Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: i48cT8rjvTVuwqQCECVacfFUrVDfUcqiLQhH5N5qcRU=
Subject key identifier: 1A:4B:45:AB:BE:AF:B7:1E:B4:45:D4:58:58:9F:B1:5F:65:A2:70:63
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019A50749B32F022CC1D516C34DE049F356A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0D5D
Signing time: Tue 04 Nov 2025 20:00:10 +0000
Manifest this update: Tue 04 Nov 2025 20:00:10 +0000
Manifest next update: Wed 05 Nov 2025 20:00:10 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: 0CDIPUIxTT0YyD+ca5EK4mLdIniKsahUIj4X2VoDkRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:9b:32:f0:22:cc:1d:51:6c:34:de:04:9f:35:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Nov 4 20:00:10 2025 GMT
Not After : Nov 5 20:00:10 2025 GMT
Subject: CN=1a4b45abbeafb71eb445d458589fb15f65a27063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:fb:be:65:d1:81:19:02:d5:1a:d9:25:2b:
ee:6b:f4:ce:76:93:c9:4c:96:f4:aa:df:a0:d4:fb:
97:87:0d:34:d0:6f:35:c3:68:d6:7a:1a:b5:09:57:
56:01:80:ef:e7:a7:fb:bb:ae:18:a2:70:2c:a8:c6:
3a:00:48:8f:e9:82:61:3c:c5:9d:54:a5:dd:05:4c:
df:d9:8a:2f:f6:55:66:0d:d1:bf:0c:14:53:38:b1:
31:bd:63:8a:f1:a7:a4:dc:33:59:58:c2:7a:5c:3b:
98:73:ec:07:3e:0f:d0:1c:cd:47:06:9b:0a:33:da:
ce:60:f8:1c:ef:a3:a8:bc:be:c3:ed:60:30:44:20:
1a:6e:fd:ff:c7:12:c1:ff:d0:ee:51:1a:90:87:c2:
23:83:d1:fb:d8:28:06:11:6f:fb:fe:ea:1a:89:8f:
00:40:6f:bb:5b:f3:c1:de:4b:62:23:9c:72:f9:9c:
c3:a8:58:7c:5d:6a:e4:50:25:1a:2e:67:e7:f2:49:
53:eb:97:c8:fd:6a:33:b6:8d:d3:10:f4:67:cb:21:
6f:fd:56:cb:3e:b1:1b:dc:2e:07:4b:f6:11:15:b5:
6b:47:62:34:45:5c:49:98:26:fd:61:99:2f:32:70:
f9:3b:8b:2b:50:2f:98:c1:15:b4:77:a5:1c:61:20:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4B:45:AB:BE:AF:B7:1E:B4:45:D4:58:58:9F:B1:5F:65:A2:70:63
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c2:ef:21:29:80:97:72:00:81:58:6a:7c:7e:17:51:1a:1e:
14:34:3b:db:04:56:e6:04:3f:16:f9:0b:ec:f1:50:43:31:69:
6d:7f:a6:bf:c4:d6:e5:4a:0c:9c:31:c0:a4:ec:55:70:d5:aa:
69:62:28:6c:f5:0f:c3:17:08:ac:3f:fa:ac:61:55:15:2c:52:
4f:54:9b:a0:82:a0:ed:60:c2:46:fc:5a:d2:0b:d3:21:9b:a7:
53:d1:de:cf:a7:db:f6:0a:a4:5b:03:06:d6:01:9b:67:e2:29:
3e:52:19:de:43:df:42:e4:ec:87:66:3d:5f:2f:be:93:19:0b:
00:54:b3:e7:13:ec:3b:db:ed:2d:c9:56:74:26:0c:f4:4a:eb:
ae:46:21:8d:54:0f:37:e8:4a:09:c1:9d:03:14:3f:39:6e:6f:
49:12:dc:5b:7b:03:8c:be:de:64:6b:08:b2:9e:67:f6:5e:f8:
51:0b:01:fd:df:65:99:f4:1a:16:ca:aa:e9:09:f0:8a:44:37:
87:3a:39:82:79:69:92:4e:1e:d0:29:66:ee:42:4b:d9:04:cb:
e2:1c:79:80:12:93:53:c9:ef:cf:23:58:ec:a2:37:18:f6:a1:
2b:32:2e:dc:3e:15:8f:a1:29:92:34:37:c9:e1:a1:b4:0a:c2:
08:51:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:53 2025 by rpki-client