Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: DrbJvIGZKwgOCzlzbaOtstXVCoTPoKoeB21i6etVhbg=
Subject key identifier: 1B:14:C0:7B:EC:E0:5D:B7:B4:4C:EB:A7:40:84:2E:B7:E1:56:FC:84
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 0199FCC632F2AA760396511C3FDB271DF256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0ABA
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: hTRsLNMDZV+WuWG8dxuFSoSY6aD913zNcj/oxn6oG6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:32:f2:aa:76:03:96:51:1c:3f:db:27:1d:f2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=1b14c07bece05db7b44ceba740842eb7e156fc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:28:f7:5a:bb:6e:2b:63:b7:ef:b2:29:a8:
21:19:4c:a6:a4:4d:5f:c0:e2:9b:ed:2e:e4:ae:e1:
6e:41:7f:32:98:b5:dc:42:d9:77:f8:14:17:13:9d:
cd:b3:4a:d8:60:84:03:a5:2c:f1:45:08:49:8c:f4:
8a:0e:60:6f:93:94:35:b1:a5:00:58:16:36:7e:c7:
bf:d4:54:12:d8:73:e9:49:ee:de:40:78:85:0c:3b:
7f:ca:66:6a:03:93:a4:b2:1c:eb:1c:87:eb:00:44:
57:4f:54:d4:0f:6a:a7:9b:c1:c9:24:aa:e0:3d:4f:
cc:77:0b:f9:39:6f:43:d0:bd:ca:0c:38:7e:86:b7:
12:6f:dd:e6:4f:4b:2a:03:fb:04:ee:55:9d:d2:a5:
72:02:8f:56:b7:7a:63:6d:6d:f6:db:50:ed:da:29:
6e:20:8b:13:0c:f1:62:34:69:3f:b3:97:cd:d8:53:
83:e5:82:ad:cd:7f:91:12:8e:34:2a:c2:13:02:ae:
25:f9:69:bd:46:1a:0f:1f:b5:ef:1e:2e:a0:37:87:
eb:92:a5:98:7e:d9:42:7b:eb:0f:20:78:07:e3:5f:
97:e0:c8:37:05:32:dd:3f:72:af:1b:a3:56:06:6e:
a0:d3:7b:ef:38:d0:7b:cc:9e:d1:74:64:84:76:66:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:C0:7B:EC:E0:5D:B7:B4:4C:EB:A7:40:84:2E:B7:E1:56:FC:84
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c3:e3:8e:e0:62:58:08:b0:29:f2:4d:4b:34:aa:6c:f9:f7:
4c:75:92:d1:f2:f7:fe:b0:06:f3:58:e1:43:26:76:94:0e:38:
b5:6c:d6:a2:dc:1f:56:8f:8d:43:94:14:98:4e:5c:7e:2d:33:
77:ac:3f:d9:15:36:5c:4b:9e:b7:51:05:e7:5e:b1:17:a8:d0:
42:c3:1a:ae:86:1f:96:d6:0b:01:3c:cc:cd:c8:7c:af:49:33:
38:cc:0d:2c:b9:25:a6:15:a8:f0:d5:fa:6c:d2:69:d1:e7:b6:
4b:5d:97:d4:e6:54:49:b2:43:6a:83:b6:7f:20:a5:a1:3b:93:
52:df:e2:c4:5e:76:b0:a7:10:24:86:ce:65:3e:61:c8:a9:cd:
77:b7:68:ea:6a:06:19:52:7d:8e:ae:3b:85:ce:8e:83:5b:08:
63:28:71:d7:9c:82:98:b9:cc:68:a2:27:21:3b:61:dd:7b:3b:
7d:05:e1:b4:8e:00:b6:4b:6e:3c:c1:35:b1:c7:cb:55:78:b6:
ca:c3:59:0a:56:aa:dc:37:72:8d:84:bc:09:7b:5f:85:ad:b7:
d8:a0:85:9c:4b:f1:f1:c5:5a:ea:00:99:95:c3:0b:47:60:72:
c0:21:15:ee:26:9b:35:99:49:5c:26:f4:31:66:f9:f1:96:ac:
60:0b:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:04 2025 by rpki-client