Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
File: uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft (raw, json)
Hash identifier: qF6PWU1bHO+e+lX6h3g9Yq9p0TruXrt6bF7dHX+uOmQ=
Subject key identifier: 18:94:5A:B6:89:B5:BD:38:57:4F:CF:EF:0B:03:6D:86:6B:32:BB:DA
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial: 0199FAA12BDA66903ECB27F5810D88A66AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
Manifest number: 09
Signing time: Sun 19 Oct 2025 04:01:30 +0000
Manifest this update: Sun 19 Oct 2025 04:01:30 +0000
Manifest next update: Mon 20 Oct 2025 04:01:30 +0000
Files and hashes: 1: 3odw06eY_aIJMJ5gia4SCuGIEhI.roa (hash: HtI0JFszp0zK+HxeeFPZ+mMVGR6pXK8jygEDvaNdyvQ=)
2: Q0MV5WVNg3BRo8QsYAayBBop-DM.roa (hash: bnEa91pTIGMB4ltMbz3u4zgcOdVpRmwso3iKMaHa5jg=)
3: uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl (hash: 3ETQG9jCZTdz4CIqGe4026uQeHz+tnCNjgy9xsva7ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:2b:da:66:90:3e:cb:27:f5:81:0d:88:a6:6a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Validity
Not Before: Oct 19 04:01:30 2025 GMT
Not After : Oct 20 04:01:30 2025 GMT
Subject: CN=18945ab689b5bd38574fcfef0b036d866b32bbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:05:d2:37:b6:2b:d0:a9:ca:70:92:d1:8c:
ff:ed:cf:a3:61:e7:c6:be:93:80:43:33:27:95:35:
fb:81:8f:9d:dd:97:86:1a:f8:3b:6f:3b:16:6b:1f:
8f:20:6a:2c:67:c5:2c:80:88:b1:52:2b:4f:bb:30:
9f:0e:43:27:e4:37:b1:48:d9:bd:e5:07:ed:a8:2e:
b5:35:62:30:2f:a1:67:72:fe:5e:38:d0:4a:4c:22:
e6:20:5b:e7:c9:25:eb:b6:3c:10:9c:ca:75:66:8a:
f6:b7:80:5a:34:49:f2:46:94:6c:be:92:c1:99:39:
17:45:95:6a:e0:b5:c2:25:9a:57:8d:15:25:d8:69:
b6:39:93:22:ea:61:70:72:0c:62:51:2e:db:a0:f5:
84:02:c4:85:f0:73:1b:e9:69:20:a6:ba:a3:b7:19:
31:2d:b7:44:13:5d:82:94:98:be:c2:83:68:9f:0d:
73:74:3d:55:40:9f:cb:4f:0f:ce:11:d7:de:6b:94:
46:40:a5:46:28:b5:75:9f:ac:77:85:ca:a1:07:6e:
d6:82:18:f2:d4:76:23:d0:78:f1:cd:c8:64:74:07:
3e:23:91:52:69:b7:9a:28:59:7d:e6:d6:c3:fa:df:
b9:f0:9b:3c:3e:d3:55:84:c6:98:60:98:e3:12:61:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:94:5A:B6:89:B5:BD:38:57:4F:CF:EF:0B:03:6D:86:6B:32:BB:DA
X509v3 Authority Key Identifier:
keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:de:88:35:84:ae:25:09:64:e3:58:79:30:7d:58:07:3e:
19:99:80:a4:d3:b9:1a:59:93:45:b3:e8:7b:c6:34:5e:5d:51:
f6:90:d4:64:9a:24:8a:4e:ea:d8:8d:1b:50:4d:b3:43:90:37:
1a:c6:5d:0d:44:54:6f:a5:7f:cb:8a:3f:2e:b5:17:97:5e:0b:
5d:5c:1f:03:bf:97:50:1c:fb:ed:d1:4d:48:e5:c0:f9:d5:32:
d8:ab:77:fa:6d:27:2b:a7:58:76:86:da:cd:ed:fe:cc:23:49:
a9:08:bd:95:c5:54:0b:e3:01:e5:90:4e:0e:71:69:41:15:4c:
3d:ca:2b:ea:8a:9f:74:4b:5b:1b:6e:22:57:fe:21:76:fe:7a:
47:e7:3f:d4:10:0c:0e:79:ea:d3:09:ab:12:1d:ec:2c:08:ae:
81:00:32:cf:de:3a:96:7d:84:9e:70:c5:39:60:c3:fa:09:1d:
58:89:56:71:90:a5:ae:c6:aa:4b:3d:89:1b:18:5c:88:bc:03:
30:01:e9:50:b1:1c:a3:ff:b3:87:e3:57:3a:6c:6c:cf:5f:9a:
8a:17:4f:c5:c7:09:b4:0d:ac:85:da:30:12:19:dc:6c:d1:a2:
7d:bf:62:3d:63:e7:5a:d0:3e:81:1e:b2:3e:4b:20:17:61:90:
19:49:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:58 2025 by rpki-client