Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier: fAxD1tqJ74dCvkZt6G2VNNorvuPHyQqm+WAqOX8pymU=
Subject key identifier: 63:00:A3:4C:69:4D:38:98:81:E5:92:05:B7:DB:CB:17:F1:96:14:26
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 0199FFC8D7A288C6FBC62A09B54E09E0B759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number: 11BE
Signing time: Mon 20 Oct 2025 04:02:56 +0000
Manifest this update: Mon 20 Oct 2025 04:02:56 +0000
Manifest next update: Tue 21 Oct 2025 04:02:56 +0000
Files and hashes: 1: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (hash: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=)
2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: sZIR9E/mKtF84zBPWeKesDcg+dXpHnjMJ+fVVE1nEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:d7:a2:88:c6:fb:c6:2a:09:b5:4e:09:e0:b7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Oct 20 04:02:56 2025 GMT
Not After : Oct 21 04:02:56 2025 GMT
Subject: CN=6300a34c694d389881e59205b7dbcb17f1961426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:f6:94:80:ee:fb:36:e1:23:e6:d7:96:20:
3e:a5:08:58:09:8b:c6:ca:9d:58:6d:7d:85:4b:48:
c5:0d:f3:61:d3:21:30:a9:21:dd:fb:0d:9d:9f:eb:
01:32:03:5a:aa:7d:d5:b3:72:11:e3:b6:13:5b:b9:
cd:d3:c1:9f:19:7e:58:8d:a3:a8:19:c9:5f:32:3c:
43:2b:c3:8f:ef:72:bd:f2:d6:94:f6:e1:9a:ed:c9:
c9:5b:90:4d:be:b5:e4:11:92:ad:5c:32:4c:3e:fa:
74:17:46:2a:f2:a0:36:1a:67:ae:15:a3:ca:a4:c6:
66:97:09:06:5d:29:18:03:16:fb:fe:ef:eb:15:d7:
2f:94:86:76:2a:a2:2b:e1:07:01:53:4d:22:53:86:
a7:54:04:4d:37:02:71:83:08:79:34:21:4a:e0:f4:
a9:22:fd:14:1c:b8:37:e5:be:aa:59:d0:69:08:0f:
95:57:c7:96:bb:79:f8:2b:3b:52:17:69:d1:06:75:
e1:ea:d5:98:d5:79:24:9b:0c:ee:42:d3:ac:a6:92:
7a:df:e6:e7:ba:25:b7:fa:f3:cb:70:a1:af:a3:24:
d0:4a:40:1b:29:97:27:bc:58:6d:81:b4:53:6b:e6:
4d:2b:63:9f:c5:0b:42:5b:53:4f:30:86:d9:c1:8c:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:A3:4C:69:4D:38:98:81:E5:92:05:B7:DB:CB:17:F1:96:14:26
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:79:f9:a9:9d:6e:22:24:33:3d:f4:33:2b:49:30:a6:50:57:
6a:c0:8e:ab:8d:a3:56:e7:60:5f:58:56:2a:b8:58:88:cd:ed:
0a:fc:dc:a5:5a:98:b4:34:65:75:82:8b:36:28:aa:d5:78:df:
25:71:04:48:7e:39:a8:c4:20:59:87:cc:5d:70:8e:f8:ef:cf:
14:aa:6b:3d:60:6c:85:97:70:8c:35:0e:0e:1d:71:82:05:3d:
12:65:37:84:b3:74:6e:0b:5c:90:e8:13:96:c2:4f:f8:bc:1f:
35:68:79:9b:c3:84:a2:22:11:49:57:ca:92:2e:26:d9:6e:71:
21:73:6d:d0:ba:d0:2a:69:ef:e6:69:13:0b:4c:06:36:0f:a1:
2c:05:8f:ae:2f:60:19:4e:07:86:7a:02:0f:5e:34:2c:22:d1:
cd:83:3a:0a:5f:1d:a2:a9:91:e4:5f:b2:34:7d:c1:da:56:a4:
a6:3f:1d:a6:c7:23:e3:fc:e6:11:1e:f8:7f:69:a1:ad:bf:0f:
64:d5:af:a1:9f:4e:b1:c7:f6:89:9f:98:45:3f:91:6c:59:cc:
d9:2b:0c:22:98:02:42:d7:27:b6:b0:37:cd:1e:af:fc:e4:92:
6b:36:72:89:da:96:7c:8c:ce:49:17:27:61:3a:7c:76:89:c9:
f1:2d:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:46 2025 by rpki-client