Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier: wL0Ui9qu9MZPeZtk9jU2ZugN0GloQ+qhiyOpLE66Ro8=
Subject key identifier: BB:31:6B:19:F9:CF:01:A3:C2:46:F4:A3:1B:20:F4:7A:C8:B9:71:CA
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial: 019A537608C4AADB70ECE181591134E69128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 10:00:35 +0000
Manifest this update: Wed 05 Nov 2025 10:00:35 +0000
Manifest next update: Thu 06 Nov 2025 10:00:35 +0000
Files and hashes: 1: e4ClDxZZC-HgzfD6jjAt7w6H7rI.roa (hash: s/lm7kNCD/Mf0FKczgw09MeHHAa4AoL+4qjfAKGabq0=)
2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: H2FKq4grm4p7kOBMx6M3x9RsMK3zuL8R4ZcS8sPpzQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:08:c4:aa:db:70:ec:e1:81:59:11:34:e6:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Validity
Not Before: Nov 5 10:00:35 2025 GMT
Not After : Nov 6 10:00:35 2025 GMT
Subject: CN=bb316b19f9cf01a3c246f4a31b20f47ac8b971ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:25:34:bc:bd:3e:41:02:58:23:be:95:63:
15:ac:66:89:52:91:25:d7:53:dd:05:df:73:db:be:
50:fd:43:d9:a5:51:e7:76:b5:35:d6:06:66:74:8e:
81:f0:bf:d2:78:d3:97:bf:bd:1c:ef:9f:96:8b:32:
69:56:37:8c:7e:b5:d1:33:3d:6b:3e:4c:c3:b5:9e:
d5:a4:74:d1:34:42:5d:5f:48:30:5e:48:77:0f:0f:
c4:bd:cb:a2:9f:a6:93:a6:ef:d5:0c:26:81:3a:8d:
b1:1f:f0:c9:43:eb:b5:59:8e:94:aa:13:3b:9f:26:
32:16:5d:b5:a8:8a:2c:e9:77:eb:e3:89:cd:58:96:
fa:46:60:cf:55:1d:bb:b3:bd:c5:98:46:db:d9:a6:
f9:69:38:28:34:ac:2a:bb:86:b1:6f:e6:1f:58:5a:
17:6c:74:b2:5d:70:70:7e:b7:25:a4:2b:c0:71:ef:
64:6f:3a:58:f8:e9:80:f5:e3:23:ab:75:f0:25:e4:
c1:aa:c8:d6:7e:dc:db:a0:1e:82:7a:e7:de:4c:05:
1c:5f:4d:f0:57:82:5a:fc:1f:0d:37:26:11:28:49:
d8:08:a9:d4:93:70:79:7b:7c:68:89:38:25:a4:44:
6f:cb:d7:99:db:a7:73:13:f4:f6:6f:91:3e:fa:19:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:6B:19:F9:CF:01:A3:C2:46:F4:A3:1B:20:F4:7A:C8:B9:71:CA
X509v3 Authority Key Identifier:
keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ec:b5:8f:80:62:67:40:51:ca:ab:cc:10:65:b3:7c:4c:6e:
63:c1:39:7d:1a:ed:ac:c2:d8:60:82:1d:d5:db:74:17:12:32:
b0:b2:68:3a:be:dd:a4:30:6d:68:3e:d5:63:7a:ce:46:ce:2d:
e9:ee:f9:66:6a:79:80:9c:a3:67:e9:01:42:fc:b1:a8:36:2c:
24:2d:88:ac:8d:ae:91:52:06:2c:ae:35:b7:09:c3:a0:69:3f:
3f:b8:b0:56:17:f6:74:40:01:e8:b7:18:dc:b6:d6:78:38:61:
5d:f3:86:58:2b:3b:e9:46:81:28:67:94:05:09:9e:89:b1:03:
fd:cd:ac:18:ed:a8:dd:4d:2a:40:15:6b:fa:e5:bd:6b:7f:9a:
b4:4f:9e:1e:71:80:34:05:96:95:e4:53:12:c6:be:b9:40:66:
22:83:36:e3:f8:cb:2d:8a:d8:e0:06:d1:a8:64:1f:9d:19:7b:
7b:53:33:0d:8c:0b:44:c3:cb:8a:fe:ea:e9:46:45:92:4f:fd:
46:c8:6f:2b:06:26:aa:8f:fc:97:66:90:21:6a:9a:69:70:ce:
24:f6:46:17:a8:8f:27:97:b2:f0:0d:6d:fd:13:5d:2d:fc:91:
7a:6c:2a:1b:32:4d:76:37:2b:22:c4:c1:79:60:86:4a:6e:0a:
3a:cf:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:42 2025 by rpki-client