Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier: ijTPLsMTXYTp+fkgxReYswOaRvzeztKlZKHojF9dA+Q=
Subject key identifier: 83:ED:44:4D:70:66:B8:70:DE:8A:44:AB:67:96:6F:D3:F0:9B:98:48
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial: 019A00A2F028A0A09F0FC849D89062D7A632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number: 168F
Signing time: Mon 20 Oct 2025 08:01:09 +0000
Manifest this update: Mon 20 Oct 2025 08:01:09 +0000
Manifest next update: Tue 21 Oct 2025 08:01:09 +0000
Files and hashes: 1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=)
2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: 3FrnKlPIj5Uofq4xAFKN4SXOU/+8stH51ZTkLN2zgqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:f0:28:a0:a0:9f:0f:c8:49:d8:90:62:d7:a6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Validity
Not Before: Oct 20 08:01:09 2025 GMT
Not After : Oct 21 08:01:09 2025 GMT
Subject: CN=83ed444d7066b870de8a44ab67966fd3f09b9848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:04:b4:75:fd:00:d5:06:5c:ef:6f:31:a7:
b7:3b:f5:17:00:ac:cd:87:da:4a:46:44:e3:8e:8c:
10:d0:70:20:fe:86:3f:4b:3b:f0:92:53:77:82:f1:
29:9c:d2:7c:43:a6:11:de:31:aa:f1:7e:7a:49:14:
b6:e7:d1:5b:36:76:f0:1c:a8:59:1c:46:f8:46:c5:
f1:c5:43:c1:e2:61:76:f0:87:18:5f:cc:ef:b9:54:
90:38:c1:60:24:76:ae:52:a6:84:59:21:a5:8d:f7:
b8:0a:aa:58:df:8b:6b:76:fc:8a:fd:c9:9c:43:f2:
28:80:83:b4:c6:f0:8d:c8:61:79:af:eb:e1:68:5a:
74:f8:c4:0d:f0:05:48:07:ed:60:8a:d9:a2:f4:4d:
af:73:c6:1c:15:80:5f:e8:b4:a0:47:0a:bd:e0:c2:
ae:d5:96:98:87:9b:2c:93:8b:6c:47:e4:7d:b0:db:
ef:c6:b3:29:1a:84:2c:7d:31:e1:6f:ba:af:18:af:
03:e3:21:a1:cb:98:6a:b3:1a:5d:66:f3:74:e6:85:
53:48:c4:52:68:f8:da:1f:bf:36:20:47:e5:82:c0:
8c:3e:b6:2d:40:2a:3b:63:54:c6:a1:12:07:1a:a0:
f1:b0:7e:d3:05:e0:27:29:b6:a1:f8:4d:a7:9b:e8:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:44:4D:70:66:B8:70:DE:8A:44:AB:67:96:6F:D3:F0:9B:98:48
X509v3 Authority Key Identifier:
keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:88:58:9c:30:c0:02:d6:19:ef:3d:f9:78:78:82:05:f7:f7:
1f:e2:72:86:60:fe:29:dd:11:a7:e4:a3:be:ee:01:72:98:85:
ab:61:00:07:30:6e:ed:14:5d:33:33:2f:7e:05:7d:59:92:eb:
8b:fb:3f:bd:43:36:35:2b:ae:9c:07:02:7a:6b:1f:41:50:d0:
30:c9:b8:36:28:8c:48:b6:1d:f2:18:2e:5b:b4:4f:44:54:ab:
25:ef:7e:fd:be:aa:fd:b8:8d:fd:81:92:6c:17:01:24:4b:71:
3c:cf:2d:bc:a0:7f:52:f5:59:49:38:01:fb:ac:0e:4c:3e:47:
2b:6b:da:d6:d0:ab:3f:f9:96:98:56:c1:2f:44:fe:71:89:01:
ee:70:eb:e5:8c:fb:e1:b9:64:e9:08:60:d9:09:46:02:0f:d6:
99:6a:b7:07:42:78:5f:80:e0:e8:76:7e:4d:a8:62:a5:d8:8c:
71:86:3d:67:15:38:04:09:32:4c:a0:5d:72:a9:06:e7:72:d8:
cd:b2:24:1e:f7:55:73:c6:5a:ef:14:db:a2:ac:e2:df:1e:a3:
2e:1a:af:3d:22:ed:fb:ad:db:f6:e5:1d:6e:9c:91:cd:c5:9b:
f1:83:45:87:5c:44:36:ea:af:42:a5:fd:53:95:24:8a:13:c1:
05:07:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:51 2025 by rpki-client