Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: s0BRcffsDuyo41nH81R8yDRFyNtHlPwyzUaa0n5JA04=
Subject key identifier: A1:F1:19:FE:AD:88:57:7A:D0:70:8B:16:D9:4B:3C:9E:A4:F7:A0:59
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 0199FC59049B34B0C74D1DF9002E0C8571C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 129D
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: FuKNhxEM8tdBR8d5ENIhASi4s/34mrt/IJHyyEdzibM=)
2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:04:9b:34:b0:c7:4d:1d:f9:00:2e:0c:85:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=a1f119fead88577ad0708b16d94b3c9ea4f7a059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:8e:4f:1d:d9:e2:af:79:15:44:33:f2:5e:
bd:fc:4c:94:a2:99:22:7a:9c:c2:84:f0:6f:da:fb:
d4:ab:df:dc:28:1c:0c:ec:28:e1:17:b5:48:ee:1c:
26:57:7e:3c:c0:7b:96:08:4a:c3:52:6b:10:9b:a2:
e6:04:ef:e7:f7:b8:38:3b:e2:15:d0:c6:b2:4c:ec:
17:06:92:e7:d3:c0:51:b3:d4:d6:97:0f:85:61:50:
f5:96:17:2a:9b:3f:10:36:b3:86:0f:ce:85:20:ac:
09:d3:4b:10:9a:55:b7:89:8c:14:82:39:32:a5:95:
e7:c1:37:5c:ff:9b:46:17:0a:b8:88:7c:89:4d:b9:
3a:20:93:22:d1:22:9b:29:89:ed:12:f1:74:9c:13:
df:96:ba:2d:05:e4:4f:af:ab:0b:61:b4:40:ee:19:
48:2d:c4:26:0a:41:8b:fc:69:d6:50:a5:92:50:bd:
d4:5a:bc:b1:f2:e1:14:8c:be:dc:57:01:b4:a5:24:
88:ec:75:1b:b6:95:bf:08:7a:76:b1:4c:b5:12:cc:
c4:92:ba:f2:84:cc:17:72:d7:84:e0:fe:ab:9a:9a:
2d:2c:80:60:30:b3:1c:5d:cd:73:7b:05:0e:65:ce:
87:f0:1f:ab:1a:bb:ea:27:e7:50:d0:fa:55:cc:9d:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:19:FE:AD:88:57:7A:D0:70:8B:16:D9:4B:3C:9E:A4:F7:A0:59
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8d:d5:3a:0c:f2:c6:b5:70:c6:9c:11:8f:94:c2:f0:67:57:
0d:57:78:9c:4e:93:de:e9:26:ca:e4:6c:24:6e:07:f1:5e:17:
72:20:f5:d7:e6:aa:b8:83:6d:5c:45:2c:31:ba:c0:c3:c0:97:
65:fe:bc:ab:83:1c:2f:41:7c:65:d4:7c:e5:01:e5:c8:bf:c2:
9f:75:71:db:32:2a:2d:e6:f2:5f:b2:36:09:ae:6f:54:01:3c:
31:39:f1:ab:04:8c:c4:bd:7f:0f:ff:d8:34:ce:26:f7:61:22:
19:9a:2d:3e:39:8a:fd:93:3d:30:37:95:66:b0:57:9f:60:67:
44:e6:09:1f:2b:7f:eb:a7:50:87:df:b0:1c:0e:5d:cc:46:c5:
08:23:28:2a:c3:75:e2:b6:98:50:6c:bb:7e:79:9d:c3:68:1c:
27:df:86:c4:ae:90:4e:62:5c:67:b0:f0:45:3e:31:cb:1a:66:
f0:1c:06:da:0f:8a:a7:96:6b:c8:cc:e2:dc:31:8c:60:64:84:
8a:02:6b:f7:e6:24:8b:78:29:72:78:c4:4d:96:dd:04:17:a1:
e5:de:e9:54:4a:bb:df:50:1e:02:dd:5e:d2:b0:11:b1:3b:a4:
1d:b6:60:09:bf:ca:4b:65:6d:3a:37:6d:91:1f:94:74:bb:01:
e5:69:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:22 2025 by rpki-client