Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
File: uH9ej-619ec7CXtmZX7tjbl0pA4.mft (raw, json)
Hash identifier: c9zdv0zFIweGaWOr330Yq8q6bYhinLWoIPq5aBhpPyA=
Subject key identifier: C6:35:4C:EB:1B:C3:F4:9C:47:02:0C:3D:E7:72:35:5C:31:A2:86:23
Authority key identifier: B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
Certificate issuer: /CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Certificate serial: 0199FBEB8B41B858DAE1BECB24BB5DD41880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
Manifest number: 0EBF
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: uH9ej-619ec7CXtmZX7tjbl0pA4.crl (hash: jXMnKiyLr5jEO4Ff5nc3Jvz5QW3wCaKq0huRI40s1SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8b:41:b8:58:da:e1:be:cb:24:bb:5d:d4:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=c6354ceb1bc3f49c47020c3de772355c31a28623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:6f:00:4d:c7:ac:19:cc:e1:65:d5:2c:1e:
33:90:10:02:ef:8d:c9:c2:4b:25:fb:6b:79:75:ef:
65:c0:f0:14:66:33:5d:08:46:52:28:52:3c:54:70:
ba:01:72:b1:87:7d:77:37:bd:22:44:9f:a6:63:20:
ac:ec:56:df:a1:be:95:e1:6c:de:9c:06:cd:b8:18:
fa:16:74:8c:82:71:f4:6f:b0:b1:03:f1:4e:69:09:
ce:ed:4c:c0:fd:81:0a:c8:26:ea:e6:d1:26:5f:8e:
3d:a9:0f:f1:13:69:ac:a0:dd:b3:fa:f2:1a:68:46:
7e:62:3f:e7:a1:4c:80:12:f8:81:ac:5f:cf:f6:a9:
10:23:40:b3:97:32:c0:79:ee:fb:07:4f:9e:e6:3f:
9a:d6:91:88:8c:e0:45:29:35:ed:ab:9e:ec:25:1e:
73:3f:66:c6:b4:dc:5e:4a:06:0a:42:33:96:21:86:
aa:2a:d0:7d:0c:ee:39:39:15:3d:30:ce:31:dd:d5:
a7:ec:16:79:1a:d6:42:a3:db:af:cb:c5:83:ff:06:
84:ed:d3:7d:10:ec:ca:e6:29:cd:c6:8a:6a:af:67:
94:e2:5c:f1:7e:1b:fd:20:fa:cb:61:06:98:c4:ca:
05:35:61:df:38:f1:7b:25:16:a8:d1:f6:dd:8c:ad:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:35:4C:EB:1B:C3:F4:9C:47:02:0C:3D:E7:72:35:5C:31:A2:86:23
X509v3 Authority Key Identifier:
keyid:B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:54:0c:d0:6d:f9:89:23:91:46:a5:2f:a2:47:cc:f2:fb:aa:
02:a4:d6:5c:ba:f1:f7:56:64:80:16:c9:bf:91:af:d6:61:39:
f1:47:81:e2:18:e6:89:9f:df:91:a2:24:ef:9f:bf:d0:af:20:
c1:ab:d4:70:f1:94:09:9a:c5:f4:9b:75:85:42:45:21:cc:a0:
d2:c7:41:b6:59:2f:0e:39:6a:f4:28:28:26:3f:b0:2f:ef:ef:
75:47:56:61:60:6d:04:9e:f1:23:68:88:12:18:c7:da:d1:10:
a3:87:46:fa:ef:38:0b:32:a4:e1:40:e0:75:ba:fd:41:3c:be:
aa:5f:f1:bf:f2:df:56:35:d4:87:5d:64:da:96:78:e9:c6:9a:
c0:9c:85:2d:cc:96:52:e8:44:4a:d9:a3:18:7c:6d:51:e1:77:
74:ed:2b:ab:76:06:33:fa:e5:68:f5:ad:88:7a:4e:b4:bb:78:
b4:2c:0e:2e:fe:13:cb:49:31:62:8c:64:e4:bb:65:67:b2:5a:
bf:66:e8:ff:bc:77:da:ff:e1:bf:d0:d6:0c:d3:28:b5:9e:00:
3c:65:f8:70:4d:6b:47:e7:d9:e7:c0:d2:ce:6c:e8:12:c1:af:
c4:1d:49:b6:8d:07:e2:dc:57:9a:7b:e5:e7:21:79:1f:6d:8f:
1d:4f:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:17 2025 by rpki-client