:23:57:2E:AA:06:BE:6E:62:62:47:82:4E
X509v3 Authority Key Identifier:
keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:09:3c:1e:69:55:5e:a3:3a:54:26:cd:f9:e7:bd:dd:2b:c3:
8a:59:9b:36:c0:b5:73:ee:15:92:8f:77:48:46:e4:20:74:5e:
73:cd:aa:9c:fb:07:c3:b4:07:3e:10:e5:7d:cf:42:d2:b0:9c:
fb:03:40:4c:c1:0b:b9:31:d3:ee:8c:cd:18:da:bc:52:e0:6a:
0f:03:e8:d1:a6:07:59:17:a9:95:c7:92:78:c1:2d:a1:aa:19:
d6:c4:21:03:75:2c:16:27:4d:e7:98:0f:62:d6:89:a4:64:bb:
81:83:13:a3:7e:fc:48:05:2c:15:ff:05:28:69:5f:40:fc:df:
5a:50:c0:25:a0:4f:b2:2c:79:df:c3:39:46:4f:50:34:e1:13:
61:0d:4b:f3:3a:cc:7e:78:61:a2:0b:a9:56:c9:ab:e0:4e:cb:
30:0c:07:40:b9:72:a8:2e:eb:68:70:1f:a4:f6:9e:ef:af:8c:
66:5f:b4:40:30:0e:14:09:b9:4b:28:d0:08:10:c9:26:32:d7:
fa:8e:fa:0d:ee:5f:07:ff:80:7f:eb:fe:d0:68:9e:01:cf:76:
b0:16:d6:29:e9:5c:aa:8c:39:6a:3d:6b:ec:84:9f:77:f4:4d:
d8:f1:39:e4:32:14:2d:39:d9:d9:d4:f2:cf:7d:d5:a9:69:28:
7a:0a:ca:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:27 2025 by rpki-client