Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
File: uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json)
Hash identifier: fl6R2080GMNDIa8QivtsStLS/UfXr3W/KLip7JF1LNs=
Subject key identifier: 40:CD:2E:D1:FE:24:BC:E7:7D:D5:E4:BB:39:00:1F:4A:09:94:18:44
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Certificate issuer: /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial: 019A503DE662DB67FCE120F3C323753F0DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
Manifest number: 1295
Signing time: Tue 04 Nov 2025 19:00:25 +0000
Manifest this update: Tue 04 Nov 2025 19:00:25 +0000
Manifest next update: Wed 05 Nov 2025 19:00:25 +0000
Files and hashes: 1: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (hash: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=)
2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: qyeKdSvnah4g2qWBE2xGj1aVlRobTG3tgy5fUV20hoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e6:62:db:67:fc:e1:20:f3:c3:23:75:3f:0d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Validity
Not Before: Nov 4 19:00:25 2025 GMT
Not After : Nov 5 19:00:25 2025 GMT
Subject: CN=40cd2ed1fe24bce77dd5e4bb39001f4a09941844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:83:15:23:4f:a2:14:e9:a6:90:96:74:b4:73:
a6:4a:34:52:8d:ec:eb:3b:d9:e9:a6:c5:c4:62:59:
ce:66:48:64:ac:08:c3:1a:99:23:99:f4:5f:c6:bd:
77:03:05:6c:43:19:a4:9d:1c:78:c0:c8:b8:9e:45:
c4:50:45:3a:4a:96:d9:23:d2:ad:89:71:2e:f2:e4:
b0:97:f0:02:d0:4e:ba:83:e9:19:e3:ee:5c:1b:19:
57:7f:77:c8:82:0e:ea:aa:58:5a:f1:1c:76:37:e8:
7a:a4:2c:94:59:cb:dc:f4:6f:c2:a9:4d:6b:f0:3c:
41:30:ca:a3:fc:20:0a:da:80:b6:40:f0:49:d4:93:
7a:73:38:4b:9b:96:14:7f:f8:99:63:22:e5:33:86:
04:b1:c8:b6:46:b8:74:c0:85:0c:fd:7b:a6:c1:0a:
b7:10:f5:ab:a7:f2:a8:7a:d6:5d:f3:46:f3:82:ee:
51:64:ab:0f:87:d1:a3:75:65:fc:6a:3c:49:b4:c3:
c8:ce:9f:e0:be:44:c5:68:22:77:0a:08:db:d1:97:
1c:41:b9:b9:46:ab:6a:2e:e9:77:2b:9f:47:03:d9:
a2:e8:e2:59:75:d8:d7:28:6f:ca:e1:64:fb:89:53:
a2:72:2d:42:7c:1c:12:37:fb:7f:ff:26:2d:59:b2:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:2E:D1:FE:24:BC:E7:7D:D5:E4:BB:39:00:1F:4A:09:94:18:44
X509v3 Authority Key Identifier:
keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:0c:ff:40:62:18:75:7e:72:57:56:d7:ac:fa:b2:d5:de:
45:fa:d5:57:c1:90:c2:d9:07:39:27:eb:cd:34:10:a0:a6:c4:
29:15:0f:99:43:a9:f2:1c:f6:c9:11:00:72:6a:a5:c7:4c:99:
9e:07:84:b6:53:b6:21:f6:9e:f8:e0:72:3a:8d:4b:27:95:b8:
0e:d5:30:16:b7:4d:f2:c8:47:0a:97:24:42:e7:66:43:19:49:
93:52:67:c3:26:e3:60:67:eb:af:4c:f5:08:c3:b7:ba:ab:04:
4b:a2:eb:99:c0:d0:2f:c4:d7:12:2c:7f:06:47:cf:b4:dc:06:
c8:8b:1e:2b:0a:61:6f:e8:7e:45:41:d1:1a:13:05:a6:64:6d:
b7:1c:23:3c:67:a1:87:96:2e:3e:d6:7d:60:32:46:e0:c6:43:
ae:14:f7:11:99:da:cd:9d:db:eb:34:be:ec:08:8f:27:30:60:
4a:ce:ca:cc:38:18:42:1d:dc:0a:97:7c:bf:50:3a:60:40:97:
c7:a1:73:9e:3f:45:08:44:7b:b2:f2:83:c1:ee:f7:99:36:4e:
86:36:ff:50:d8:bb:54:82:f7:56:71:53:28:60:06:18:72:50:
e5:f4:b5:6d:eb:f0:0b:21:9a:9c:27:f2:ae:27:3e:ba:23:b9:
0d:81:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:06 2025 by rpki-client