Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier: FIneDtDKAMrpOnuAcQOIHxkGLnGdNS367GhnoHvFXcU=
Subject key identifier: 81:E9:D0:15:04:98:0B:70:8A:2C:A0:13:E2:DE:1A:DE:F3:14:89:FE
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 019A503DA3795BC92CB34C99C71F82982B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number: 1201
Signing time: Tue 04 Nov 2025 19:00:08 +0000
Manifest this update: Tue 04 Nov 2025 19:00:08 +0000
Manifest next update: Wed 05 Nov 2025 19:00:08 +0000
Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=)
2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: vPrHNbvHhgXgZCrdVghuPu+BG6hPmykOnRPdzCsax1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a3:79:5b:c9:2c:b3:4c:99:c7:1f:82:98:2b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: Nov 4 19:00:08 2025 GMT
Not After : Nov 5 19:00:08 2025 GMT
Subject: CN=81e9d01504980b708a2ca013e2de1adef31489fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:c1:0f:31:e0:49:c6:63:a1:43:6c:10:cc:
13:2f:cf:24:25:31:b8:8e:20:25:c7:47:e7:0b:ae:
14:13:10:4f:70:49:c5:10:a4:1b:50:d5:2b:e4:83:
6b:0e:09:c1:69:75:55:bc:36:4c:30:d0:b4:21:53:
b3:10:44:51:e1:53:4c:63:e5:ba:a9:03:2d:28:0c:
3b:7b:11:6d:ff:c8:50:ad:c2:4a:c2:d2:58:da:a9:
e1:6a:28:75:18:30:bb:11:11:b2:a1:3b:e0:8f:1e:
f7:8a:a8:6a:21:8e:a8:9b:b2:1f:81:79:7e:24:c0:
63:31:a9:ed:25:eb:2f:24:9c:d3:5a:16:39:22:f4:
17:dd:e4:40:07:cf:13:80:ab:d9:d9:16:0d:c5:6d:
dc:4c:16:ed:56:cf:df:4a:ef:60:d6:d0:16:4c:f3:
48:6e:e2:b3:4c:96:37:32:dd:2a:40:71:4f:7e:53:
0e:44:5a:dc:85:a7:0d:d6:16:41:7c:93:b6:28:95:
cb:b4:08:1f:7c:43:cc:d5:e5:6e:cc:76:1b:46:2e:
1a:55:05:10:20:2c:26:d4:95:c5:80:5a:db:02:bc:
83:0b:b4:f9:13:8f:fa:9b:d6:a5:c2:b7:7a:50:62:
b5:65:45:be:c3:1d:34:8f:b5:2c:ec:61:fe:5d:8f:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:D0:15:04:98:0B:70:8A:2C:A0:13:E2:DE:1A:DE:F3:14:89:FE
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5c:1f:86:69:b5:f7:9b:ec:00:a1:5b:c0:ec:41:b2:fd:4f:
e9:76:c1:e5:39:1d:3b:91:8d:f8:58:1b:7f:87:7b:31:5c:ba:
29:8e:cc:5b:7a:62:9e:8b:d7:d1:e2:f8:b3:79:47:be:d4:4f:
86:e2:8e:cd:4f:59:fc:1b:81:6b:11:7c:34:10:2c:a5:dc:a9:
f1:eb:9a:1b:90:d4:c6:c5:77:bb:9c:d6:40:cd:29:d9:3f:7e:
29:10:0f:0b:da:32:49:ac:21:b6:de:b7:69:01:a2:7a:7a:a0:
cc:49:63:a1:ed:f0:17:97:8e:9f:72:22:db:b0:16:8a:b4:91:
de:e9:39:01:59:1c:89:8a:b4:17:a9:84:a3:27:e5:a9:4f:c8:
a1:87:ea:92:3e:06:01:98:f2:6a:8d:fe:1c:83:8f:4e:34:39:
6a:81:9e:c3:5a:d7:72:6d:9b:41:a5:b9:8a:0e:6f:d1:44:25:
e1:2b:67:21:d2:11:d6:44:92:96:2a:20:a4:3f:6a:0b:75:97:
4d:a3:1f:54:6f:a2:58:2c:4e:bb:0a:e0:0e:4c:08:f3:55:98:
62:7a:e4:9c:cb:81:aa:ed:92:1e:57:5f:96:53:f3:4e:e7:75:
86:aa:ae:d9:a1:b3:3f:ba:aa:b3:e0:eb:fb:47:7c:91:77:2c:
4d:42:75:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:47 2025 by rpki-client