
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File: Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier: 8Y+Th2KnlTBwpFFDt/qAzHHPPCbV8iPk1WZEn5c2aFM=
Subject key identifier: E5:11:84:3B:BA:A4:82:B0:34:E1:B6:20:C0:87:30:49:39:48:CE:C3
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 0199FC217F707595BFB4D9E9E0DAE2A7DD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number: 0D4C
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: rQrGw0BNwmNJw0Td7Q8tCMbPeXnOOwrTohEyMejMGv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7f:70:75:95:bf:b4:d9:e9:e0:da:e2:a7:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=e511843bbaa482b034e1b620c08730493948cec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:81:07:9f:62:84:74:25:05:00:10:d8:2e:
1a:16:64:b9:1d:42:bb:ae:a7:41:07:df:22:4f:27:
34:6e:01:fe:38:99:39:a4:62:fc:65:cf:9d:65:71:
4f:b5:ac:f3:16:f9:48:f2:b2:b2:a6:4b:01:62:44:
87:fe:ff:90:d3:c8:54:f3:7d:1c:82:cc:ac:c8:53:
5e:9c:92:fc:56:e2:95:70:8b:fb:8c:8c:68:db:66:
0f:82:16:6a:fc:95:82:f9:43:83:a3:8c:ee:0c:85:
59:49:e6:b1:f2:a3:9f:5e:4d:f1:f6:73:07:63:94:
b6:ea:75:f2:fa:6c:28:12:17:1f:8c:6a:0f:15:fc:
69:da:8d:39:c6:0e:b2:80:d4:0f:ee:04:12:dd:de:
ae:f7:b3:16:fb:7e:ab:4b:14:36:3a:c4:43:84:83:
7f:c6:76:2b:ea:79:95:57:44:23:63:95:f4:26:70:
cc:78:85:ba:e4:56:a3:86:35:a4:05:08:5f:06:52:
2e:5a:07:fc:11:94:a8:08:af:b5:05:e5:91:7b:bd:
0e:8d:b3:ed:ef:4b:0d:7e:c2:aa:37:16:71:15:b9:
2a:25:e3:fa:c4:92:22:03:39:ab:cd:6c:9e:ba:72:
b6:58:cc:b3:c2:f8:0a:38:f6:c2:3d:16:13:5f:8d:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:84:3B:BA:A4:82:B0:34:E1:B6:20:C0:87:30:49:39:48:CE:C3
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f3:a3:ef:9d:8c:64:2b:6f:4b:86:f5:81:22:46:77:96:ce:
1b:d8:73:9b:f8:84:59:c4:12:5e:ef:97:88:1d:8c:b4:0d:0f:
94:77:a8:56:6a:df:f8:62:04:f8:f3:1b:53:42:da:51:02:f4:
23:65:14:a6:6c:97:61:4f:40:81:05:39:4c:f5:5a:23:ea:3f:
67:2c:c1:af:a9:9c:29:19:e0:40:6f:8b:f5:cf:c6:d7:6e:98:
c6:34:51:06:5d:9f:59:9b:c9:34:20:37:62:fc:0e:6a:b4:ec:
ff:f9:52:3f:be:6b:36:dc:cb:82:8b:3e:25:1c:66:11:82:a5:
46:af:af:96:30:86:42:31:e8:23:37:1d:0e:e2:01:16:c1:cc:
a0:32:c6:e9:3f:c1:b4:1d:46:eb:97:9c:22:b2:6b:6c:9c:cd:
aa:54:ef:0c:99:aa:a6:fa:f6:59:1a:7c:3e:98:bb:91:e5:f5:
df:39:92:34:36:1b:2f:63:c7:c9:08:8e:6f:e4:4d:10:a3:e0:
42:d0:3e:8b:9e:62:df:7d:a5:c8:19:ef:13:0f:19:3c:1f:a8:
84:e4:57:6f:b7:fc:47:c1:0d:2d:3e:98:0d:d6:ea:fd:8b:e1:
9e:53:0a:f3:57:9c:7c:2a:42:d2:4d:e1:ee:18:a4:59:2a:ae:
8d:4f:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:49 2025 by rpki-client