Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: K/PClcoBqp6ED7PGCT/NmMIjf1fy4q883V1V2RskXN8=
Subject key identifier: 1F:61:EF:BB:16:D1:B6:CF:2B:22:F0:F8:16:CC:4E:8B:66:51:A4:3B
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 0199FBEB1E31554B35A5B789ED1080BE934B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 0770
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (hash: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: D2w/L7+BXDUX4PT6qOJSQhJ/wzN7IdBlQy+cejonCRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1e:31:55:4b:35:a5:b7:89:ed:10:80:be:93:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=1f61efbb16d1b6cf2b22f0f816cc4e8b6651a43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:48:dd:85:6b:8c:66:a3:a3:ba:2a:78:a9:
34:53:72:9e:ec:50:32:e0:d9:b7:af:fb:d4:ad:ac:
d5:f4:6c:1c:0e:19:e3:d9:2b:d8:50:bd:7d:b1:0b:
3f:69:4a:66:90:92:da:af:e9:03:91:10:dc:00:05:
eb:b4:22:f2:4e:f0:d0:6e:0c:93:c5:ff:50:8c:8d:
5f:af:64:93:f6:4b:c1:ab:e4:78:91:d3:c4:37:38:
a1:5d:78:ee:c6:74:f8:d0:95:da:5e:e0:a7:d7:cc:
a1:cc:c2:ab:14:36:2a:23:28:0e:28:36:8e:c3:da:
8d:bb:f8:00:28:6d:76:aa:01:f5:aa:84:79:79:35:
98:8b:42:fa:84:33:24:29:53:56:38:c6:24:16:69:
95:ed:90:a9:a1:b8:f7:37:6f:1f:00:6d:c1:7c:e2:
58:2b:40:af:f5:4f:ff:60:14:29:2f:69:bd:28:9d:
e3:80:15:66:6b:b8:38:aa:b8:25:90:27:b4:0f:f1:
3f:9f:98:a6:94:80:f2:85:88:44:62:b2:b9:fe:c0:
ad:9f:bd:09:8c:c3:02:e8:87:63:0f:a3:56:13:c9:
47:17:1f:7e:ef:77:ce:e0:63:61:11:51:90:c0:75:
bd:11:e6:33:56:68:ab:af:d0:36:14:73:08:1c:60:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:61:EF:BB:16:D1:B6:CF:2B:22:F0:F8:16:CC:4E:8B:66:51:A4:3B
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:35:36:f2:53:55:d8:0f:1e:1c:0e:92:18:c0:88:11:b7:8c:
62:f4:4f:05:34:df:22:d0:02:ad:89:be:2b:d3:8a:24:2a:c2:
00:14:16:10:a0:d8:e8:e9:0e:ac:8b:d9:14:69:9e:d7:0b:04:
48:df:2c:4e:cd:33:70:33:f7:d7:8c:cb:f4:42:91:92:67:ee:
86:f3:5d:2b:8e:7b:9e:b3:e7:97:ed:cc:f3:35:2c:97:d5:13:
b8:34:46:f4:b0:27:3b:89:2f:09:56:5e:10:87:e7:ad:a8:3f:
c3:e6:fe:6c:32:fd:2c:d8:9f:bd:78:5a:2b:35:3c:00:0d:db:
55:83:2b:39:49:19:9b:9a:d7:83:fd:56:65:86:76:94:b3:5a:
be:98:72:52:1b:b0:98:e7:ce:b8:fc:93:a9:17:4b:12:b2:ce:
04:5c:dd:d6:f5:8e:f3:ac:07:70:3f:3e:08:6b:cd:e3:36:b8:
88:a5:e3:48:a0:b2:a7:fc:c8:9a:28:a7:0d:05:85:65:c0:2b:
6a:a5:87:0e:e5:46:ba:fd:e7:55:e3:fe:ed:b0:13:1e:55:16:
f3:88:9b:35:87:db:6a:b5:69:43:62:f6:2b:55:33:45:b3:91:
b5:46:55:ee:a2:ae:b3:09:f4:23:8f:07:01:a9:2b:4d:af:4a:
de:9c:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:25 2025 by rpki-client