Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File: uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier: O/ZcBEUHnKbfEgN6CBGnspnZFFufYWVTlZhvJ19w4Dw=
Subject key identifier: A2:EB:ED:41:82:FB:EA:03:A7:7B:1A:4D:FA:7B:87:E7:75:85:D4:F6
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer: /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial: 0199FEEBB6650BD97DF3F4A51391A29AF1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number: 07F2
Signing time: Mon 20 Oct 2025 00:01:24 +0000
Manifest this update: Mon 20 Oct 2025 00:01:24 +0000
Manifest next update: Tue 21 Oct 2025 00:01:24 +0000
Files and hashes: 1: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (hash: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=)
2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: MJqTyopp83KQdgofnFs3PEgCUoO9b8IeM1EsQapY6Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b6:65:0b:d9:7d:f3:f4:a5:13:91:a2:9a:f1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Validity
Not Before: Oct 20 00:01:24 2025 GMT
Not After : Oct 21 00:01:24 2025 GMT
Subject: CN=a2ebed4182fbea03a77b1a4dfa7b87e77585d4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:88:d0:5d:d9:ed:3e:09:52:34:a3:dc:74:
91:ce:e2:be:24:f3:5b:ea:4c:d9:44:11:fe:0c:f8:
33:80:9f:b2:10:a1:99:eb:b1:62:66:cc:64:3c:b4:
5c:f6:77:d0:60:59:12:e3:6d:ac:fe:7a:b9:00:e1:
11:6e:73:77:cb:93:c8:b6:9f:bc:3b:c1:39:e3:25:
27:1d:02:1b:9b:32:48:bb:c2:7f:a9:27:8e:f3:26:
9e:2e:b8:5f:56:a2:84:47:1a:02:25:84:34:d8:dd:
30:81:72:9b:2b:75:6e:da:2c:b1:4f:89:e6:6d:c2:
34:e0:26:f7:f9:ad:12:99:b8:01:b2:b0:e0:34:9c:
b6:96:4c:b1:6d:45:89:05:66:b4:d1:1a:96:96:89:
22:6a:74:46:65:ac:f5:83:62:6d:a9:ef:5f:e1:83:
b5:60:c7:4e:63:d9:4a:e2:26:39:dd:a1:c7:81:92:
67:2d:b3:98:1c:61:7f:82:ca:e5:57:37:95:e6:d4:
0d:86:09:38:e1:0f:03:0e:f3:c6:3c:8b:3f:e6:e2:
4b:a5:75:69:56:9f:e2:60:a5:e2:38:42:7a:f5:37:
1d:97:04:21:14:17:4e:81:b3:d0:b1:1e:6b:f1:30:
08:aa:5f:83:01:c5:c1:56:b2:e5:0a:40:da:c5:41:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:ED:41:82:FB:EA:03:A7:7B:1A:4D:FA:7B:87:E7:75:85:D4:F6
X509v3 Authority Key Identifier:
keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5b:2b:fe:91:fe:d0:b2:7a:91:62:52:f2:3f:0c:3e:fa:cb:
fa:ad:40:40:a0:36:bc:a9:e1:8e:c0:a5:ac:a9:be:9b:4a:4b:
5d:80:4a:d5:4b:9b:74:39:39:82:ac:26:7f:af:18:cc:66:81:
27:59:96:c7:e9:45:5d:d2:4d:aa:45:4a:05:5a:07:02:27:ad:
d8:86:4c:75:4f:04:47:c6:0e:30:18:2b:31:eb:22:da:7e:84:
44:57:fd:11:3b:c2:38:47:52:c7:5c:b1:67:30:8e:5b:10:9c:
a3:b1:5d:5d:71:58:4f:63:c5:0a:e3:d0:40:11:77:4e:27:f6:
47:f0:e8:b2:6d:8b:fb:ec:2b:fe:ae:69:60:64:db:2a:cb:4e:
cd:49:57:77:78:86:4c:a3:92:22:a2:46:4d:a0:37:68:00:eb:
f7:48:c9:43:c8:0b:b8:0b:a3:f2:0e:0e:c8:3d:4c:e3:d6:40:
f4:56:e6:77:25:ee:68:ac:4a:78:29:25:d5:2c:56:8c:f6:4b:
c7:fd:bf:60:9d:3c:13:14:08:13:cb:da:5b:0c:ed:b4:f6:f1:
5e:fa:1d:23:ce:dc:d3:a9:53:da:18:51:74:b6:e5:e5:62:5e:
68:b0:a2:cb:3c:da:82:a7:5a:15:52:4b:3a:55:91:4b:fc:ee:
11:3d:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:50 2025 by rpki-client