Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: YZSxn4ypeNFtx2pecJD1YO6sitbALHBjQHa88783lNE=
Subject key identifier: F4:7D:9D:9A:30:90:0A:C5:29:12:B3:01:14:97:B9:EB:55:AA:62:BC
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 019A4D060BBF23F0635ACB3B70D028B1CA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0B84
Signing time: Tue 04 Nov 2025 04:00:33 +0000
Manifest this update: Tue 04 Nov 2025 04:00:33 +0000
Manifest next update: Wed 05 Nov 2025 04:00:33 +0000
Files and hashes: 1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: AO/Wdv9P81NrLH5BUonajW5/Es1i62ikU0147JrCQFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:0b:bf:23:f0:63:5a:cb:3b:70:d0:28:b1:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Nov 4 04:00:33 2025 GMT
Not After : Nov 5 04:00:33 2025 GMT
Subject: CN=f47d9d9a30900ac52912b3011497b9eb55aa62bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:55:b6:39:a8:1d:c8:8a:71:08:3f:71:8e:
a9:d9:a8:6d:fe:7d:0b:a6:c4:1d:b5:1e:6f:3d:37:
75:61:d4:cf:08:aa:da:2f:b3:d6:60:be:90:99:c2:
8c:68:8d:e8:4a:f8:c6:96:8b:7e:cd:b0:49:50:a4:
8a:ad:f4:7e:da:3d:af:1e:d5:ce:57:63:62:82:bb:
15:f8:88:72:ee:96:47:b5:e5:8a:8d:df:f7:08:10:
11:60:8b:bc:13:68:54:85:8f:21:2c:cd:76:dc:d5:
7c:28:6a:ee:02:fb:a3:f6:a0:89:79:8b:dd:4b:b6:
95:4e:9e:89:dd:69:98:2b:3e:5d:ab:d0:34:47:51:
dc:49:53:3d:6e:11:8b:aa:3e:e7:b3:c5:8a:89:bb:
ce:a8:06:1f:23:04:12:b9:0b:ac:8b:df:7f:04:77:
d0:30:e4:6d:bd:c9:e1:df:b2:7b:58:8e:37:cb:6f:
c1:20:91:98:14:d8:fc:3b:1b:32:a8:64:50:54:89:
cb:99:e7:e1:e1:aa:23:16:d7:8a:32:31:a4:3e:d4:
e0:30:ac:af:af:f0:4e:eb:ab:a1:69:80:d5:b0:25:
0c:b9:70:6b:b1:cf:45:d8:16:29:9c:f9:bd:86:d3:
04:19:70:61:f6:f6:a8:65:99:33:81:59:f6:53:b2:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7D:9D:9A:30:90:0A:C5:29:12:B3:01:14:97:B9:EB:55:AA:62:BC
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:07:22:8a:18:f4:2f:4e:5a:9f:10:16:54:b5:37:8c:95:95:
f6:b0:40:5c:4d:d3:ea:ed:44:c6:fe:f8:15:05:e5:7e:cb:65:
fb:35:af:52:4e:6d:60:54:b0:e6:16:d7:2e:86:f2:dd:7c:fd:
cf:77:5e:ee:64:fe:e2:48:b2:cf:63:10:42:6e:39:a9:cd:e4:
4c:87:ad:9a:ba:7f:3d:ab:f9:49:98:61:d6:d3:d7:cf:64:98:
49:6c:7d:0b:c8:c3:6e:fc:33:4e:09:fe:b7:a8:53:37:94:0c:
d5:af:5b:b3:c7:01:89:94:ca:1d:95:19:97:b2:f3:cb:70:4c:
58:1b:13:2f:96:34:64:42:4b:85:13:7a:31:31:9e:e4:92:a9:
6e:da:19:92:5a:4b:55:8c:be:a5:79:47:16:4e:64:4b:ab:7e:
31:24:40:3e:84:b1:f3:39:26:a0:d8:f3:20:0a:10:95:ea:e8:
26:c1:f2:ce:c0:4e:58:80:7d:91:32:1a:37:a5:b6:c3:3d:d7:
0f:d6:f3:e1:12:a5:16:fa:74:42:b3:a4:2b:44:bb:0a:49:8c:
68:93:87:1f:6a:79:c7:7d:c3:97:a1:5b:42:86:a1:82:40:c1:
5c:cb:d4:28:64:97:1d:a5:0c:e0:e9:3e:fa:fa:57:6c:26:6d:
04:07:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:36 2025 by rpki-client