Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier: 91Vb/EuKxjxAThTeaNCauGTfK/51kHQK49Yv7gb60UE=
Subject key identifier: A7:51:A9:15:4E:6D:4F:FE:BC:7A:53:11:97:4A:2F:48:F4:CF:F2:AB
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 0199FCFDB22837CB9179AF77DEDFC09E5F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number: 0485
Signing time: Sun 19 Oct 2025 15:01:48 +0000
Manifest this update: Sun 19 Oct 2025 15:01:48 +0000
Manifest next update: Mon 20 Oct 2025 15:01:48 +0000
Files and hashes: 1: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
2: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
3: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: 5ICuoOvS5LNL8juuhdmOz6nQscnQ0eqsNh0BMropFdo=)
5: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
6: ohgVS6vR-4SGEXaj_tFUb-UB3m0.roa (hash: FUu97z1QXGuNnK2gooake8eelYh7e6wKHA9hoFvMoKQ=)
7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b2:28:37:cb:91:79:af:77:de:df:c0:9e:5f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Oct 19 15:01:48 2025 GMT
Not After : Oct 20 15:01:48 2025 GMT
Subject: CN=a751a9154e6d4ffebc7a5311974a2f48f4cff2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:2f:e3:3f:8d:69:07:be:7c:ec:b8:40:11:
f2:c2:59:fe:f6:8b:12:10:20:33:50:b0:8c:70:ff:
4b:a5:1b:3a:50:44:71:2a:44:aa:b3:94:77:d3:d1:
81:6d:ab:82:97:23:3d:b6:d1:97:1c:28:bc:38:3c:
8c:14:81:7f:96:2e:5d:28:20:6e:24:48:72:a0:08:
de:3d:38:2b:17:4d:ec:f5:9a:75:03:8a:c9:cc:0d:
10:26:16:4c:5c:15:31:04:e8:a2:be:0b:21:4c:8b:
37:db:1c:a6:22:85:6b:04:6d:be:90:73:6e:24:52:
61:b1:18:22:e7:c8:01:6c:c0:0f:9f:fe:ba:84:57:
d3:f3:0b:29:6e:51:50:e2:01:8f:43:3c:69:be:d6:
a8:0c:77:e2:73:dc:43:19:9d:62:ca:2c:94:d7:d1:
5f:26:84:41:6d:fe:bb:c3:1b:99:56:7c:eb:12:09:
24:da:c0:84:e0:a8:80:f5:00:72:7b:68:a5:b6:53:
d5:12:5a:5d:46:18:d5:ca:68:82:1f:91:00:30:66:
de:8a:f8:68:2d:3e:b0:4c:f8:a7:d8:8a:52:69:1e:
9e:a8:1c:ec:eb:19:4a:a6:0d:84:f5:34:a0:81:4a:
73:87:a0:db:20:ce:6b:f5:1a:22:2d:13:c6:52:80:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:A9:15:4E:6D:4F:FE:BC:7A:53:11:97:4A:2F:48:F4:CF:F2:AB
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:c6:73:52:a7:87:25:67:b3:78:fa:6a:73:dc:0e:24:14:
c5:f9:1d:51:be:dc:51:98:c9:d1:58:80:9a:f8:89:c2:bc:b7:
0b:c0:46:ab:87:17:1d:b2:31:97:aa:9b:a7:e6:12:87:24:15:
75:e6:c5:47:93:f2:cc:1d:e6:6e:50:db:08:60:67:95:d5:4f:
4c:b4:05:4c:04:78:d8:0c:c5:07:16:ac:87:ec:00:51:e6:20:
61:ab:82:5d:78:5f:83:f7:ca:7d:eb:cc:d7:9b:4f:df:ac:e2:
a8:85:6f:a0:66:a6:79:c4:cf:e5:b4:f8:eb:27:e6:6f:21:95:
4f:a7:bb:3e:83:55:20:6c:1a:f8:d4:aa:5c:2c:2b:7d:6f:02:
34:df:85:66:f9:50:98:6b:08:91:92:f7:ed:8d:b5:74:b0:9a:
a6:5a:6a:fc:5a:0b:ab:a6:64:61:0a:ec:7c:a8:ea:99:3e:c4:
2f:d0:7a:74:ef:11:bf:e9:09:8f:63:36:98:2b:fb:49:ee:cd:
f7:d3:c3:85:16:ae:48:12:9e:01:58:d9:f3:72:b7:fa:66:cb:
27:01:d7:82:81:9e:c0:de:60:f5:bb:17:11:2c:e8:12:ac:a5:
8e:ed:6e:2f:c9:81:77:49:63:76:cf:9f:3a:d2:fe:8b:d9:57:
ec:42:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:37 2025 by rpki-client