Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier: vBZEilLtkVo3MitxkUwJf8gchx+sudx7MOXUBxH4LQQ=
Subject key identifier: C2:B9:CC:12:C1:17:F0:DC:CF:CB:6E:B2:03:7E:2D:E2:B4:6F:B7:84
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer: /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial: 019A4F6206383C23412608A3FE0E5A2BB380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number: 0A41
Signing time: Tue 04 Nov 2025 15:00:15 +0000
Manifest this update: Tue 04 Nov 2025 15:00:15 +0000
Manifest next update: Wed 05 Nov 2025 15:00:15 +0000
Files and hashes: 1: 0FJsd9npeXZm-y2IZX9lSQoWGTw.roa (hash: seYr2TgSYAgV0Fmm029FWcQdaKkWPovq3zFY6jEktrc=)
2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: NoSG6LB86IxWceH7Rjruo65WLxKYv2ZC8tRcfDSTskQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:06:38:3c:23:41:26:08:a3:fe:0e:5a:2b:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Validity
Not Before: Nov 4 15:00:15 2025 GMT
Not After : Nov 5 15:00:15 2025 GMT
Subject: CN=c2b9cc12c117f0dccfcb6eb2037e2de2b46fb784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:11:3a:67:0a:01:86:0b:d5:d8:ca:bb:92:
6d:f4:64:57:65:29:6e:58:00:84:06:4f:24:30:c5:
94:7a:76:59:1a:c3:f2:5d:21:b1:bf:11:dc:2e:4f:
99:9e:b8:f3:6e:98:a8:62:c4:6d:e2:ad:e3:48:36:
4d:1e:eb:d1:3a:24:b5:4a:b6:a5:dd:1c:b3:71:e2:
6c:53:4a:12:88:ac:be:f5:f6:a8:7b:2a:67:81:39:
34:ad:b1:a5:a5:6c:e7:39:8b:e3:ee:fb:f3:c7:29:
e8:1f:71:69:4a:15:42:9d:c3:8a:88:94:a3:a5:dd:
49:3d:57:21:3d:06:66:e0:ef:e2:9d:b1:ad:a3:72:
1e:25:08:8f:36:44:13:88:33:51:b3:5b:75:6e:f1:
09:19:0e:bf:1f:78:dc:9b:79:a1:63:29:bd:55:85:
46:ad:89:5c:03:73:a5:53:c7:32:e4:08:35:ac:48:
5b:c9:2f:d4:13:31:91:a6:03:85:ec:2e:be:41:ce:
6b:10:da:ad:60:7c:68:bf:61:70:af:cf:2d:de:77:
54:c3:c4:55:48:49:f1:8f:e9:13:b6:99:5d:83:ac:
e5:e9:6b:6f:3e:ba:82:f1:54:6b:f4:8d:21:56:50:
4d:10:83:48:d5:53:7e:0a:7e:05:aa:05:df:e2:76:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B9:CC:12:C1:17:F0:DC:CF:CB:6E:B2:03:7E:2D:E2:B4:6F:B7:84
X509v3 Authority Key Identifier:
keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bf:01:4a:c3:ec:d4:eb:2f:b5:41:86:cb:44:18:32:2f:1b:
04:dc:3b:f5:19:1d:12:cf:be:8d:4c:23:87:c2:ed:95:40:69:
8a:3f:25:57:c2:c1:84:34:7d:53:6c:83:bf:46:d1:b8:4d:e0:
4a:19:28:8a:b3:40:ca:64:02:c5:b9:8b:da:b5:0e:6f:14:90:
f0:77:4d:59:be:e2:14:c2:b3:90:f8:2b:26:a6:8f:d9:33:c0:
7c:40:85:0d:60:c8:74:42:7f:65:71:d5:f9:37:ea:a3:f0:0e:
05:93:43:ca:31:6e:75:05:3a:12:9c:6b:27:b3:c2:86:ca:55:
32:88:b7:48:e2:c1:a8:c4:60:65:1c:15:d4:b0:01:bf:a5:a6:
84:eb:fe:33:bb:7d:fa:c7:f2:d0:22:b1:0c:e1:4d:b1:69:55:
26:ee:74:04:fa:d5:9e:c7:27:e3:3e:fe:36:b8:33:cb:c5:a0:
35:4b:b0:17:08:44:f6:47:a6:c8:d3:fd:3b:ce:ff:41:e7:e1:
88:c1:dc:5a:71:77:75:93:44:f7:ec:54:68:a0:b6:fa:ff:01:
14:d6:2d:29:c8:28:02:48:1f:7d:b4:c3:20:28:72:41:bb:de:
e8:81:c1:51:c9:ed:a1:c8:ab:b9:1d:29:3e:05:9c:54:80:6a:
8c:9b:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:04 2025 by rpki-client