Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier: DvHmEBXcO4hpNVyC0B2zu1SRVYPLd425WcV2NGjpInM=
Subject key identifier: 94:C7:62:56:82:D5:A3:E1:0F:BD:9A:1D:94:DD:DA:CE:08:33:BE:EB
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial: 019A4DE16C7270628BD6CB7E79407C6DB1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number: 13BD
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=)
2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: VqAGgDBOwn0d9dc9dwH4qaXfWjG2uxt171dvSYV6/5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6c:72:70:62:8b:d6:cb:7e:79:40:7c:6d:b1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=94c7625682d5a3e10fbd9a1d94dddace0833beeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:1a:ea:cf:7d:a0:98:55:17:26:3d:01:f8:
37:5a:2e:96:c7:c2:ef:96:eb:74:55:ba:ca:cb:8b:
59:b9:ab:ea:85:e0:5f:d3:0e:78:fb:30:85:60:7e:
7a:8d:dd:5a:15:9f:ef:1a:08:0a:27:db:1f:f6:b1:
16:d0:46:07:ce:68:5f:71:5c:59:42:79:1f:46:71:
e5:da:01:37:5a:c2:63:a0:7b:d6:09:de:c9:9f:14:
dc:9b:2c:82:18:fc:2f:7f:ae:90:aa:1f:04:53:04:
32:de:a4:b2:a0:2c:13:55:84:4d:76:1e:75:26:a9:
7b:35:91:08:f8:bd:ac:5c:d0:45:5d:ab:3a:42:be:
26:28:49:51:e5:cf:6e:c5:64:e3:77:c9:0e:30:53:
ba:fb:42:0c:bd:ad:af:6f:11:d8:9c:17:59:81:67:
84:ee:99:84:83:ba:b3:39:e0:fa:15:73:84:82:7c:
9c:39:79:2d:93:a6:89:c4:4a:17:22:1d:b2:59:d7:
61:df:5b:05:ec:d7:ca:75:58:1a:2d:5a:35:80:81:
b8:76:e9:27:be:f6:c2:43:82:ae:67:71:d6:16:47:
58:72:9e:de:64:d3:24:60:45:00:94:67:ae:9c:c5:
83:aa:9f:9c:2c:15:e5:ee:08:4b:e2:b3:08:83:c3:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:62:56:82:D5:A3:E1:0F:BD:9A:1D:94:DD:DA:CE:08:33:BE:EB
X509v3 Authority Key Identifier:
keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:91:c0:1c:f7:bb:ef:f4:14:b8:f1:3c:a6:0e:91:41:a6:e2:
aa:70:62:08:99:ce:1d:75:15:ea:ff:ba:5c:bd:0f:6c:5c:80:
22:90:2d:ac:8e:26:be:92:49:6f:5d:19:cb:9c:7a:c0:2c:1a:
f8:3d:21:9a:72:a3:c8:ab:12:96:06:16:23:a0:83:0f:34:c4:
25:5e:58:29:02:e0:de:a1:57:e1:8e:c4:a5:fb:a2:85:b0:29:
78:63:30:59:5a:75:61:ab:69:5a:e1:c7:d6:ba:eb:aa:06:51:
f2:b7:be:ec:9e:6b:44:77:58:3c:36:14:63:22:5c:2c:37:75:
18:e4:07:26:33:3e:ad:1e:33:55:45:93:87:66:ad:a7:85:9f:
7a:86:64:1d:fe:fc:12:4c:96:ad:67:9a:8f:84:f2:73:ec:60:
7b:66:26:57:61:75:91:17:db:f3:6d:2c:32:2a:4d:9d:aa:8c:
e5:85:c5:52:d2:25:fb:f5:ba:78:4b:94:13:1e:29:ec:4b:a0:
c0:eb:e3:10:6e:6e:5a:8e:80:72:c4:4a:a5:93:7c:dc:db:a1:
d5:a5:9e:b6:47:1e:2e:d7:8a:64:9c:8a:b6:bc:a3:6a:21:71:
e3:2c:11:8a:5a:37:d4:ee:0d:9d:68:02:24:71:44:e5:b1:e2:
e0:88:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:57 2025 by rpki-client