Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: ynhegHnSR2pcsuZ5Tc+nqFuTkiLoNxHUW4KX1GNHxtI=
Subject key identifier: 0B:F7:31:58:0F:A9:4C:CB:43:10:9F:EF:1D:87:2A:4F:B2:3F:0B:48
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 019A5150EF21450D1BB6369B098AD05FFAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 12C9
Signing time: Wed 05 Nov 2025 00:00:49 +0000
Manifest this update: Wed 05 Nov 2025 00:00:49 +0000
Manifest next update: Thu 06 Nov 2025 00:00:49 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: E6nboe1PUWZffxO0svLHNodc/CNIsmv+raPOKxCKEaY=)
2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ef:21:45:0d:1b:b6:36:9b:09:8a:d0:5f:fa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Nov 5 00:00:49 2025 GMT
Not After : Nov 6 00:00:49 2025 GMT
Subject: CN=0bf731580fa94ccb43109fef1d872a4fb23f0b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:f3:02:44:3b:c3:e3:3f:39:bc:83:1f:96:
f7:7a:15:05:1b:33:56:7a:31:c1:79:3e:14:6d:0e:
b6:b6:8e:18:dc:d1:26:2b:74:74:ab:83:fe:94:3f:
e4:91:8e:48:e0:48:e6:18:1f:e1:a1:29:73:7c:ee:
26:8a:ba:c4:a2:04:35:5f:f8:a2:10:2b:1b:86:92:
79:67:71:c0:e2:a1:26:f8:4e:f9:3c:fa:aa:f1:68:
80:9c:37:8b:76:be:70:06:1b:93:c1:73:cf:41:ab:
dc:89:79:2f:d4:67:39:1f:97:77:d1:5b:29:48:e9:
71:10:41:c6:d9:de:da:c0:34:a3:9e:18:f7:7f:51:
d9:68:35:1b:3d:67:a4:87:6f:61:d9:6d:df:fe:00:
de:78:ee:41:64:4a:a4:cd:5d:ff:60:4a:5d:a5:a6:
64:11:54:ae:d5:cb:23:c0:ed:0f:ed:69:66:ae:0d:
27:b8:bd:94:4c:ed:b2:cd:be:4e:66:1e:8c:b5:83:
cd:cd:52:a1:40:89:c9:48:37:6e:7e:86:40:b1:ff:
93:d1:01:cc:67:e0:08:22:78:6e:0c:12:9e:05:f7:
3c:15:52:41:42:4c:14:10:98:f9:bf:48:36:84:f0:
34:03:31:60:d7:90:0b:80:5e:e9:3e:94:ad:65:b3:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:31:58:0F:A9:4C:CB:43:10:9F:EF:1D:87:2A:4F:B2:3F:0B:48
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:42:4f:7b:9c:9e:3f:5c:e4:28:bd:c2:ae:f4:a8:0a:1f:35:
1f:87:5a:f5:73:a1:51:6d:da:8a:70:7c:25:35:29:d5:f9:c4:
77:59:1c:62:ea:7f:8b:61:14:ca:62:3d:7f:37:6a:52:34:b1:
55:a0:96:e3:54:db:ed:51:a7:7a:aa:e9:90:ac:5e:85:13:27:
df:78:8d:2c:2a:56:22:3e:83:f3:bb:19:b1:fa:94:c5:ed:39:
8d:28:27:45:f1:2c:3a:02:0c:29:7a:7f:0a:e4:13:90:20:88:
0a:92:9c:5d:97:af:44:78:3b:50:23:09:3c:62:b8:58:53:3b:
b0:5e:3e:7a:70:97:22:e5:12:a6:7b:9e:e9:56:d5:4c:9c:21:
9a:a6:d1:01:c8:24:1f:21:6e:ee:e5:99:ee:06:f0:26:62:62:
9c:0d:00:b5:96:8a:ab:32:ee:77:a5:3d:20:fe:3f:d0:af:f8:
d9:7c:d5:1a:bd:f0:6c:40:8f:73:dd:b3:a7:5d:b4:7d:63:e1:
93:05:ad:92:ae:ba:85:e4:ac:04:0b:85:c9:e6:ee:54:b7:d5:
b8:af:d5:02:5c:96:8b:88:9c:6a:b0:dc:31:39:4d:62:1f:ca:
e1:85:8d:87:23:20:50:71:ea:a2:d0:18:ae:63:46:3a:9c:14:
76:74:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:46 2025 by rpki-client