Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: LtlAG5nh2h/OTlrY2EuzhGVDjBPN1Ocp50Qn5incVNM=
Subject key identifier: 04:20:7E:8D:4B:12:E6:1F:DA:91:E6:F5:44:00:B1:63:0B:3A:E4:55
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019A51BECFCE5625A204BD0C59552B82C64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 065A
Signing time: Wed 05 Nov 2025 02:00:50 +0000
Manifest this update: Wed 05 Nov 2025 02:00:50 +0000
Manifest next update: Thu 06 Nov 2025 02:00:50 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: TNBEYrKwPHh19VI3uA168/KI9A/g0y+Hxwm4LWKvWTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:cf:ce:56:25:a2:04:bd:0c:59:55:2b:82:c6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Nov 5 02:00:50 2025 GMT
Not After : Nov 6 02:00:50 2025 GMT
Subject: CN=04207e8d4b12e61fda91e6f54400b1630b3ae455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:ec:67:fc:d1:0d:44:d2:58:75:42:ba:53:
f0:ac:c2:36:10:01:2a:36:a5:23:7a:18:9b:5c:f4:
79:9e:b9:08:94:c1:7d:18:91:03:09:4e:9d:8d:74:
d9:94:84:68:53:a0:ca:a1:40:35:39:90:ea:91:80:
92:f0:54:db:c5:12:1c:34:3f:a9:22:dc:14:16:55:
15:73:6d:1a:41:c0:74:79:fe:66:ae:ff:1f:3f:ed:
1e:64:bc:3a:f1:30:e3:b9:1a:58:cb:a0:35:83:e5:
eb:89:07:ab:69:3f:7b:ff:f0:69:b6:50:af:1e:6b:
10:d4:f2:a0:d1:ff:2c:84:77:7e:0c:38:f3:57:2e:
c5:02:0d:e1:41:eb:2d:38:c5:db:ba:9b:36:3b:c8:
bb:ec:ca:7b:86:42:8e:fe:8d:93:b6:17:63:af:27:
15:ab:f8:11:30:3b:0b:dc:c9:b7:b6:6b:fd:36:41:
02:08:5a:18:cc:eb:04:87:9e:7a:1a:9f:73:a7:71:
07:7f:b0:0d:96:8d:01:21:80:68:de:e9:7f:53:e8:
62:ba:5f:c5:25:60:0d:62:b9:1d:23:d7:00:56:64:
49:ac:c4:7b:33:02:96:5c:91:54:70:8c:87:ec:76:
69:20:c5:53:86:e9:2a:e4:85:b0:c4:6e:f0:da:52:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:7E:8D:4B:12:E6:1F:DA:91:E6:F5:44:00:B1:63:0B:3A:E4:55
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:96:a1:61:1e:5d:82:94:23:a7:6a:54:99:32:b9:62:7d:5d:
31:25:4f:40:11:47:45:a3:b8:4d:ee:d8:31:f9:6e:d9:50:6a:
a9:22:65:d0:03:28:72:24:1f:3a:f8:86:12:d7:0e:c0:7c:27:
69:ae:d1:e8:3c:41:b3:59:ea:65:28:0a:34:14:d3:01:2d:34:
2e:34:ad:d1:e7:f5:44:69:6b:c4:6f:96:38:c0:22:d4:02:0c:
52:e8:ca:ec:2b:f3:9d:3e:2a:bc:f5:6f:15:c9:cc:d8:6b:4c:
0d:4f:1b:40:a9:34:2f:f9:83:e7:4b:a0:22:72:7a:e2:24:89:
f8:f6:25:dc:06:e6:2b:d3:5e:6b:0a:15:c8:1b:c7:46:80:76:
87:28:9b:fb:da:33:79:74:bb:64:a7:7e:00:68:09:ce:7f:9e:
ba:6a:7c:43:26:1a:9d:0f:39:a0:4b:33:f4:c7:b9:70:7e:4a:
86:fa:e7:e8:d8:d7:7f:39:e9:8b:46:01:84:c3:b0:fb:46:a6:
b4:ae:54:9a:f5:bb:2b:65:55:08:95:fb:19:88:32:39:67:f9:
49:ba:bc:5f:cb:0c:74:87:f5:fb:de:17:8f:15:a5:5a:de:6d:
4a:46:cd:01:fb:f7:6a:ed:1b:a2:c4:5b:1f:b1:22:ad:f8:05:
46:5a:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:52 2025 by rpki-client