Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
File: uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft (raw, json)
Hash identifier: 183gTQvcNVMp6USvX1UOW74eMcMZhELehFZE6SklkAw=
Subject key identifier: 96:C9:32:D6:3F:46:08:F0:A9:5B:34:79:2B:E5:F9:8C:7D:8B:39:ED
Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Certificate serial: 0199FC217232E996087CF7992B23B172FBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
Manifest number: 0AE0
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: FpN3CNrpC7an-iJQGSmMT_sDhCQ.roa (hash: IP5LQBH3slQY1vq5cW96oTpQwzobOGLQLnnmLh+kv0c=)
2: T2xZGAQ2utapiNKAxRkC6LvmPaU.roa (hash: wOG+SGzxtaS4DLVV01zxTU+InL0GZso9vp2F1RAwi2M=)
3: knjugsz4dO-GRlfWjJa4TPEo8dc.roa (hash: pgS04K1pxu870WaArIBezAQBjlsLTOobzOHJ29I84kY=)
4: uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl (hash: EkfHlSjZXF/8KCSIUDW6jZ+6R0oh3xJ8Y0UNAJSzUbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:72:32:e9:96:08:7c:f7:99:2b:23:b1:72:fb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=96c932d63f4608f0a95b34792be5f98c7d8b39ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:40:c1:d4:7a:6b:19:4c:6e:51:19:ed:bf:
1e:1c:24:bb:8e:27:ca:cf:38:54:fc:4f:65:ea:24:
64:79:b4:53:26:4f:25:7e:93:6f:26:dd:50:05:78:
45:0f:9a:dc:5a:a5:84:b3:82:51:05:7e:b3:22:78:
7c:11:da:0f:ff:f1:3e:11:5d:0c:5a:c1:da:0d:b9:
d5:14:79:55:51:aa:9d:c3:10:e2:43:c7:86:c9:5f:
21:3c:73:a0:42:de:97:e1:0e:12:88:2b:27:8a:91:
cd:8f:ac:b0:a7:dd:6e:7c:a9:33:bb:3a:50:4a:41:
92:d6:3e:d2:c4:2e:07:83:24:3e:2b:9a:23:2c:97:
a3:40:d5:d8:d2:d4:a2:33:a2:65:18:14:67:84:95:
4d:fe:f7:76:47:81:5a:53:3f:57:db:8f:ee:8a:7b:
e5:da:72:6c:4b:0f:1b:2a:6b:5b:24:cd:0a:cd:3a:
6b:57:a5:f4:3b:4f:de:9f:e5:86:64:73:87:76:eb:
c5:b6:11:68:22:6b:f9:bc:b2:e9:da:d1:52:08:4c:
9f:68:b8:2b:dc:38:28:e9:3a:b6:56:08:85:35:4e:
12:00:df:e1:5e:e8:c8:7b:1c:32:1d:cf:c5:18:37:
38:ac:24:d1:58:af:d8:e0:1e:7a:15:72:7e:6a:78:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C9:32:D6:3F:46:08:F0:A9:5B:34:79:2B:E5:F9:8C:7D:8B:39:ED
X509v3 Authority Key Identifier:
keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ec:a7:51:19:cd:91:2e:80:e8:79:4a:8c:25:a7:94:a5:05:
17:54:ad:23:02:e1:98:e9:41:fe:b6:cc:f6:a5:1e:d3:a9:f3:
75:f5:00:3c:a2:d5:39:76:06:04:44:43:e1:d7:35:f0:5a:98:
9c:92:89:28:a3:24:7c:3e:24:72:7e:a6:a0:38:a8:9a:21:4a:
55:70:b1:64:0c:98:d0:66:2d:ae:45:ea:6b:c0:02:73:a0:83:
d6:d1:8c:7e:fe:ab:b4:6c:b4:bb:11:bf:a9:fd:8d:52:4d:76:
e7:05:98:95:94:57:e8:00:ed:d4:db:a0:1c:b9:17:db:00:13:
e1:d5:58:fd:23:cd:b5:65:8e:99:df:02:7a:04:b2:70:ce:ff:
8f:10:5e:6d:7b:73:fe:79:98:1c:d3:df:ad:9b:86:c1:90:4e:
f5:9b:a8:0a:1d:14:98:f8:06:a0:8e:19:ba:da:b8:d1:f5:c2:
71:f3:22:53:c0:f0:41:2a:1a:fb:c6:12:71:b4:e1:0f:55:00:
79:ac:b4:aa:3d:60:76:12:3d:5a:d6:9b:21:f5:e1:0c:07:cc:
06:77:52:ea:01:82:b1:74:9e:33:58:62:ef:8b:42:ba:42:2a:
ca:0a:c6:d0:71:9f:6a:1f:75:b7:35:d3:c4:88:a8:f9:b8:67:
55:56:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:22 2025 by rpki-client