Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: wTGq2Gcy87/ZlC1pSqKGYYvp7OV5aVNjzUg2GRcSF7o=
Subject key identifier: 5D:7D:3C:91:35:B6:49:B3:B1:57:D9:24:FC:4A:F9:65:58:AC:63:4A
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 0199FE104704A96F62A7CCE0C4746482EF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0F58
Signing time: Sun 19 Oct 2025 20:01:43 +0000
Manifest this update: Sun 19 Oct 2025 20:01:43 +0000
Manifest next update: Mon 20 Oct 2025 20:01:43 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: 51MFseb+T88s50X3fyZt3TmZs70RoFnFOe6hUxL9LHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:47:04:a9:6f:62:a7:cc:e0:c4:74:64:82:ef:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Oct 19 20:01:43 2025 GMT
Not After : Oct 20 20:01:43 2025 GMT
Subject: CN=5d7d3c9135b649b3b157d924fc4af96558ac634a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:7e:ca:f7:0b:df:3f:92:29:cb:1e:27:f8:
2d:76:7f:fd:e1:61:2f:75:06:0a:d9:e3:24:0a:ce:
56:0b:c7:53:76:d7:10:01:67:ea:0a:7c:36:a5:aa:
74:2e:b3:9f:91:d0:40:f1:c1:d7:82:f5:e1:1c:0c:
70:01:5f:be:61:e7:bc:89:ff:0d:f5:2c:fe:56:05:
80:e0:36:73:3b:83:6a:83:d3:6a:dd:42:1f:ee:30:
1b:2a:13:d4:67:c5:f5:b7:88:a4:7d:67:68:af:56:
20:d7:25:42:3c:d6:a4:ac:7d:70:1c:76:1d:8f:86:
b1:7f:01:1a:e6:79:60:f0:c7:c8:a9:d7:7f:74:0a:
70:3d:94:9d:de:e2:04:25:2e:9a:01:0e:5c:e1:c6:
a2:7c:be:3b:a9:6e:38:64:33:6b:41:d1:ce:db:69:
3b:47:28:c0:5f:1e:83:70:81:8d:ab:75:be:98:f4:
6c:41:4c:bd:52:f6:c9:09:6c:d5:e3:21:99:ef:b6:
e8:9c:c7:c6:e3:88:c5:d7:76:e5:f5:f2:df:55:69:
4d:ad:ef:da:63:bb:e3:54:86:6c:f3:25:f9:f4:98:
dc:7c:42:9b:43:01:2b:f5:80:32:5c:99:43:56:f9:
b4:8f:3c:af:a2:0e:cf:97:0c:99:66:31:bb:d6:5c:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7D:3C:91:35:B6:49:B3:B1:57:D9:24:FC:4A:F9:65:58:AC:63:4A
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2b:55:7c:29:fe:56:a1:cc:73:98:dd:a1:c7:3f:86:13:ea:
24:32:37:4e:9e:64:a8:a6:8e:a9:5c:04:5f:b9:34:4a:cd:92:
c9:8b:a5:c4:85:3e:fb:30:37:07:9d:d4:48:89:69:12:69:45:
b5:ec:43:49:c5:23:51:47:7e:f2:09:16:9e:97:8d:fa:d5:09:
7e:e4:02:16:cd:d4:d5:ba:4d:43:08:80:90:72:12:5d:20:7d:
7d:c1:f8:7f:f6:cb:41:78:51:71:31:60:ad:11:55:8c:84:e3:
1e:52:a3:ca:45:54:84:f3:61:65:28:c8:2d:e9:25:d5:d8:c8:
24:02:80:6a:57:5e:5f:18:0c:d3:39:f0:3f:4f:45:94:d8:03:
16:d2:10:15:e5:35:10:94:72:f3:0e:fa:de:ae:40:72:3d:ab:
73:96:fb:0b:13:19:81:84:4f:6c:f8:95:b0:07:b6:d6:c0:bd:
69:99:ef:bc:f5:f1:a7:ac:eb:43:dd:0e:81:21:af:83:28:5b:
2a:be:68:62:9d:7c:f2:41:9c:80:a7:e1:22:e3:92:f5:88:1d:
7b:74:8d:16:82:33:be:9b:4f:77:16:1e:51:59:b8:57:66:82:
3d:16:9e:45:8d:25:e8:6c:a6:ff:41:9a:3a:82:a1:ca:88:25:
9c:6c:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:45 2025 by rpki-client