
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: w8RSMfRhjXKI36Zw7GveFYMJhmjNhH0ofUSqh1wbQAM=
Subject key identifier: 97:F7:76:72:4B:7E:8F:C9:FA:30:61:71:85:4D:14:24:47:80:67:CA
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019A51875B5A9940231503FE9195FCF316FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 1519
Signing time: Wed 05 Nov 2025 01:00:16 +0000
Manifest this update: Wed 05 Nov 2025 01:00:16 +0000
Manifest next update: Thu 06 Nov 2025 01:00:16 +0000
Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: sr75lin3FB8IMe3lBGSfFHVaGcCCcy7POjiP/3pb0vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:5b:5a:99:40:23:15:03:fe:91:95:fc:f3:16:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Nov 5 01:00:16 2025 GMT
Not After : Nov 6 01:00:16 2025 GMT
Subject: CN=97f776724b7e8fc9fa306171854d1424478067ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:5f:b4:3a:a3:c1:bf:cc:a5:65:fe:c9:ca:
2e:a9:75:6f:d4:c7:08:1d:e0:91:5d:f3:8d:0a:88:
de:1a:86:9d:a8:60:89:d2:6a:8a:c1:e5:01:a6:bd:
61:ee:bd:3f:2f:71:97:be:ce:25:bd:57:5c:32:27:
be:35:f9:20:34:4a:7f:f4:4a:aa:27:4e:1b:a4:af:
33:38:79:68:be:13:5d:b4:f6:d6:8e:6b:8a:5f:16:
b8:38:70:1b:5d:52:91:80:03:26:d6:3f:b4:0b:52:
a7:55:a0:39:d6:ca:b1:30:45:70:7e:de:43:00:fb:
dc:69:12:38:80:20:0e:96:97:90:0b:62:40:e6:e9:
ab:ff:75:67:1a:25:f6:cc:ef:5d:ea:68:ac:cb:d7:
17:9e:7e:b7:89:a3:1b:2c:bf:a8:71:6b:02:42:ec:
ec:ee:6b:a8:e6:41:22:73:21:dc:8c:da:91:fc:2e:
3e:eb:79:e3:ab:cb:6e:0b:3f:b5:c4:17:27:44:52:
6f:ad:33:36:12:20:a2:f8:90:b5:fd:a5:ad:13:e6:
34:81:4f:8d:fc:54:15:40:b3:11:4c:59:b4:3c:6b:
aa:5a:22:84:32:65:37:9a:bb:99:a6:7a:9a:4b:f0:
5d:6a:44:dd:21:22:73:d4:78:f0:81:4b:b5:5a:61:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:76:72:4B:7E:8F:C9:FA:30:61:71:85:4D:14:24:47:80:67:CA
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:76:a0:66:76:ec:fc:09:f8:d8:23:69:d3:e1:f3:80:94:ec:
80:dd:92:c7:8f:d1:b2:2a:55:fb:e5:6d:92:b5:de:a8:ee:73:
bb:41:b1:29:64:9d:c1:9f:ce:5e:a5:c9:23:78:b2:df:2f:42:
6b:4e:46:ee:13:7d:5d:f9:d2:9a:68:63:c6:25:a8:60:26:3c:
8a:5b:34:e9:fc:a3:df:5e:66:be:31:1e:80:b7:84:c0:1f:27:
84:69:b7:33:94:d3:67:ce:6e:06:0c:bb:1b:05:c8:ca:c3:4c:
dd:f1:82:d5:d0:75:80:e0:7e:44:af:61:af:09:a4:99:1d:ee:
9d:a5:05:07:b9:49:96:7c:cc:f9:06:4d:9f:c9:3d:20:b8:4c:
11:e3:82:0d:fb:e3:11:04:25:47:15:eb:73:eb:3b:e5:6c:88:
1a:b3:cb:d2:e7:91:ad:df:31:62:b4:52:3c:34:63:d5:5e:5d:
a0:93:20:c9:02:18:d9:a8:9c:a8:29:0f:76:c3:df:5b:3b:30:
b6:18:61:d4:c1:cd:a2:96:1d:f1:49:bf:5f:bc:62:a4:7b:6b:
3d:84:c2:66:62:1e:55:d2:e0:60:92:08:7b:67:f0:d4:26:a7:
78:a2:64:dc:eb:d5:a8:12:1a:13:2c:02:8c:65:c3:f4:90:7f:
e5:74:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:38 2025 by rpki-client