Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: DKLCAwEYI6qeXq73hPX8epfxHx75HmUkp3uRdTv/jT0=
Subject key identifier: 20:77:1C:8F:20:D4:69:DA:DF:68:46:57:0F:8C:18:FF:A9:91:76:4D
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 0199FDDA4B5B2B82AB91B24B362AF27144B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 028B
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: 6wMvK7U00knk7Sbj2nJm7vK-JZg.roa (hash: jJMUZ+x65B2/nrC5W+fwDZUjmdqOosi5Z+egTtKKub0=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: cb48FBTWK6fo/QTiulKI8YI6rC6+UXmlkSOUiKnGGsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4b:5b:2b:82:ab:91:b2:4b:36:2a:f2:71:44:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=20771c8f20d469dadf6846570f8c18ffa991764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:ed:86:b0:66:92:ad:2c:ee:64:8b:a3:cc:
82:2d:86:71:9c:99:18:b2:89:8a:a2:b6:e7:39:38:
2d:a2:b1:f5:b6:78:bc:c2:25:f1:bb:ae:f5:c8:de:
7b:6a:e7:a5:84:9f:a4:7f:7f:ac:7f:82:f5:fb:03:
d8:cc:f0:8c:89:cd:f2:ef:50:72:8c:6d:bb:7f:06:
62:ee:19:af:e5:c7:21:40:04:c2:ba:26:d5:d8:40:
c5:41:04:50:2d:11:91:40:d1:24:da:65:85:60:29:
61:45:c2:63:2b:75:36:1e:7a:c0:46:08:64:a5:a3:
f0:6c:ab:43:e2:dd:63:29:e2:d9:af:82:b0:4f:3e:
e1:dd:a7:f3:66:06:5c:94:33:54:2a:71:fa:ff:1c:
a6:7b:29:ea:37:b9:b4:07:90:a7:d3:40:6d:24:bc:
e8:0a:0f:e8:f7:03:0a:92:76:b7:ac:5f:79:74:67:
2b:bc:90:f8:43:5e:be:62:d6:3e:17:e9:55:fb:7d:
47:fb:c5:91:e6:77:e8:27:fe:ec:a7:d5:2a:fd:8b:
d2:b5:68:73:f3:95:7a:b3:92:a9:44:87:31:34:9d:
5f:b6:03:a3:f7:47:4b:4a:ca:9f:c7:f1:2a:d1:9c:
34:3b:33:c1:cc:e5:43:24:e2:55:f3:f0:64:d9:66:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:1C:8F:20:D4:69:DA:DF:68:46:57:0F:8C:18:FF:A9:91:76:4D
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:dd:3e:7c:24:a1:b6:08:cb:34:79:56:ed:a6:6a:9c:09:d4:
f1:5e:61:4d:2f:69:40:23:2d:81:c4:e8:23:13:04:4d:0e:be:
e5:75:fa:25:df:5b:9f:75:25:b8:e9:31:d9:c1:38:82:46:99:
79:6b:49:e7:a3:0a:e8:7d:f1:df:44:88:07:73:87:11:7d:24:
86:4c:00:e1:2d:f9:6e:b7:7a:3a:97:38:a2:40:e7:e4:50:ce:
42:60:d9:bb:d4:39:87:c2:50:da:bc:a4:3f:78:8c:46:ec:99:
6b:f5:74:d3:af:d6:cc:aa:e9:42:ad:ed:10:b5:f4:fc:7f:d2:
fe:7b:9f:7e:93:5d:80:5a:0f:14:e0:18:1d:b3:df:53:2e:5f:
80:5d:4e:ef:03:96:10:4e:e7:9c:b1:f1:c5:4b:38:58:58:a6:
95:74:7b:12:b6:50:0b:f6:e3:be:a3:4b:ab:ad:bf:a4:f1:e0:
5c:a5:68:a1:75:dd:01:01:d2:f3:cc:a2:c3:31:97:2c:81:c9:
a1:8f:58:e8:22:be:d4:5a:2b:bf:1a:88:88:31:73:ce:55:15:
e6:e5:28:5e:86:fe:ac:3b:3d:6c:10:be:bc:ca:ee:8a:2b:5d:
f7:0e:99:3c:ed:9c:1f:58:a6:ca:ef:3e:d4:11:f4:da:d2:1c:
dc:e1:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:01 2025 by rpki-client