Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier: LiFiri687Jxgp0AxNaX0ir8Y0Z7+2YwpyQ+k2raifmQ=
Subject key identifier: 9D:AB:97:A7:C4:42:7A:63:44:42:B8:88:B6:0A:EA:0F:59:95:1D:FF
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial: 019A522C0DCD36DE0B6EC7A8987A4A420F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number: C9
Signing time: Wed 05 Nov 2025 04:00:10 +0000
Manifest this update: Wed 05 Nov 2025 04:00:10 +0000
Manifest next update: Thu 06 Nov 2025 04:00:10 +0000
Files and hashes: 1: 5GYWrzRu65AjS73_-IgwDSj8n-Q.roa (hash: YdE2CXn8HuPLnZ5nEOMoIyiMWMH03XMYxsoKuzVp7Lc=)
2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: YrrIPGdjSpSe4RUhdEic0w6y6YUqB8Gom1voDtsKmQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:0d:cd:36:de:0b:6e:c7:a8:98:7a:4a:42:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
Validity
Not Before: Nov 5 04:00:10 2025 GMT
Not After : Nov 6 04:00:10 2025 GMT
Subject: CN=9dab97a7c4427a634442b888b60aea0f59951dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:79:33:f4:50:3b:e3:e8:dd:e8:b2:6d:b3:
45:f4:1e:db:6b:15:6c:bd:b9:ec:99:4b:14:a6:de:
e4:3b:23:18:ad:78:64:63:ed:e5:53:f6:f4:c3:3e:
7a:5a:87:40:f1:c7:5f:3e:ce:1c:22:a2:38:1b:4f:
96:4b:c9:0b:8e:67:d9:0d:03:00:6f:f5:f2:c1:87:
9a:06:e0:2e:0d:d8:c0:20:60:6d:db:64:b4:18:51:
7d:a1:a3:24:4c:5f:d5:16:06:78:ab:4c:f9:4f:59:
cb:1b:14:5b:be:14:70:68:10:55:cd:5f:09:e3:69:
a1:95:43:da:44:d8:0d:ec:ce:5f:fc:72:c8:c3:48:
74:50:9c:e7:c0:05:60:ec:53:90:18:16:d2:c8:e8:
a4:c8:4c:11:cc:16:4b:07:62:64:0d:f9:62:c5:0d:
cf:84:b2:16:c1:4e:52:b7:42:f1:c7:55:f6:7d:12:
cb:ea:8f:8c:23:3c:6d:63:9b:53:09:73:ad:ec:fc:
c4:29:f6:e6:1e:23:fb:4b:f6:03:51:ef:6d:e2:02:
ec:04:96:08:08:af:62:5b:2e:c2:be:21:70:fb:cb:
03:7f:e5:10:43:a3:23:d3:1d:8e:d4:4d:23:45:38:
8c:1f:53:4a:89:31:ac:e4:92:93:54:c9:ee:79:84:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:97:A7:C4:42:7A:63:44:42:B8:88:B6:0A:EA:0F:59:95:1D:FF
X509v3 Authority Key Identifier:
keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8e:96:fe:72:80:25:87:71:54:9b:a4:13:2b:f6:d4:09:8e:
b0:3d:5f:5b:3e:46:ce:ae:34:9b:d9:22:5c:7c:bb:2c:a6:5d:
40:85:1c:fc:33:89:cd:aa:8e:79:80:1f:a0:48:75:50:d2:be:
41:c1:80:28:d8:26:4d:18:30:46:1b:31:d8:53:e2:67:f0:3a:
b7:11:b6:60:47:aa:f0:b1:8f:6e:4d:28:4e:0e:9d:51:db:5a:
a9:e3:4a:a2:bd:ce:c3:3c:a5:8f:02:c0:25:6c:e6:bb:2d:bb:
26:27:d5:65:4f:37:b7:d9:03:89:4e:b4:9e:c5:aa:e2:cb:09:
a2:0b:ea:3c:c1:97:ee:02:ec:31:86:bd:ce:be:6e:d0:f0:3e:
21:16:ab:72:d6:e0:a0:71:f8:c0:da:05:a3:50:e4:85:2a:51:
7d:e7:80:71:2e:ce:47:91:b7:41:7f:7c:b2:22:7f:62:e0:ea:
5f:b9:6e:38:9c:23:b7:96:bd:1c:43:6a:9f:4a:d0:7c:a5:ef:
2a:e5:7b:e7:72:85:d4:36:f5:26:b2:2d:58:35:58:6e:2b:43:
05:82:06:57:48:72:57:5e:73:18:bc:1c:44:eb:aa:08:18:f1:
62:05:b2:ff:56:83:1d:e3:e4:79:15:3c:b4:33:95:f0:99:4d:
2a:e2:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:16:03 2025 by rpki-client