Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
File: uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json)
Hash identifier: z918x3XP2t6FVMStaDru7tEMT0zuEQSOMIEnNit9/eA=
Subject key identifier: 0D:AF:8E:B6:2B:AC:24:8B:C0:83:F4:F1:0A:D0:BF:DB:44:E3:80:DC
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Certificate issuer: /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial: 0199FC58E29A1FA65BAB03E2B77AA5DC7C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
Manifest number: 0525
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: H4KA0sxWbQn0TsS16gkHA_XLpks.roa (hash: aXldWw/SJurvCLdfL24USIy9/ELw56XWGz7XXExpHyU=)
2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: Ahfw4dafaCQq8yS2USV3rsQGyD4LFC4n6osiRNORUUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e2:9a:1f:a6:5b:ab:03:e2:b7:7a:a5:dc:7c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=0daf8eb62bac248bc083f4f10ad0bfdb44e380dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:05:f1:aa:09:98:2c:1a:a6:7c:a5:44:d2:
af:ae:b6:4b:09:5e:fe:2d:06:96:72:0c:66:22:04:
22:78:29:28:8b:21:c0:73:33:0e:c5:f9:c7:c8:f9:
eb:2b:b8:a3:c6:f9:4f:6e:dd:90:f2:d6:30:c5:02:
51:e2:08:b5:46:80:51:36:be:1d:ee:55:ea:85:e5:
2d:18:08:48:6f:95:bb:e7:7f:11:61:6b:9f:1e:96:
b9:9f:4d:38:4b:9a:cf:fe:84:ab:3f:e3:04:ef:63:
56:f3:aa:b3:07:73:7d:e1:4e:93:07:15:f1:b7:60:
d1:df:61:b3:ce:cb:a4:e0:fe:46:ca:44:f1:ce:0a:
8c:59:8f:8d:26:4d:c8:07:19:0c:d3:4d:f9:de:0b:
ea:77:97:8f:94:c4:73:fd:0d:e8:73:af:f3:4f:40:
49:24:38:8c:4c:9e:3e:db:12:65:0d:8d:ba:85:04:
c2:8b:f1:4f:02:97:7d:47:6b:f6:ff:18:85:84:04:
9c:9f:73:0c:58:cb:91:f5:cd:b3:ab:11:9c:46:0e:
0e:f6:81:88:42:dc:df:9f:a3:4c:4f:8c:e7:c4:82:
a3:96:db:d8:25:7b:fc:12:90:2c:81:49:55:aa:8f:
d9:db:46:38:83:d8:58:92:e2:52:07:06:53:9a:a4:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:8E:B6:2B:AC:24:8B:C0:83:F4:F1:0A:D0:BF:DB:44:E3:80:DC
X509v3 Authority Key Identifier:
keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:eb:58:36:45:39:11:3e:d0:24:2f:c0:7d:28:a6:ea:9a:4e:
83:fa:65:4f:ee:e1:a1:d8:d1:27:68:45:cd:dc:b3:d9:97:d9:
23:fd:f9:2e:12:24:19:5d:3a:20:85:8f:0f:54:2c:e6:bd:02:
29:dd:ce:12:e5:f5:8c:6b:56:2e:1c:ed:27:4c:2a:b9:54:99:
ce:37:3d:d8:7a:f6:2a:05:cc:0d:f5:3a:ea:0b:2c:70:b4:ec:
c2:4c:a6:89:30:cd:99:76:ba:3b:d0:27:36:61:e8:ee:24:83:
62:83:5d:3f:36:3f:77:7a:f5:32:50:09:44:5c:fd:f5:6c:7c:
7c:a8:8b:cc:e1:a2:c9:c6:a5:61:78:3c:e5:9c:4d:8a:13:20:
86:3a:69:96:e3:1a:d4:1d:bd:d9:3f:aa:bf:bd:bb:e5:3d:43:
94:f8:8a:af:15:a2:6c:22:6a:d1:cf:f4:36:05:13:49:5b:02:
b3:d7:c0:9e:ae:fd:6d:21:7c:b4:8b:33:aa:aa:a8:0c:b2:91:
d7:19:2b:3d:b8:f0:da:61:4c:f2:2d:91:c8:f5:0d:96:80:1c:
84:ce:e8:42:34:06:08:0d:a5:e6:48:6e:4e:c8:a9:33:28:36:
b6:fc:7c:ae:37:ba:3d:02:f8:1e:11:a6:2a:79:b6:11:00:0c:
e1:38:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:11:08 2025 by rpki-client