Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
File: uEDbhrmLXLMnCkjPf6AjyHrKucU.mft (raw, json)
Hash identifier: aZ24FI5LyZPKM37XPqluHxlp6YwlmeJH1ww+AfuuZW8=
Subject key identifier: 9F:74:05:AF:C7:48:B9:AD:84:15:75:65:C7:C2:C0:8A:05:DD:23:3E
Authority key identifier: B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
Certificate issuer: /CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Certificate serial: 0199FB0EF5CA77A0A3960B8BBB870517515B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
Manifest number: 0679
Signing time: Sun 19 Oct 2025 06:01:25 +0000
Manifest this update: Sun 19 Oct 2025 06:01:25 +0000
Manifest next update: Mon 20 Oct 2025 06:01:25 +0000
Files and hashes: 1: FxFAHCh-xR5SmE47a0ARTd4GkRw.roa (hash: slz/fDlVOpfItIULaAZ74wfhbWz9EKShd3tsnurJfb0=)
2: uEDbhrmLXLMnCkjPf6AjyHrKucU.crl (hash: BXK+rv4QGVgN1fq4qCk+aP5t+swtbakExeTs7KD2o+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f5:ca:77:a0:a3:96:0b:8b:bb:87:05:17:51:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Validity
Not Before: Oct 19 06:01:25 2025 GMT
Not After : Oct 20 06:01:25 2025 GMT
Subject: CN=9f7405afc748b9ad84157565c7c2c08a05dd233e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:9f:77:d7:70:b9:23:0d:37:63:ce:2b:ba:
14:a3:63:67:a7:aa:74:72:c7:93:33:be:1d:4f:2a:
bd:e9:d0:79:65:55:3e:2e:ea:df:99:b1:08:68:ad:
75:6d:8b:77:ab:37:fd:86:90:82:ba:88:a2:6c:a4:
a1:16:3e:72:89:c3:e8:e2:75:b0:68:3a:36:ea:53:
b6:e8:7e:e6:7a:e0:72:cb:0b:a1:53:d9:73:44:ec:
a5:9a:b2:55:62:7b:4f:b9:f1:47:52:96:43:d7:1c:
e6:91:c4:bc:11:01:45:09:03:4e:1d:6d:b3:72:4d:
05:7c:a5:ae:bb:22:7b:51:f7:78:b9:41:de:32:ce:
c5:17:c0:30:ac:ba:9b:f6:8f:04:71:6b:08:41:84:
54:f3:6b:10:d8:4a:a8:6f:e6:82:79:fa:61:59:d7:
63:05:2b:3d:3c:59:03:fd:25:d8:57:21:86:9d:fe:
b0:b4:72:df:36:fb:fa:ae:65:d9:71:e2:52:cf:a7:
77:ea:02:9e:4b:f2:09:4c:0d:bc:6e:8d:5c:dd:34:
12:ea:57:bc:7d:fa:a3:b8:47:45:87:98:4f:47:79:
ed:3d:75:f7:6f:09:62:d6:b9:9b:0c:a9:76:fb:64:
80:7d:17:7b:5b:03:a8:50:30:00:fd:42:9f:0e:91:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:05:AF:C7:48:B9:AD:84:15:75:65:C7:C2:C0:8A:05:DD:23:3E
X509v3 Authority Key Identifier:
keyid:B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7e:8a:ab:7e:6e:c6:d8:95:11:66:07:52:2e:10:1b:3c:d0:
86:27:2d:dd:ec:d1:28:ee:a2:5d:52:2c:35:ee:aa:b4:69:02:
a7:c6:28:3b:a1:9c:b0:77:ae:0a:f8:c1:52:03:f7:d9:37:1a:
af:a2:30:7c:ad:f1:2d:cd:8b:d4:96:0c:6c:bd:9c:f7:72:2d:
66:cb:96:e6:79:d0:d7:8f:19:c3:d3:f1:d2:df:28:ce:4c:cb:
c8:e1:d1:f5:b5:01:5d:2c:f4:5a:23:14:18:8a:fa:5b:e3:4a:
2d:f7:86:07:38:c6:89:41:ba:7c:01:a0:ca:c9:83:79:2f:16:
26:8c:9c:26:2c:71:12:21:0a:df:88:73:61:96:f9:ed:bf:92:
28:65:db:2f:76:f4:9d:c4:83:fa:5c:10:be:24:0e:1f:b4:ab:
7e:30:ad:63:15:3f:33:8a:eb:96:fe:c6:9b:99:76:95:aa:78:
66:d1:ce:3b:a6:b9:81:a3:3b:08:24:6f:fb:4a:35:ad:2a:07:
17:e2:a1:63:6b:5b:21:16:6f:b5:93:02:96:f2:94:e7:67:8a:
a9:2c:6e:f7:a5:7a:58:7b:fb:b9:cf:bc:8f:29:91:6c:50:c2:
3f:f0:88:25:ff:32:a0:e6:91:14:a9:8f:fe:b6:98:14:04:ea:
9a:dd:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:20 2025 by rpki-client