Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File: uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier: /ThxOl4ChuCchoxl9lNKPep+FA3/dKsruYVFjIgGqVw=
Subject key identifier: CF:46:F2:34:68:B8:67:8B:38:9E:28:A1:0D:8D:D8:80:A7:E0:B1:08
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer: /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial: 0199FD33EE3A9F53A4F0B0E18DCA761C71E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number: 0DE9
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (hash: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=)
2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: DW1+BfvBas+hiY/LGedFev9bYnaNqRWz+90PX2xLnyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ee:3a:9f:53:a4:f0:b0:e1:8d:ca:76:1c:71:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=cf46f23468b8678b389e28a10d8dd880a7e0b108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:8c:7b:83:69:0f:76:83:80:a7:a9:a0:54:
71:a8:1e:de:99:a9:2f:b0:69:d1:74:28:95:07:34:
e7:6c:d2:9d:18:77:2f:d0:0b:08:ac:3f:1c:d3:d0:
e6:f0:a5:1c:3e:a7:be:b4:c4:81:22:85:ac:c3:55:
20:0e:cf:5a:50:53:d9:02:d9:a5:c7:29:db:2c:56:
e3:26:4b:11:d6:ad:06:17:df:13:fe:df:fa:55:99:
fc:24:9b:c9:1f:81:4f:15:f6:5e:b6:f0:fc:ff:dc:
65:86:62:94:f4:b2:78:42:47:82:7f:d4:68:a2:69:
cc:f3:31:fe:26:82:fe:91:bd:4d:95:a8:27:d0:f7:
2b:5b:3a:0c:04:83:60:97:e5:85:ac:39:d3:a9:9a:
85:b4:c2:5e:6d:b7:f1:2f:f5:f7:be:df:37:a9:24:
4c:13:5d:96:59:d2:a1:61:bb:98:db:9e:ca:a1:47:
5f:74:db:77:23:19:e0:d9:0d:eb:f7:3c:88:9b:7c:
72:c3:b5:6e:da:6d:5c:f1:17:4e:56:bf:4b:b8:b2:
fa:d2:89:01:55:84:08:a0:bc:48:f1:b9:81:d6:68:
05:d1:51:68:65:8f:39:59:fe:f0:f0:fe:7d:21:4d:
32:a3:27:c9:db:34:e6:ae:25:2d:93:f4:8b:c0:25:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:46:F2:34:68:B8:67:8B:38:9E:28:A1:0D:8D:D8:80:A7:E0:B1:08
X509v3 Authority Key Identifier:
keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fc:b1:33:2d:63:1c:38:3f:78:1e:f3:34:90:04:8e:5b:98:
39:6c:73:4e:d8:40:bb:20:e4:18:67:ad:6e:eb:41:1b:64:0c:
90:86:df:96:3b:98:c9:ed:36:2d:b5:a8:32:db:51:70:37:5d:
09:3c:f5:a1:33:a0:f0:33:4f:2d:10:e6:22:df:31:14:97:c4:
3a:40:12:68:94:a5:83:53:eb:2e:f7:5d:63:e7:dd:50:c8:9d:
6a:06:46:41:b9:f0:74:44:b2:af:ce:34:1d:b1:6e:11:56:12:
1e:8c:b3:5b:9a:9b:bf:c2:85:01:98:e8:de:99:19:41:e7:05:
b9:ae:6f:b4:21:ef:8f:5e:33:43:8b:31:1d:3e:41:9e:bd:5c:
26:b8:78:5c:0c:96:8f:d3:94:ef:d3:8a:f3:c1:a0:fe:09:c9:
e9:57:d5:3e:79:cb:bb:e3:c6:3f:79:a1:95:3b:62:ed:24:4a:
75:0c:49:e9:08:21:7a:c4:e5:df:4a:9c:c5:f3:5a:63:09:1b:
a1:93:69:41:f3:8a:56:ab:2b:d5:ef:46:83:f5:e4:24:9b:68:
59:ca:ba:c2:eb:82:76:78:5d:33:7f:46:5f:ea:1f:6f:a1:da:
ad:d0:06:2f:70:47:61:03:b3:de:b2:df:1c:f9:bb:bb:94:ae:
8d:89:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:28 2025 by rpki-client