Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: xohGn5dAoa4ONw3Q0cDBHVKFGofUY+g9XW05+zKDqA0=
Subject key identifier: AC:97:79:57:B0:05:20:08:07:E5:05:F9:67:30:5B:AA:B2:C7:7D:1C
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 019A4DE17856133225D0878E39093E2E4B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 0552
Signing time: Tue 04 Nov 2025 08:00:13 +0000
Manifest this update: Tue 04 Nov 2025 08:00:13 +0000
Manifest next update: Wed 05 Nov 2025 08:00:13 +0000
Files and hashes: 1: it3O4g-6t2GKwBhtRxAFjpp2SvY.roa (hash: 6eR+wfC4pWL2ywDfa9Z6bWTmVRPOQRYu4dmBh0Zgz+o=)
2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: GiMsGXm/XQdEf5luPULrDc7qE1Wn3ns+I428mJ1BW04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:78:56:13:32:25:d0:87:8e:39:09:3e:2e:4b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Nov 4 08:00:13 2025 GMT
Not After : Nov 5 08:00:13 2025 GMT
Subject: CN=ac977957b005200807e505f967305baab2c77d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:90:f8:8d:63:59:63:f6:d9:3c:e6:4c:85:
5a:95:66:8b:16:3d:bf:12:94:6d:46:88:cc:dd:d2:
cc:9d:ed:d3:21:05:f5:45:dc:4b:28:5d:0b:17:1e:
58:52:d6:36:96:cf:42:70:e5:2d:1f:5b:5e:6e:7d:
2a:28:21:9f:a2:5c:9b:b6:69:66:6a:d7:7f:4f:53:
00:f0:fe:b5:84:4c:be:02:b5:19:25:36:cd:97:3c:
7c:c2:5d:a6:38:26:fc:b6:9d:d4:51:7a:c7:b4:03:
f7:a3:6c:1b:64:fb:aa:7b:86:35:ac:10:90:38:82:
02:aa:b8:df:7f:b9:5e:7b:ad:7f:71:9d:77:1b:ca:
43:11:48:0b:d2:92:6c:6c:85:8c:5e:d9:2f:06:32:
76:9e:42:81:38:26:76:a6:6b:81:50:19:93:f2:45:
30:7a:08:37:3e:ba:10:7b:02:ad:68:75:49:57:7f:
04:fd:3c:97:88:1e:ea:bd:89:ce:e1:c8:d9:a6:99:
cf:37:96:06:0b:01:e9:f1:47:47:a8:f1:43:31:7d:
42:9d:da:22:77:6c:e3:7f:1f:64:7e:66:4a:67:0f:
9c:c3:a8:91:a1:37:3c:a0:73:13:fd:02:0f:bf:87:
32:6d:f5:45:20:8c:89:95:8d:2d:3e:4d:42:e3:61:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:79:57:B0:05:20:08:07:E5:05:F9:67:30:5B:AA:B2:C7:7D:1C
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:01:09:f7:c4:cb:42:d3:86:6e:ee:fa:1f:4e:ee:1b:6f:
85:65:bf:0f:2a:c3:8f:78:ef:11:23:e8:7a:54:4e:6c:51:49:
9d:94:7b:76:d0:ba:18:ce:12:a7:fd:d2:68:26:8a:e6:c4:69:
3d:f7:54:a4:d9:25:2c:81:8d:3a:8b:56:99:4f:6a:43:24:ea:
c0:68:7c:c4:50:85:db:1d:a5:a4:fc:ad:cc:47:60:f9:ea:66:
84:ef:08:e1:ef:58:a7:8e:97:4e:1f:38:f7:72:b9:00:54:39:
46:ae:89:e4:4b:58:b2:c4:16:6c:43:8c:2e:61:76:48:c9:80:
3e:d6:3e:c7:e1:98:f5:dc:09:2e:15:02:e3:af:fd:3f:98:b6:
db:12:d4:e8:34:75:18:b6:b2:6a:fd:a3:6f:fa:d5:53:22:6c:
13:6e:c5:97:35:37:67:01:29:2e:02:79:c7:f3:99:ea:00:f7:
10:b7:1c:22:5e:17:9c:05:89:35:da:ea:39:ad:1d:ae:39:74:
4e:8e:c3:b4:56:f2:87:00:bb:10:20:76:94:c8:86:5a:6b:77:
c8:08:8e:5d:db:d6:6c:9e:f9:c2:51:01:bc:9a:d3:dc:89:c7:
13:35:98:35:ae:5c:1d:c4:bc:a0:4e:de:f0:7d:12:de:5d:45:
37:a1:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:14 2025 by rpki-client