Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: EnG6Dn1S6Q7N4IGnMplq/PcUDJKHj+4JOq56E9I1VKU=
Subject key identifier: 3A:6C:95:49:4B:DB:E6:87:9D:6D:B2:08:83:D9:EC:7D:F0:D8:CE:65
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0199FC214DFE986C3FB105FB783543BC70C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0AAB
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=)
2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: StZGkwTVnLtQ7odamzCdzQqj8JItcclUmpFKRSMywW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4d:fe:98:6c:3f:b1:05:fb:78:35:43:bc:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=3a6c95494bdbe6879d6db20883d9ec7df0d8ce65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:a1:3c:d4:d8:7a:c3:e3:bd:8b:a8:d6:23:
4f:a4:2e:ad:28:29:4b:27:68:71:11:93:ee:49:35:
68:5c:eb:c1:d7:28:94:17:a6:49:b8:ef:0f:95:11:
fb:cf:ec:c7:bd:46:30:bf:bf:85:dd:74:89:fb:1d:
16:e9:e5:39:79:6c:0d:d1:10:8f:97:3a:9b:da:5b:
24:b2:f3:18:45:45:ce:ce:f8:3a:1f:26:e2:e1:c5:
0f:3f:5c:3e:2c:71:c5:77:54:85:d5:6e:29:9c:76:
98:80:6b:3d:4a:88:4c:2f:59:cc:be:6d:66:58:00:
f4:85:1f:1a:b2:d3:60:ce:3e:7a:1a:69:5b:e2:b3:
57:b7:9f:09:36:a2:2f:e3:52:bf:d5:c4:ce:a0:27:
ff:d2:d6:83:82:f5:49:54:e9:47:d1:5c:e2:3a:81:
17:b0:88:97:a9:90:f2:4b:91:e3:a8:18:cd:e0:c9:
3f:0d:5e:90:49:1f:9f:c3:6d:0e:9a:6a:7a:46:24:
73:82:9c:13:fa:4f:88:f2:46:e4:9f:a6:33:13:cb:
2b:1b:e4:2e:df:80:cb:fd:92:fd:23:a1:e0:02:23:
8c:6b:36:8c:93:6d:fd:77:8a:50:42:69:cc:8e:d6:
74:96:55:1d:73:c5:29:64:1e:f9:69:6f:4b:e5:41:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:95:49:4B:DB:E6:87:9D:6D:B2:08:83:D9:EC:7D:F0:D8:CE:65
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:51:b6:0d:2b:20:44:27:a1:56:a4:ca:de:d8:62:6d:7e:b3:
e6:ca:6e:90:27:10:a9:f8:05:1a:14:5b:21:6f:df:fc:ee:aa:
33:eb:5b:52:e4:e5:9d:9d:eb:39:9d:41:2c:12:c4:a9:5f:93:
3e:00:90:4e:47:74:da:85:af:ff:67:c8:1d:d9:40:97:8d:7f:
81:20:d6:0d:4a:98:7b:da:ff:4e:92:b8:e6:3e:39:67:c8:bd:
1e:60:8f:56:75:0d:16:a6:b7:c8:fe:f3:c5:9f:cf:06:60:9b:
c6:a4:21:e4:7b:2e:d6:51:61:f5:1b:82:27:34:44:02:6c:33:
19:11:e6:14:50:ff:be:fb:41:eb:68:9e:e6:26:0e:ee:ac:25:
a3:21:39:e1:60:16:45:54:67:c0:0b:83:3f:1e:cf:fa:32:af:
c6:de:f6:51:45:78:01:69:51:14:3c:ba:b3:e2:1a:b6:a7:03:
70:78:ef:41:0b:b5:42:10:94:63:7e:71:e0:e3:72:d9:44:77:
ac:00:df:92:6c:0e:ad:8c:83:22:a3:e8:94:85:99:b8:af:bc:
0a:4e:0d:9a:6b:9f:d1:77:17:d2:0f:61:3a:b2:3b:0d:7a:a8:
4d:70:24:70:69:5e:69:0b:e2:9b:b6:5c:c6:2c:cf:d9:62:7d:
dc:85:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:18 2025 by rpki-client