Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
File: uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft (raw, json)
Hash identifier: W+EDXLyHBVypaaL/iNcLgIzrnq9gqjELzhOxntz7uPc=
Subject key identifier: 2F:D1:BC:C5:77:6C:75:97:9D:B5:0B:07:DD:4E:92:07:A0:15:50:BC
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial: 019A54884F132995926C027458957F5A7AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
Manifest number: 38
Signing time: Wed 05 Nov 2025 15:00:10 +0000
Manifest this update: Wed 05 Nov 2025 15:00:10 +0000
Manifest next update: Thu 06 Nov 2025 15:00:10 +0000
Files and hashes: 1: 3odw06eY_aIJMJ5gia4SCuGIEhI.roa (hash: HtI0JFszp0zK+HxeeFPZ+mMVGR6pXK8jygEDvaNdyvQ=)
2: ZtDCJODtY7tlGUY4mI_YRwWJbRY.roa (hash: Yeg65Usz9zdCfiKTUR//qasZbCYjIaaB9OcLvlxhcWk=)
3: uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl (hash: tXW4tEBZsZOMrz6ROVNRV8/FpvRWk5s/rXq5AbsPtWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:4f:13:29:95:92:6c:02:74:58:95:7f:5a:7a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Validity
Not Before: Nov 5 15:00:10 2025 GMT
Not After : Nov 6 15:00:10 2025 GMT
Subject: CN=2fd1bcc5776c75979db50b07dd4e9207a01550bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:d6:6c:6a:fa:31:75:5c:8a:b2:3c:1e:2d:
a7:74:ff:27:8c:cf:69:a8:be:38:ca:ed:ec:02:cf:
0d:40:03:e5:20:43:91:35:09:e9:a9:39:7a:d8:65:
99:11:f6:38:f2:84:cb:4c:f4:8a:7e:8a:50:27:49:
39:c0:95:e7:ad:1c:d3:42:93:9a:02:c9:d0:0f:24:
9b:86:49:f2:07:68:d4:54:88:86:27:5c:fe:c5:a4:
e3:14:35:df:02:63:06:e7:a4:69:63:1a:98:af:41:
63:79:00:32:b4:ca:44:ca:20:49:67:45:f1:65:69:
3c:8d:75:cf:b1:b0:d2:c1:a8:71:7a:e4:b8:bf:d0:
16:58:12:84:fc:15:0f:f1:79:e6:5e:39:a0:10:6f:
34:61:bf:37:df:3f:5e:11:4f:0c:4c:57:6a:d7:7f:
4f:1d:90:ed:f3:18:b7:6f:f4:df:f7:8f:2c:79:b8:
0e:7c:eb:4c:91:40:61:69:d5:e8:30:75:7b:03:d3:
a6:97:58:79:cd:26:c8:00:0d:7a:b6:c6:4c:64:01:
ac:c8:9c:bb:1b:8c:90:f9:25:3d:2f:db:51:a4:3c:
25:08:c7:c0:34:2c:e2:ef:35:e5:e5:74:37:6c:2f:
af:ae:31:32:3e:94:25:ca:a2:89:af:da:2d:b7:b3:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:BC:C5:77:6C:75:97:9D:B5:0B:07:DD:4E:92:07:A0:15:50:BC
X509v3 Authority Key Identifier:
keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:62:db:4f:64:c5:63:ee:94:30:2f:d0:a5:59:b2:5d:cd:df:
86:72:8b:09:65:fc:a2:56:e2:4d:d2:8a:4a:9b:e0:4e:47:5f:
77:94:69:23:32:83:03:7e:d6:8a:df:cd:03:e1:15:85:bc:14:
a6:46:10:0d:55:c8:8b:6d:fa:31:c5:65:0f:42:30:a5:5c:d7:
25:c4:fc:96:ab:4e:22:7b:92:cf:12:6b:37:4e:ee:cd:8f:62:
b1:e4:3e:be:65:44:99:d7:03:0a:83:1c:48:a1:e7:d7:d9:cb:
3b:0d:f1:71:ff:56:6d:ac:7c:b2:fb:5c:aa:20:22:27:c0:78:
64:f6:79:dc:04:6b:d5:3c:71:70:11:e8:ac:d9:74:db:57:9f:
38:f1:43:47:c7:5a:3d:39:9c:0d:2d:b0:d1:41:df:97:62:54:
8d:96:e6:5b:51:dc:5f:c1:42:e0:de:32:69:9f:43:6c:15:51:
50:c2:ff:9d:c2:17:b8:39:9c:b9:2a:51:1a:7d:bd:9e:d9:b9:
e7:db:79:42:f9:d7:71:65:76:ec:62:b6:11:3d:b9:fc:46:7d:
8f:3c:96:b4:fc:33:ab:7e:d5:3d:42:fa:09:89:87:29:8c:fc:
02:fb:fe:e5:de:c9:a5:2f:25:df:62:15:c8:18:fb:82:7c:28:
1d:6b:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:43:30 2025 by rpki-client