Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
File: uBVaw0tuwV8iaumRPWrs_KenhNQ.mft (raw, json)
Hash identifier: zIzV7T9EWRnU2/vUH15EfIdJbnD4jVbjCXSeXpVxubg=
Subject key identifier: 8C:24:79:5F:05:18:A2:72:14:77:FC:01:98:59:1D:A7:E7:54:2B:8F
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial: 019A51BE29E84B70ABA27FA62EE8AA8BE0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:00:08 +0000
Manifest this update: Wed 05 Nov 2025 02:00:08 +0000
Manifest next update: Thu 06 Nov 2025 02:00:08 +0000
Files and hashes: 1: Bd62smJ1C-edCl13IR0Hb5ZPh3I.roa (hash: D8e7F2pk9nxCBOMnmY0ESYCk1Qvc2+eZhlAJre7/lXk=)
2: glpdHMRUe--_MG3TqcToADTZm2g.roa (hash: nYyFnTdPiSLG8Bu+HPTjJb4kOHlPj2DnjVnWwqRkp6Y=)
3: uBVaw0tuwV8iaumRPWrs_KenhNQ.crl (hash: 47J0aqaMuwPflTwKmqWQEuTGZsvBFy6ONzilNHSVEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:29:e8:4b:70:ab:a2:7f:a6:2e:e8:aa:8b:e0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Validity
Not Before: Nov 5 02:00:08 2025 GMT
Not After : Nov 6 02:00:08 2025 GMT
Subject: CN=8c24795f0518a2721477fc0198591da7e7542b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:b9:94:ea:dd:08:bd:0c:a6:58:51:52:14:
22:01:26:b2:ea:90:39:76:17:73:3d:2b:24:a6:5b:
76:14:56:87:06:21:a7:c2:1b:97:99:09:4c:4f:94:
c7:fd:c4:de:42:20:61:7b:84:35:69:e9:eb:7c:2f:
52:9d:b1:9c:97:78:0b:12:ce:80:46:bf:4c:ab:7c:
d7:8c:be:06:c8:15:a7:26:ff:bf:fe:70:da:01:ec:
82:15:3b:60:51:e2:52:59:88:74:db:bd:78:17:95:
1b:24:b4:5d:9f:5a:65:2f:c4:e1:74:84:79:01:30:
9d:48:43:3d:37:7a:ca:d1:bb:be:39:a8:94:9d:f0:
b8:a7:6e:2a:31:3b:32:82:72:02:a7:d1:59:1c:e5:
31:7b:50:42:47:84:2f:e6:e0:07:cf:14:a0:3c:be:
85:a1:33:5d:d0:64:d0:0b:c0:18:75:f4:fa:df:ef:
bf:47:b5:3a:62:be:d6:1f:7f:7d:fd:d9:6c:3e:40:
e3:51:cb:42:bf:ca:ab:39:62:20:e6:73:5a:51:0c:
75:9b:b8:57:bc:4c:9f:e8:b6:b8:1a:53:b1:49:29:
86:23:03:d8:b2:9c:09:0a:85:3e:e4:40:2c:9f:ff:
6f:a4:db:9b:93:ab:80:ad:46:86:54:e7:9a:11:18:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:79:5F:05:18:A2:72:14:77:FC:01:98:59:1D:A7:E7:54:2B:8F
X509v3 Authority Key Identifier:
keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:6e:ab:1b:a6:a2:0e:b8:80:75:f9:26:a5:7c:a7:90:e6:
c6:ad:07:27:b4:bf:13:8e:1f:26:a6:da:05:78:21:d9:66:e8:
ee:cd:a2:3f:24:7b:84:05:d6:0b:39:d4:b5:a7:47:d7:be:d2:
16:67:94:f6:08:99:93:9e:d8:f7:0e:82:4d:6d:ec:fd:99:49:
80:1c:21:03:33:57:a2:29:f5:dd:c2:d0:ba:bc:18:c5:31:00:
e1:02:03:48:bc:ea:04:a6:25:08:e9:87:fb:1a:b1:42:1d:10:
15:33:03:05:83:64:68:d2:aa:c5:29:6e:db:a2:92:2a:40:45:
b6:4f:53:1e:b5:c1:c6:3f:a0:bb:55:93:95:c8:2e:8c:23:e4:
a3:92:03:4d:0c:46:cc:4b:7b:06:a9:c8:7a:c1:89:a0:50:b4:
d9:d7:08:94:28:e9:8e:ec:ef:b5:c7:43:44:2e:00:23:14:40:
ca:2a:c5:4e:77:34:99:b9:ea:83:8d:4f:bc:dd:83:0e:0b:2d:
e3:3f:38:d4:23:cb:90:be:fd:b1:b0:4c:c0:a4:d5:95:76:0b:
46:ff:23:3b:a5:de:d8:94:1e:36:15:e5:46:77:dc:4b:64:fe:
4b:a0:1e:84:90:19:5d:3e:d3:25:eb:ba:93:2d:2a:a9:58:4e:
88:13:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:35:20 2025 by rpki-client