Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: icWu9Y5N/Lqeu2vg3V4l/GyGGkUhVri5oLOon/N/bOs=
Subject key identifier: 48:A2:E1:87:AB:FF:13:36:02:D2:D1:82:FC:42:59:12:65:2D:A5:1B
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 019A4C618F161FFE18173352130B2A771D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 09C8
Signing time: Tue 04 Nov 2025 01:00:53 +0000
Manifest this update: Tue 04 Nov 2025 01:00:53 +0000
Manifest next update: Wed 05 Nov 2025 01:00:53 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: EWZN6PkYgGD+5btlnMBGDebvQ/wtQGXm/wyOzgnh9qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:8f:16:1f:fe:18:17:33:52:13:0b:2a:77:1d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Nov 4 01:00:53 2025 GMT
Not After : Nov 5 01:00:53 2025 GMT
Subject: CN=48a2e187abff133602d2d182fc425912652da51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:d0:33:59:15:43:1a:aa:07:39:c7:ac:55:
b4:5f:d1:4a:07:16:46:11:bf:d6:a5:2b:18:77:ad:
5b:ae:60:95:91:22:30:b9:f0:62:a3:fc:fc:be:bb:
3d:2d:1f:6f:4b:c5:64:e3:40:4b:de:e6:79:8b:b7:
85:f0:16:0a:e9:de:f5:78:24:3b:ef:b8:05:27:c5:
66:2d:04:0d:4f:56:b5:78:a3:80:1a:31:f1:9e:c6:
96:2f:c8:b7:aa:d5:fd:d6:ea:78:cd:bf:c9:cc:9a:
83:2d:78:bb:0a:4f:be:98:92:c7:4d:73:89:6f:97:
e4:ac:2d:4e:22:34:7c:4e:a0:47:e1:b2:a8:ff:26:
d3:42:c4:b9:ac:bd:54:3a:67:1f:2a:41:1a:2d:30:
03:8f:fe:8e:7d:01:c9:32:e3:d3:50:4e:84:8e:d6:
bb:f1:73:0a:d1:d5:d6:90:03:a2:46:fd:89:fd:59:
3a:cb:97:8c:9e:b2:0c:74:71:a1:cd:ab:b8:d5:6c:
72:48:4a:d2:c0:3c:ab:d1:df:d9:05:0a:8f:f4:07:
2e:c3:23:2d:0a:fd:fc:be:3a:b0:15:21:92:1f:8b:
24:88:e2:00:cf:2e:fa:75:61:17:de:23:11:c4:61:
03:72:62:c7:19:3e:2c:5d:97:92:da:a4:ec:7e:7b:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:E1:87:AB:FF:13:36:02:D2:D1:82:FC:42:59:12:65:2D:A5:1B
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d1:da:ab:6a:a4:79:80:e7:48:07:75:ad:24:91:5f:4f:67:
d0:4f:a0:a4:9c:43:01:5e:c8:24:a1:c3:c5:b7:5f:28:1d:69:
96:6f:86:00:8b:4a:fe:e0:15:65:93:33:82:2d:36:99:ea:60:
43:97:b6:41:5c:8f:ff:0d:ac:0b:46:8b:68:04:a2:13:c1:72:
04:8c:97:74:20:1d:b0:8e:1e:cf:53:e8:d7:71:78:a7:a8:4c:
29:ff:25:c3:9d:dc:5e:fd:b5:e5:8b:1d:79:89:f6:e8:7a:17:
cb:0e:97:ab:27:77:a8:1c:f8:b6:21:6a:90:94:97:e3:23:70:
28:49:23:17:5a:85:45:3e:fe:4e:76:3c:cc:6d:20:9e:d6:25:
7d:2d:5c:d3:05:d8:3b:91:1d:84:b8:d9:61:3d:65:c9:e6:68:
3d:09:31:e8:a7:4a:75:60:da:0c:46:c8:e1:ea:a1:28:85:54:
72:28:d7:a9:3a:57:6c:5d:e0:06:11:04:7b:da:18:9d:25:1c:
13:62:ab:93:6e:70:b5:0c:0b:0c:58:68:13:ef:2f:ef:ba:cf:
5c:6c:2d:29:a4:4e:df:6a:de:f9:67:77:3c:13:49:5c:e2:22:
1f:60:4f:16:b2:a7:b6:28:e5:5e:9c:ec:af:6b:0f:4a:57:8a:
82:cb:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:25 2025 by rpki-client