Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: shAOPMBrv3QFlId2FbEEQPeyZiSj9ROTrQKq8mGCn3w=
Subject key identifier: 1D:76:1D:EB:1E:2B:8D:FB:D5:B3:74:F9:0D:EA:05:3D:3F:C3:BA:23
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 0199FCFD9015D3817B059DC04687CBE6EF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0943
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: WLPv_kiHkV3foWtvEt3ca8XVjG4.roa (hash: 485f4Pk93SekykKHn/Aq62sR6+/AvJghjHie2NYKlhI=)
2: hcpelkMB3HLp2KFjx3F4u7p7QiA.roa (hash: 61+3xEVQzTEIYSViuJWqNAx3iaX+tJlcGs9MEnOKcRg=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: QnKQypdHmjZ5UO6aYcoouDmiJ1EA3RRQoq4yulVZPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:90:15:d3:81:7b:05:9d:c0:46:87:cb:e6:ef:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=1d761deb1e2b8dfbd5b374f90dea053d3fc3ba23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:68:03:a6:c7:21:6b:72:ee:1a:55:97:2a:
4c:35:33:3d:b7:90:d1:07:51:3b:6f:3e:1a:66:c3:
fb:98:0d:ca:c8:07:91:d9:a6:d5:93:ab:8a:dc:71:
ba:eb:43:e1:82:1d:5c:51:c8:ac:40:6c:18:5e:e1:
2b:4a:42:78:90:eb:16:3c:c5:5b:2a:88:12:cb:d6:
20:c4:8f:af:58:12:5f:57:01:ee:fa:ca:96:70:95:
7b:e2:e8:81:1e:8d:0f:84:ff:56:48:44:1c:c8:e5:
a1:1c:f4:2e:72:49:aa:ff:8c:03:7c:6f:ce:04:60:
a4:3f:3f:ba:02:96:0e:2c:e2:00:ad:28:85:c9:1a:
eb:07:47:b6:68:42:02:5e:92:e6:31:09:ce:b8:ee:
3c:85:0b:7a:ec:30:4c:37:b2:8d:b1:67:ce:6f:c4:
b7:6b:7d:7e:cf:8f:30:b6:9c:c4:db:ab:b1:a6:5f:
2d:e2:c4:83:c5:00:7e:42:bb:2e:cd:0c:d1:72:4d:
01:9d:af:82:27:2f:96:d9:13:7c:b3:33:ce:7b:94:
67:fc:47:5c:ab:27:bc:0c:ee:fe:a0:ff:13:c0:df:
62:94:81:e3:19:42:a8:47:12:36:d9:64:86:3f:38:
8a:e8:45:ed:c9:35:09:ed:4b:e1:3f:93:ba:11:5e:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:1D:EB:1E:2B:8D:FB:D5:B3:74:F9:0D:EA:05:3D:3F:C3:BA:23
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d0:ee:9d:62:4f:3b:9a:bc:55:b9:2a:02:8a:95:3d:ee:8e:
ee:15:5e:85:e3:f1:f4:f4:05:70:7e:96:db:31:36:0b:d4:cf:
f5:93:dd:c2:77:24:0e:ec:f4:8d:0c:eb:0c:8f:3a:be:97:90:
e5:8c:d6:4c:2b:54:6e:8c:87:19:8d:b3:6e:53:18:04:b1:68:
7d:ed:11:b6:27:7a:c5:17:a4:e7:8a:db:c3:ef:16:a4:25:87:
9c:1d:8d:78:ae:8a:90:3c:67:fa:d0:d4:cb:15:22:0a:2b:f8:
de:f7:13:ab:e9:55:44:eb:d5:c0:e0:07:27:b9:82:b4:a4:78:
58:4d:d1:ef:de:72:15:b8:ca:19:14:c3:15:9f:a2:52:32:35:
e6:43:c2:78:a8:4b:0b:a2:85:98:8b:53:41:13:51:b0:5f:d6:
fb:50:3c:a0:66:0f:8e:0c:90:8c:10:3c:87:75:b5:64:fe:46:
ff:2b:53:8e:8c:07:7a:d0:00:e0:cb:03:11:42:3d:06:4e:ac:
62:b1:f4:48:a0:05:b4:9e:4b:a8:4c:2d:c0:57:37:5d:93:59:
f5:0d:72:f1:7d:8e:1c:45:f3:a1:e4:a8:23:64:58:25:50:c4:
86:a2:66:2d:c8:2b:be:52:05:51:ec:ee:65:2e:ef:01:aa:0c:
17:3a:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:10 2025 by rpki-client