Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File: uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier: Wyix+X4uumBbSdTNbjWoyQfgCvwpxhByn/rzOHFzs2M=
Subject key identifier: 00:8B:F2:6F:C0:E3:0A:CF:AE:CA:1F:B3:4A:2E:FF:89:CE:C4:D5:D3
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial: 019A4E50025A6B813B774857931B4899CBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number: 14EF
Signing time: Tue 04 Nov 2025 10:00:57 +0000
Manifest this update: Tue 04 Nov 2025 10:00:57 +0000
Manifest next update: Wed 05 Nov 2025 10:00:57 +0000
Files and hashes: 1: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: E7+iNrLkycgnWQVRxMFuu5aRPnPz4TsWLY2JR/GTzlg=)
2: xqGa5yw14tF9pw6-eYINusEUh7E.roa (hash: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:02:5a:6b:81:3b:77:48:57:93:1b:48:99:cb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Validity
Not Before: Nov 4 10:00:57 2025 GMT
Not After : Nov 5 10:00:57 2025 GMT
Subject: CN=008bf26fc0e30acfaeca1fb34a2eff89cec4d5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:fc:54:ce:b9:38:43:bc:59:4f:e1:55:86:
6a:7a:e9:2c:ef:ed:85:90:32:cb:b4:1f:c9:cc:49:
08:8e:f8:cc:36:62:2b:7e:a6:bb:c5:b7:c1:db:f4:
59:bf:99:7f:55:a1:f9:20:a8:6f:93:de:ee:0c:e5:
dc:8b:fe:7d:ab:1d:ef:d1:46:9c:e7:f4:bf:b2:3b:
b6:ea:04:19:a6:28:d3:7f:53:10:45:12:ae:b2:a0:
31:2d:10:50:68:b6:68:aa:e7:e5:eb:38:e7:c9:d9:
28:74:ab:f1:cb:db:a6:d2:70:b3:73:e3:03:f6:6c:
a8:ff:a5:e4:c9:1b:43:b5:4c:82:f9:ed:a5:e4:1a:
de:17:72:9c:5b:07:96:aa:23:39:c8:d5:41:24:b1:
32:57:ba:c5:44:e9:12:67:f7:46:50:7b:9b:98:c5:
80:65:ac:00:d7:1a:37:a9:cb:6d:ea:46:68:d4:93:
60:40:5f:02:e3:20:bf:99:74:90:ce:33:10:84:fe:
14:f3:02:90:1e:d9:27:70:a4:54:98:f4:60:ef:48:
1f:22:61:2f:10:3d:56:c9:37:de:32:73:bf:a2:8f:
03:33:10:e0:72:a2:13:ff:26:6a:f6:f2:0a:03:b2:
fc:5b:f1:4e:dd:b9:bc:55:78:56:e1:f2:2c:33:44:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:F2:6F:C0:E3:0A:CF:AE:CA:1F:B3:4A:2E:FF:89:CE:C4:D5:D3
X509v3 Authority Key Identifier:
keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:76:6d:c9:1b:eb:aa:6b:9e:eb:d7:43:35:4e:06:76:fa:5b:
ea:39:d5:a1:0b:1e:d4:6b:2b:d4:ae:88:c3:70:52:ea:e3:58:
83:84:4b:08:a3:f4:28:d5:55:78:b5:b1:fe:fa:e4:03:19:30:
bb:e5:95:c3:ed:c0:4f:a3:44:19:44:d5:c1:17:6e:b2:18:81:
16:7d:be:72:67:58:4a:09:37:9e:25:a6:7b:a1:1a:32:1b:bb:
5b:8b:73:2e:57:7d:ae:83:57:e1:be:46:8e:a9:ff:d7:04:bc:
80:63:03:df:27:50:7a:d5:b7:21:11:15:ab:b1:60:d2:70:3d:
1c:99:47:41:de:f6:6f:ad:a0:ae:62:bc:d9:9e:41:ac:8a:1c:
79:28:34:cf:df:e0:1b:45:78:31:7d:03:50:9f:31:bc:0a:54:
68:6e:55:ff:17:a5:b1:ae:4c:6a:14:8a:14:df:cb:63:ab:a9:
5c:f5:14:01:11:0e:59:a9:91:21:04:37:74:c9:47:45:d8:97:
44:16:f4:7d:0b:98:25:2c:61:1a:59:50:6a:34:11:76:06:4e:
cc:f6:b5:73:0c:82:65:89:c4:c7:52:71:10:52:f0:12:88:9e:
6f:6d:0a:bd:42:ed:33:d3:c7:d1:a1:8d:b0:bb:34:17:a4:a4:
a3:5c:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:25 2025 by rpki-client