Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: /kzZnSlwAmIFpgOsIdTo0yroiv7+mKLR0LeY3CTkfh4=
Subject key identifier: CA:ED:69:7A:95:52:CB:41:52:6C:AD:CC:22:4F:85:30:3E:FA:82:96
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 019A4DE21AC675E266B9F522F82A6853DA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (hash: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=)
2: ft2mxf9aaNoul-AnIThMbBr-lps.roa (hash: xnKzHyjITrVDUs70AuSd+gwg5cbW8huGbxIys16mcfk=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: o4V5y1ZSIVzJombaeBmkVBrmrr+UHxj1n9EGK6w1iFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1a:c6:75:e2:66:b9:f5:22:f8:2a:68:53:da:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=caed697a9552cb41526cadcc224f85303efa8296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:30:d4:ef:50:00:16:4d:fa:ee:bd:68:10:
53:46:3e:e3:66:a2:39:65:17:95:0b:ff:13:c4:ad:
89:88:86:48:16:cd:0b:f5:09:95:1e:8d:7f:11:33:
3e:ee:31:af:52:51:d9:c5:67:f3:2e:df:ea:8b:2b:
36:61:d9:4d:24:2c:ed:27:3e:9c:da:1a:22:cf:61:
ab:bc:be:ea:f3:39:ee:93:04:6a:e4:24:39:a7:61:
e7:b6:ea:f5:f4:83:5b:b8:07:3d:20:48:a1:6e:7f:
13:32:89:21:83:9c:db:8b:1e:59:14:13:e3:17:60:
b4:16:33:59:0c:08:f4:98:87:57:50:13:1f:16:9f:
ea:b0:b5:fd:f9:6b:ae:17:00:89:89:94:b7:9a:6c:
34:7a:a1:a7:26:19:d1:4c:92:9d:d0:75:a2:39:af:
44:e2:88:12:42:4c:1b:7a:bf:65:69:74:63:e8:50:
63:5a:09:54:e8:25:3c:d5:24:9d:9f:c3:6f:c8:de:
f6:1e:4e:8d:b0:3f:ca:09:f7:1e:4d:2e:5b:8e:aa:
b1:bf:bd:9d:d8:c2:a8:7b:fa:20:be:c1:6d:a2:d3:
f9:93:fd:10:9e:f4:f2:13:cc:1c:5c:8a:a8:fa:d3:
09:17:0a:65:2f:8d:3f:9a:d9:50:7c:98:1d:d6:73:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:ED:69:7A:95:52:CB:41:52:6C:AD:CC:22:4F:85:30:3E:FA:82:96
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:81:4f:0e:f9:4c:c1:92:ac:b0:33:8c:f4:34:5e:32:e1:e0:
21:b0:70:1f:fe:aa:a0:a5:c4:ee:25:61:bc:1f:f5:32:d3:8a:
17:99:7a:a4:4d:67:41:cc:1e:8c:36:7b:79:09:3a:97:24:7d:
c1:18:55:3b:e2:e2:20:bf:37:c2:8b:48:82:d4:36:b5:46:9d:
e6:e3:28:f4:7b:e7:6a:8f:86:9c:7f:3c:a2:da:a1:84:11:16:
4a:72:e6:8b:bb:bc:ff:e6:8e:37:7f:75:8a:d6:75:40:df:50:
ab:8c:1e:aa:92:cb:02:47:26:7a:8e:37:ca:e7:16:67:56:df:
c6:6c:85:55:d2:0d:df:ba:30:99:28:0e:55:5b:51:4f:78:c7:
55:4f:a6:28:b7:7e:9b:98:b7:1a:0f:fb:f7:07:fa:5b:ae:8f:
9b:2d:a4:f9:e2:ac:2b:04:d3:21:14:9e:c1:50:88:f3:cf:af:
c4:97:8c:5d:0b:dd:08:44:d6:92:af:c4:0f:ac:e5:5c:6e:8f:
07:ce:d2:90:0b:2a:7e:62:32:cc:e7:95:a5:ae:d0:b7:e5:fd:
b7:20:1c:0d:18:0c:40:e7:03:78:1b:2f:aa:48:36:48:c0:82:
93:74:72:5c:30:89:67:e3:3e:5b:56:dd:3f:1c:56:d3:7a:60:
0f:2e:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:39 2025 by rpki-client