Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: 1e/0A6jJJzM3CmmqLn1BMB5QXxA0MoZdTiRuyADywWA=
Subject key identifier: 78:9B:61:EA:64:B9:2A:D7:5A:CB:F7:B5:E5:54:80:B7:43:7F:B6:1C
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019A5451B19EDDECF12FC4F3E8F8EE5CD817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 06A8
Signing time: Wed 05 Nov 2025 14:00:31 +0000
Manifest this update: Wed 05 Nov 2025 14:00:31 +0000
Manifest next update: Thu 06 Nov 2025 14:00:31 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: 5sBt3/MrP2TDF5UbLiHd/hik9V79W7KGoR9BJvSiwpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:b1:9e:dd:ec:f1:2f:c4:f3:e8:f8:ee:5c:d8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Nov 5 14:00:31 2025 GMT
Not After : Nov 6 14:00:31 2025 GMT
Subject: CN=789b61ea64b92ad75acbf7b5e55480b7437fb61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:97:92:78:4b:d6:4e:94:84:dc:c1:e1:76:
58:2b:cb:f4:ee:08:79:8b:71:d9:8d:59:8a:64:98:
61:e5:c7:57:18:f8:2a:0e:d5:65:95:2d:19:a7:32:
d3:ab:62:c8:87:3b:76:78:4e:76:d4:fc:e8:42:13:
0f:77:f7:81:42:c7:eb:4a:5e:15:2e:4a:2d:02:d2:
3a:ae:e8:eb:ff:03:3a:aa:99:9d:25:23:57:ef:c9:
c8:9c:5a:8c:08:be:48:07:4b:c9:a5:51:56:62:21:
30:66:56:d4:2c:68:ad:87:84:8c:b4:5f:35:f6:81:
43:d1:11:62:6f:d3:10:94:4d:d1:3a:55:1c:7c:f9:
8d:96:c3:6f:0b:8d:f7:28:ed:1b:09:13:33:dc:1f:
3d:03:f7:9b:09:46:61:43:31:52:b2:eb:35:f9:ba:
48:52:e9:a0:f3:67:cf:0e:48:64:5e:e9:2a:e6:bd:
85:a3:ee:33:93:11:86:52:b7:3d:66:a4:8d:c2:f3:
18:9c:c7:ff:12:73:be:6e:3a:af:70:0f:0c:52:5b:
84:50:eb:fe:a5:7f:6b:85:0f:b3:83:31:b1:14:43:
1c:6a:71:ef:2b:38:c5:83:eb:1e:ed:e9:a5:eb:68:
2a:f4:cd:66:b1:e7:e5:ac:fc:83:e9:c2:00:0b:1b:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9B:61:EA:64:B9:2A:D7:5A:CB:F7:B5:E5:54:80:B7:43:7F:B6:1C
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:68:65:1b:01:a2:08:32:8c:13:ac:d1:1a:8a:1a:6a:82:07:
be:e4:94:0b:d2:0d:e0:87:59:08:9d:60:67:9e:2f:7a:8c:b3:
d4:1a:26:05:ab:44:64:2b:b4:3c:77:b4:cd:65:0f:f7:94:21:
11:5e:b9:5a:84:25:a2:79:17:fb:ea:ce:37:30:31:d2:d5:2d:
78:87:b5:41:9c:76:41:24:87:ee:19:d7:cb:7d:94:5e:87:01:
74:ac:fd:f6:a4:04:f5:7c:e5:92:90:44:1b:e4:58:24:95:eb:
d6:a0:b9:41:4a:1f:5e:15:bd:f5:cd:d5:7c:cb:0d:70:df:3b:
82:2e:4b:e6:bc:c8:1c:46:fd:7d:8b:52:cd:67:39:4b:a0:41:
69:a0:e9:1b:c0:83:8a:56:62:8b:37:ba:9e:9a:7d:f3:71:6c:
34:5c:30:1e:8a:f4:53:f3:0a:bf:ab:05:33:ed:08:ae:53:47:
18:8b:8b:7d:b3:d9:12:9f:01:a6:45:12:c3:13:17:a1:92:b5:
9b:19:85:9c:87:1b:73:21:75:94:0c:ee:19:f5:17:5f:8a:9e:
05:6b:89:9f:83:0f:61:a9:c5:ca:a6:4b:bc:e0:6e:72:6f:ce:
2a:06:84:ed:50:1d:39:fe:f6:0c:7b:e4:5b:e8:ee:d2:2c:01:
d3:3c:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:10 2025 by rpki-client