Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
File: uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json)
Hash identifier: Etj0TXB7MbhSaZ6kMP6I6IFPkxgNUgyxFAU43iXKUR4=
Subject key identifier: BD:FD:DD:78:04:BD:EF:8A:10:CD:11:6C:C3:5B:DB:1C:EE:18:A0:E6
Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
Certificate issuer: /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Certificate serial: 019A4EF418B1A3BE71B0200D381D651C42B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
Manifest number: 0DD9
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: UEiFsCsSTC0Pg31Jp2WQ3gV01xE.roa (hash: ITQdPL8nWruiENBkvvq4/6T+xWub5wb4OWq1AfgZvKY=)
2: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: Cnx83FQYaI4FtT41CZ4Sd/jjFd7MLq6ed5sRahfxVr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:18:b1:a3:be:71:b0:20:0d:38:1d:65:1c:42:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=bdfddd7804bdef8a10cd116cc35bdb1cee18a0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:fd:43:da:35:b8:a7:53:17:d9:6e:47:ea:
20:28:55:27:b8:54:51:c6:6e:52:c6:7f:42:44:4d:
c4:e3:27:a4:89:a9:af:36:02:55:27:01:31:3f:4c:
60:a0:be:b3:3b:ef:e1:c0:75:6a:0d:63:81:5a:da:
ee:a8:e2:f9:24:ec:b9:20:42:f9:e5:6c:f4:2d:94:
b2:2b:80:f2:85:4f:7b:6a:a9:80:cb:05:76:82:67:
04:fc:8e:b4:78:1f:d2:3e:60:15:4d:3f:f7:a2:78:
31:59:08:df:0b:d8:9e:60:00:23:d9:06:ca:ec:1d:
2b:1d:e5:6f:04:41:6c:34:97:91:b2:bb:25:d2:12:
c6:6b:22:27:08:2e:1b:cb:98:e0:a7:63:40:f3:1a:
e7:b8:be:3a:13:2f:25:ba:38:2e:f6:13:44:2f:81:
bf:ba:6f:b6:da:07:32:b4:04:38:ea:2d:93:c4:97:
86:81:72:2e:ae:09:8c:88:a4:cb:e1:ea:dd:3e:13:
52:b2:ea:32:43:05:81:37:ac:73:a3:a2:6e:7b:81:
68:74:6e:64:59:f5:40:87:d7:d1:45:91:ea:87:d1:
4a:1c:4d:69:1f:1a:3e:bd:7c:3f:f0:6a:8e:1a:c1:
b5:ab:fc:6a:82:cd:d7:c1:35:0c:e2:16:76:4a:3e:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FD:DD:78:04:BD:EF:8A:10:CD:11:6C:C3:5B:DB:1C:EE:18:A0:E6
X509v3 Authority Key Identifier:
keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6f:98:b6:47:86:09:0a:5f:36:b4:b5:bd:77:98:a5:ac:4f:
f3:3c:29:1d:ea:b1:0a:7d:8d:67:6a:97:17:1e:85:5b:5f:7b:
66:3b:77:8d:48:7f:46:f7:d7:90:ec:de:1a:cc:57:60:f4:50:
e4:d4:66:ed:41:7d:64:66:03:8a:d9:75:37:a8:a5:17:24:88:
27:20:39:a0:31:c7:ff:a1:57:f6:f4:e5:a5:ea:23:6b:65:ea:
f5:e8:12:8d:45:0c:ea:69:a5:a3:45:9c:f6:1f:c2:2a:02:5b:
a5:77:7f:33:09:60:af:1d:df:15:80:28:b8:a5:84:60:b8:de:
91:f1:1d:e9:a5:72:9e:b9:4b:46:b1:4a:17:a9:8f:54:2e:bc:
ae:4c:ff:89:bf:9f:4e:92:27:ea:eb:80:e3:2f:ae:fa:2f:ad:
36:85:91:69:60:34:7f:08:cc:bd:48:97:ed:41:8a:9a:65:96:
33:53:17:79:a8:6a:78:8d:aa:22:f2:95:9b:71:c2:e7:b5:f9:
35:21:3b:de:53:49:8c:5b:e4:d6:57:32:ac:cf:5f:ab:d7:1f:
5f:6f:a0:54:08:22:1b:8e:d1:a8:4d:37:6e:3c:a4:89:1c:7d:
96:6d:df:18:7a:b4:ba:1c:56:3f:98:59:eb:cb:11:d1:db:06:
78:bd:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:41 2025 by rpki-client