
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: 87sQHENj17DbwwXqe/It/N+NVLHT7unRqzI5YZx6g+4=
Subject key identifier: BE:5B:26:09:CA:98:1D:39:6C:CE:1C:10:DA:6F:E2:7E:FC:DC:D4:D8
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 0199FB7CEA08AABC00D40CCE1CB4DCA5ACD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0D23
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: BI9RlUJgj4TloXOF7Bl+w3cjHQsx155u1c1mXs5YGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ea:08:aa:bc:00:d4:0c:ce:1c:b4:dc:a5:ac:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=be5b2609ca981d396cce1c10da6fe27efcdcd4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:e1:0d:4b:95:1e:f0:e9:95:20:54:72:f8:
c1:8f:00:35:d1:a3:0d:46:af:bc:17:eb:f0:dc:a3:
7d:e0:e1:07:14:bf:15:85:24:fa:2d:4b:1e:d3:b8:
da:d6:52:c6:b9:3f:79:0a:79:d8:27:59:da:44:09:
d1:21:fa:f0:f9:92:da:2a:c2:62:2a:fb:e2:2a:a1:
16:76:88:0a:05:5e:09:db:fe:83:e9:c8:4d:f4:8c:
c7:eb:94:47:17:0a:12:44:d0:05:3f:8b:e5:44:5c:
bc:b4:51:79:df:96:94:ef:56:be:8d:2e:4c:c2:95:
34:2a:95:7e:74:94:c5:f2:bf:60:24:e0:01:94:ef:
93:88:b4:24:b0:d3:e8:91:07:27:79:50:77:2d:9a:
32:d9:49:f2:27:a2:3d:14:1c:3b:23:25:24:ad:8e:
d5:6b:94:19:c4:31:74:b5:72:e5:57:f4:98:3b:37:
c5:f1:68:9e:67:c4:7d:64:98:f9:b6:1e:fa:57:25:
0a:d0:04:2a:ca:fc:96:11:24:89:4b:cf:e5:18:22:
e6:c5:58:de:a3:49:9c:8e:d8:7f:d0:40:eb:95:04:
23:5b:f1:7e:9c:0b:63:5a:1d:4e:1b:46:c1:73:34:
79:82:c3:54:c4:c1:f6:1f:bd:51:ae:4b:d1:3b:41:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:26:09:CA:98:1D:39:6C:CE:1C:10:DA:6F:E2:7E:FC:DC:D4:D8
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:35:fd:ef:61:a9:08:2d:32:45:63:9e:6d:fc:41:cb:5c:c6:
63:56:c2:fa:91:d5:98:25:2a:f1:ad:46:66:a4:f2:18:6f:14:
4a:a1:97:d7:eb:18:2b:52:86:cb:26:19:bc:0e:55:db:7a:09:
ea:4f:74:67:6e:9a:67:ac:44:f3:f8:0f:d6:8a:18:ca:ab:e4:
b1:78:a4:b3:b2:23:6d:43:86:98:f6:3b:0f:63:46:b4:f6:58:
08:fb:0d:f0:83:a3:26:25:e0:84:0f:1f:59:d1:c7:b2:c9:f1:
4c:ee:e8:c5:8a:cc:f5:cc:d2:88:f7:ff:40:8c:2d:ec:6c:66:
09:4c:7f:f0:b8:35:53:3f:ee:b0:0e:c0:db:56:be:53:ba:1f:
e4:ca:ec:dd:e2:ab:19:d9:82:1f:34:00:c6:74:26:b7:1e:5d:
0d:c8:0f:e6:cb:e8:fa:d4:e7:76:f1:2f:bb:a3:ef:5a:0d:74:
bd:56:5f:77:ca:d3:63:71:2c:af:55:52:cb:c6:5c:9b:7a:5b:
7d:f5:34:32:fc:11:13:8a:54:eb:33:26:a5:5e:bc:09:51:c7:
d1:c9:cd:16:95:8c:19:f9:e5:7d:5c:d2:08:e1:85:96:db:c3:
39:f5:bc:3b:97:73:fe:4f:98:d5:18:08:d0:4d:50:54:55:4e:
64:6a:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:48 2025 by rpki-client