Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File: uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier: XiwrrxqTazX0I9flY+aTSMWK5+OfU09a11YZH2anQNU=
Subject key identifier: AF:95:9A:8F:D5:1F:9B:70:32:C6:DF:2D:E9:6A:92:3B:6C:CF:23:DE
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 019A4E18E4F152034B8BF587A476037CB6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number: 13A7
Signing time: Tue 04 Nov 2025 09:00:45 +0000
Manifest this update: Tue 04 Nov 2025 09:00:45 +0000
Manifest next update: Wed 05 Nov 2025 09:00:45 +0000
Files and hashes: 1: Qzb63e7PrJpZnvdh_5KRROvhZ1c.roa (hash: NrGLLIb4hN1ItaaNKC1Rm9N6KTQQi8aKbLrok20ftwo=)
2: Yfhum0KNh2Gnj-D225eaegSifek.roa (hash: hFj3F+5EFPAfEmBnLkE+pwBV9YPDAjNKfqWc9k7TK2Q=)
3: fdkJ1crdoZsVaQKYKpliE3h8Iic.roa (hash: Fggk+Z3eXTA4oA3FRp2fifMQA6RQjXgkjXvgKh+G64U=)
4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: 0IaAkCl6njT+pqmWfSXzGdF2ka3MV5aYxmjYjRWL6mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e4:f1:52:03:4b:8b:f5:87:a4:76:03:7c:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Nov 4 09:00:45 2025 GMT
Not After : Nov 5 09:00:45 2025 GMT
Subject: CN=af959a8fd51f9b7032c6df2de96a923b6ccf23de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:61:84:e7:a7:a8:1c:8a:74:d6:2a:3e:e8:
99:32:51:7d:c0:71:e0:89:5e:8b:af:1f:7a:9a:c4:
19:df:cd:18:0d:e9:9e:68:f0:7d:9f:75:a7:56:40:
db:0d:32:c1:b1:7b:54:fd:9d:1b:3c:8d:82:0b:4e:
ce:8e:2c:c0:12:12:2f:78:ee:cf:00:d8:62:ee:02:
43:15:7b:a7:0b:63:0c:10:19:95:15:75:a8:25:d8:
58:05:f5:ff:71:96:fe:9d:a5:d3:0e:6a:5f:a9:be:
b5:84:ea:d5:20:81:17:4c:be:74:82:e6:26:a2:33:
f5:eb:fe:f6:e5:76:1d:24:4c:e9:8c:ca:a7:f3:44:
f7:be:49:3e:79:57:2b:fd:bf:a7:ef:ee:b8:79:87:
b4:cb:8a:68:f0:98:54:48:f4:dc:22:e3:9c:1d:cc:
cb:ad:5e:39:0c:ba:ff:de:79:71:f0:8f:4d:bb:4f:
6b:d9:0b:7b:f9:bc:75:95:b4:84:0f:73:7e:9a:a2:
c0:05:14:da:be:92:d3:d0:db:66:c0:0c:16:d3:10:
20:b6:91:03:b1:8c:9e:b8:bc:66:e4:5e:40:f1:d4:
5e:12:13:4a:3a:d6:b2:2c:0e:87:1c:c5:cf:78:8f:
42:12:d6:c7:fa:d5:15:41:b1:0c:8e:a5:33:41:bb:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:95:9A:8F:D5:1F:9B:70:32:C6:DF:2D:E9:6A:92:3B:6C:CF:23:DE
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ba:77:92:7b:1b:32:ab:67:ab:2f:06:49:5e:87:64:6a:87:
07:23:3e:2c:f3:d6:c9:ef:6a:ea:fe:4e:4a:f1:df:b0:1a:11:
f3:ae:96:b1:5f:5c:1c:53:54:5e:4a:2f:9b:59:d0:c0:91:46:
cd:09:19:99:67:23:7f:07:7a:a0:3e:1c:89:e1:0b:4e:ee:b4:
99:d5:32:60:eb:7d:14:7f:6e:e6:4f:2d:b2:51:67:41:34:52:
af:36:c7:bd:bd:83:3c:f7:e6:64:c9:26:c1:4e:d6:85:b1:c2:
b6:51:4a:15:aa:72:29:5b:b4:77:47:b1:83:0f:3e:ed:cc:cd:
a1:66:c4:8c:39:db:d2:cf:9d:34:16:9b:c5:ed:cd:3d:4b:11:
99:dc:22:65:7f:4c:d5:40:19:7d:b6:37:fd:8d:7b:dc:89:e4:
19:5d:f9:5f:ac:72:45:ef:35:6f:67:e4:a7:e1:81:63:89:51:
2f:c2:4b:73:d5:db:4a:07:da:41:f5:19:b2:d3:e0:3b:70:5e:
1b:68:f3:67:88:3b:41:24:dd:c2:bd:4d:a6:b8:85:7e:e6:87:
6a:cd:47:d4:a2:26:4d:cf:cd:69:44:8a:89:3e:d2:42:af:5c:
4e:0b:ef:f2:3e:a0:eb:55:81:fd:86:07:20:c1:3a:12:f6:a4:
25:59:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:44 2025 by rpki-client