Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: A2bMuFNM9dYlSfHza/M5EgEvpQnt0SbPamTy8iaZohg=
Subject key identifier: 5B:6E:0A:47:1A:6C:C1:56:DA:F3:D1:8A:0D:D5:80:1D:89:25:33:14
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019A006BF377A6F7D759EB43411DF317547F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 0218
Signing time: Mon 20 Oct 2025 07:01:05 +0000
Manifest this update: Mon 20 Oct 2025 07:01:05 +0000
Manifest next update: Tue 21 Oct 2025 07:01:05 +0000
Files and hashes: 1: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: cqc7p7dw7i+AMiWBzcNR8M/URSyedxvP8twxfcOjg18=)
2: wHN-DwZ2phagN24dcEs0dOWS0n4.roa (hash: PRZ4ezYR0MkLhJDk66PX2K5V2aQktdQihK+Xr7QGigU=)
3: y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa (hash: atFZ+K+NvLsqdqFRmhH9PBtrTTMkkRg/sp5S4neTnNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:f3:77:a6:f7:d7:59:eb:43:41:1d:f3:17:54:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Oct 20 07:01:05 2025 GMT
Not After : Oct 21 07:01:05 2025 GMT
Subject: CN=5b6e0a471a6cc156daf3d18a0dd5801d89253314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:97:0d:d9:02:f9:a8:a5:a5:64:91:5a:1d:
85:30:07:4d:5c:eb:e3:5d:7e:86:bf:42:8e:44:cf:
0e:60:0f:69:af:ec:68:82:d5:1d:e0:2c:df:b2:5d:
0f:57:1a:bd:a9:02:82:03:6f:54:b6:b5:d6:1e:1d:
1f:71:d1:80:28:f5:76:61:13:cf:ee:ca:0e:b7:77:
4f:c6:bf:89:c8:49:ce:4a:ae:c9:17:07:60:e2:23:
c1:9c:ce:1a:c0:63:e1:64:7f:0f:b9:1d:f5:43:d5:
2c:cb:e9:d8:91:2d:6a:d1:89:11:40:ac:89:02:b7:
0f:14:e9:8f:f4:da:bc:12:af:67:ba:99:03:e8:6d:
59:d3:c0:f6:09:57:30:05:24:ca:ff:5a:01:9c:6a:
17:3e:a1:37:e8:e5:93:39:2f:6b:a8:5e:b0:e6:5f:
2a:f6:0d:bb:27:55:b0:94:12:f9:32:96:d5:2f:77:
cd:e3:b2:8c:ba:ea:cc:d6:86:7f:e3:b3:b3:64:37:
8c:e2:c7:57:7c:e3:a6:35:69:38:ed:e6:e2:53:c6:
4b:57:6d:a4:fc:d1:03:ff:b0:db:94:0f:9a:9f:55:
6b:47:6f:d8:ae:ea:23:b0:21:70:ab:80:0b:0b:39:
23:aa:59:35:ac:e3:15:4f:0d:51:94:91:29:bc:e3:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:0A:47:1A:6C:C1:56:DA:F3:D1:8A:0D:D5:80:1D:89:25:33:14
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d5:fb:bb:04:a8:80:d6:5d:ad:b8:c4:ba:71:28:8b:f1:10:
93:5d:0c:9d:68:34:ce:48:c4:99:77:2a:a2:99:64:1a:b7:84:
5c:9d:d1:fe:0b:14:f0:f2:0e:fc:38:07:97:61:44:97:b5:34:
8b:ae:46:fb:08:38:d3:15:79:f4:09:ed:39:04:93:48:bf:0b:
a7:57:68:56:5b:93:af:57:87:e4:fb:42:0a:82:df:39:60:2a:
d6:02:45:27:b4:10:2f:34:da:e3:73:33:a8:68:1a:cf:41:fb:
90:fc:c3:30:63:af:e9:fb:3b:1f:f9:ad:2f:67:59:d6:f1:1f:
d1:a7:f9:e3:4c:2a:e3:bc:31:36:11:35:b3:f4:55:1b:19:24:
9d:21:b2:81:d7:c6:4e:5d:d3:f3:8c:79:ed:ed:67:94:6a:d9:
7d:34:77:29:5e:ef:cf:80:b2:cb:b2:09:ae:c7:52:cc:5a:cb:
c7:f3:09:0d:cd:d0:69:b0:2d:73:09:12:b1:4f:7b:66:77:bb:
14:be:b0:49:ec:73:ac:fc:15:9c:7e:9d:c6:6c:00:ab:61:35:
37:f3:6f:28:0c:a2:1a:ab:fb:66:e5:6d:61:df:41:ce:32:06:
13:e4:01:bd:70:f9:5a:fc:2a:5b:83:d6:4a:58:bf:64:bc:e8:
fc:f7:81:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:01 2025 by rpki-client