Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
File: uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft (raw, json)
Hash identifier: NuL4/CfXBgBzJuFB5eaarVywrGhqF3DDnNwwYg0O784=
Subject key identifier: E5:DB:60:99:5D:5D:66:21:5F:C6:2C:61:2D:27:3E:0D:EF:57:44:54
Authority key identifier: B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
Certificate issuer: /CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Certificate serial: 019A4E86C2530176EEB700C7220F9A039A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 11:00:45 +0000
Manifest this update: Tue 04 Nov 2025 11:00:45 +0000
Manifest next update: Wed 05 Nov 2025 11:00:45 +0000
Files and hashes: 1: dx1DsNdC0zzf80gFyxTg9VFR8p8.roa (hash: wJSJefvy6pAquwxe0d0SzcWI3aTdl65uj7QEQlUElKE=)
2: uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl (hash: gfeRx90FnS03CXFcoK0kX7aRgVwcW+KP+ztx2UioPLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c2:53:01:76:ee:b7:00:c7:22:0f:9a:03:9a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Validity
Not Before: Nov 4 11:00:45 2025 GMT
Not After : Nov 5 11:00:45 2025 GMT
Subject: CN=e5db60995d5d66215fc62c612d273e0def574454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:f1:e8:95:43:4f:66:8d:20:8c:92:4f:8f:
11:60:b3:0d:f3:57:95:f6:fc:24:07:7b:0b:c1:61:
c8:71:29:21:85:ee:49:a9:05:bc:0c:e2:e1:85:20:
da:05:a9:96:37:fa:99:9b:49:24:7b:97:79:cd:69:
60:be:0f:e7:33:01:41:59:78:2c:f9:a3:ca:d9:20:
05:34:a2:11:d5:ab:5f:a3:15:08:1c:db:f5:5c:26:
c6:1c:49:ac:4b:61:dd:9a:4b:9a:4b:85:d1:e3:cf:
aa:2c:74:62:d1:cd:49:0c:6a:93:19:52:e5:fd:02:
dc:ac:73:19:dc:80:77:40:09:aa:e2:24:54:92:d0:
c8:d8:b4:f1:56:40:7b:32:ce:a3:7d:1b:ba:95:5b:
12:ad:fb:a3:eb:ac:57:d9:5a:92:ce:70:ff:55:ba:
90:90:b0:46:a1:67:94:72:06:52:ef:04:0a:e1:d3:
21:34:92:a5:ed:eb:7d:06:af:94:12:f7:67:01:03:
ba:c3:47:db:e5:14:81:bf:51:63:1d:03:d1:8f:c2:
d5:18:c5:0f:ac:06:af:64:1b:15:bc:d5:5b:9c:4c:
09:f3:fc:3d:76:93:c4:d3:c8:2b:8b:18:12:d8:d9:
0b:02:18:54:b2:c9:33:b3:2c:1b:b1:3c:99:08:48:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DB:60:99:5D:5D:66:21:5F:C6:2C:61:2D:27:3E:0D:EF:57:44:54
X509v3 Authority Key Identifier:
keyid:B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bc:cd:c6:3d:60:d8:5c:a7:b2:21:27:f5:4c:ff:10:80:d7:
78:0c:4e:a4:cf:80:4a:60:9b:c8:61:ee:67:0a:b2:fc:e0:79:
a3:20:5e:86:28:0f:a1:35:6d:fc:ff:49:56:74:1f:7c:e7:de:
39:73:b9:d4:77:d1:3d:fa:d9:95:5d:2a:a8:c7:34:8f:7c:3b:
6c:4a:bc:b2:78:bb:e4:95:18:b7:cf:a4:66:43:56:7e:05:71:
94:e0:ee:8f:b7:ea:16:cb:9e:1c:8b:0e:25:fc:d8:ba:f4:77:
18:73:dd:8e:e8:70:45:75:36:ec:28:96:37:bc:7e:3a:86:58:
ad:ed:9f:24:ac:bd:d3:6d:61:10:5f:95:89:51:aa:c4:f6:92:
cf:fc:c1:4e:03:5a:9b:d1:ea:68:81:fc:32:44:bd:20:79:e1:
11:e9:ab:28:64:a2:c5:64:95:c7:a2:d2:3a:03:e5:c9:b8:fa:
f9:8b:81:31:93:69:06:a3:b2:95:42:12:93:26:61:1f:5d:7b:
4e:3a:5d:37:00:2d:38:bf:cd:fa:d8:28:fd:50:18:ab:eb:94:
29:82:a0:63:37:fd:1e:e1:34:15:12:f5:3e:b7:ac:5f:c1:04:
f9:d8:39:21:b2:3c:c8:32:59:fa:1d:f2:19:29:78:51:6f:9c:
91:b6:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:48 2025 by rpki-client