Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
File: UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json)
Hash identifier: TMS/wguGsbUi7xwgTgWjQEaQccEM6ADD4mUV2De7sLg=
Subject key identifier: E8:AF:0E:1E:AB:E3:4C:94:54:CA:D7:E4:AD:CD:A5:24:F3:EE:19:20
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial: 0199FB7CD74486C3E7676B63A23B0CD529E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: BfyClB3XmviPfJ6xZ2InO7FtLcs.roa (hash: 3EeV7dZbc++zjvyl5M1yeUuYRy/Llocvb96yJLQ1iig=)
2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: 6QI24wt8Mh7ZLmkmX+m1cg2upmjltbytJl7Q+hx64V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d7:44:86:c3:e7:67:6b:63:a2:3b:0c:d5:29:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=e8af0e1eabe34c9454cad7e4adcda524f3ee1920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:b7:67:61:d1:98:db:6b:b9:ea:06:fd:f0:
fc:2d:5c:05:20:2d:29:80:12:73:35:ac:ec:b6:ec:
83:5b:98:10:8b:cb:3b:af:75:1b:63:b2:f5:85:2f:
f3:8f:40:76:bb:13:87:96:a9:f9:80:d9:03:5d:14:
12:8d:ca:22:7c:86:16:4d:bf:66:36:c6:80:1d:79:
32:e1:32:ca:c1:1b:93:09:28:6e:27:23:6a:04:f4:
5b:5c:a1:77:37:3a:87:ac:3d:64:49:2c:e7:9d:34:
33:2d:a0:0a:28:38:21:5b:29:f2:8e:13:7c:0e:0b:
49:b3:e5:5f:ea:71:04:f8:70:62:c5:c7:fc:2d:23:
04:be:7e:cf:69:e8:06:5b:89:1c:83:0c:d4:fa:15:
ab:13:ce:70:02:c5:59:d5:37:02:5a:27:0b:6a:63:
a7:84:7c:1a:cb:bf:7e:0e:d2:a5:99:4b:1a:8c:54:
58:c3:6b:f7:55:55:93:3d:09:90:e7:8a:f0:50:04:
37:70:f7:cf:0f:10:98:10:e2:7c:bf:6f:ef:e8:12:
d9:8b:6e:ae:f2:f0:96:d8:6e:be:a7:98:ee:ef:41:
59:14:e8:08:ad:88:fa:0b:cc:e8:c2:c5:b5:30:7e:
7e:7e:e0:66:0b:b4:2a:bd:df:8d:3b:4c:27:b3:d9:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:0E:1E:AB:E3:4C:94:54:CA:D7:E4:AD:CD:A5:24:F3:EE:19:20
X509v3 Authority Key Identifier:
keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:75:a8:f5:f6:f7:5f:c9:fe:8c:be:07:5c:93:6d:94:76:
fe:72:b2:12:a7:3b:f8:d9:54:5a:ea:24:3e:82:be:a2:36:cc:
74:d5:22:92:58:bb:cc:9c:dc:55:ff:57:f3:ec:f7:0f:a4:a5:
fd:dd:04:14:f9:91:9e:64:9a:99:2d:56:bb:45:66:fe:0a:f3:
e2:11:f6:34:34:95:4e:23:7a:51:73:4e:0a:86:81:93:1d:99:
13:a3:94:32:dd:e2:80:2c:0c:15:5d:20:91:d8:2f:b5:6a:ad:
68:bf:70:a4:80:42:9e:18:e3:14:04:d4:4e:22:5d:a3:a5:d0:
da:d4:76:05:0e:79:11:bc:d0:72:03:b4:30:10:ab:92:e4:4a:
d9:08:c1:29:51:fd:16:4b:62:41:bf:67:3c:37:be:0e:4f:14:
d1:c4:81:5b:ea:14:d7:95:7a:3a:1d:e7:58:82:d5:aa:d6:a4:
d2:9e:9b:30:c9:99:0a:92:7f:15:08:a2:79:cc:37:76:1d:de:
e9:99:73:fb:2a:89:52:93:31:45:9d:5c:ad:ec:9e:4d:fb:81:
3b:ca:d8:58:89:0c:db:91:a7:7f:fc:9e:7c:d6:64:73:8b:7e:
5e:13:b7:cd:c8:9b:42:0b:5f:63:31:19:1e:6d:1a:56:ce:18:
b9:a2:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:28 2025 by rpki-client