Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: tyQsJmrjEV6+UvBVhEIdRp3nWrY0lRa5ZZOpraAWVvE=
Subject key identifier: 41:0F:AD:33:A3:F8:8D:BD:CB:A0:73:E4:E4:EF:40:2F:3E:6A:FE:CF
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 019A503E60F38331204C98289704BF332DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:56 +0000
Manifest this update: Tue 04 Nov 2025 19:00:56 +0000
Manifest next update: Wed 05 Nov 2025 19:00:56 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: vEXKOd8cJPv6vANpK6q0mr+GCD493YYsi2nrMUHmjbg=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:60:f3:83:31:20:4c:98:28:97:04:bf:33:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Nov 4 19:00:56 2025 GMT
Not After : Nov 5 19:00:56 2025 GMT
Subject: CN=410fad33a3f88dbdcba073e4e4ef402f3e6afecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:33:09:0c:0f:31:69:76:8d:ba:e1:eb:1b:
df:38:ce:43:4c:d6:65:b4:ad:fd:8b:2e:ad:a7:cb:
bb:88:75:c5:4a:a3:72:f5:f4:16:75:7b:36:b9:5b:
79:1b:77:5e:4a:9f:6f:8c:30:8c:7b:36:3d:d6:8a:
2c:53:b0:cf:7a:c8:7c:60:76:97:85:3e:1f:9b:32:
89:cb:7b:33:35:6c:f8:d5:11:f6:28:a4:c0:01:f3:
5b:ae:34:eb:68:a2:00:71:47:d4:dc:ce:af:79:ed:
a8:e4:7c:62:32:9e:7b:a9:44:9a:7d:79:7f:35:8d:
81:24:25:b1:96:5e:e6:72:ec:a6:6a:cb:40:23:25:
4d:c1:d6:58:21:d8:82:23:0c:c2:22:41:cc:ac:d0:
84:7c:4f:a9:a9:12:89:f9:df:79:08:b2:b7:e3:3b:
35:c0:42:fa:07:bc:de:77:64:fa:b5:85:43:2d:4d:
56:f0:5a:56:e4:be:86:25:ed:87:fd:04:77:cd:24:
27:f6:24:74:c2:5f:b8:7d:25:bc:ae:2d:37:61:80:
26:1d:a7:7f:40:2b:01:1d:b6:90:fb:81:4d:51:8d:
85:a9:30:6a:79:16:c8:fa:c5:30:c7:f1:c9:66:88:
34:d5:5b:53:83:e7:d3:9e:4b:e6:15:b9:d6:64:55:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:AD:33:A3:F8:8D:BD:CB:A0:73:E4:E4:EF:40:2F:3E:6A:FE:CF
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:76:9a:6f:c6:92:57:76:27:8b:3c:ce:71:47:13:56:db:84:
79:ed:f4:3d:6f:ae:a0:4a:9b:4a:d4:3c:2e:1b:6e:1b:78:ad:
94:2f:b4:8a:d5:27:7e:73:9b:12:5e:c5:f0:0b:2e:12:d8:14:
6d:bd:3a:72:3c:3a:e6:2d:af:d7:6f:5d:84:f5:22:3f:a0:49:
34:68:1e:16:05:fe:43:a6:2d:32:59:18:de:20:64:aa:a8:46:
57:ad:78:a4:5a:64:03:4a:3f:d9:0d:a1:6e:76:4f:af:63:c3:
f6:0c:06:b0:40:65:83:71:3e:d7:4e:b3:8b:c0:ec:35:c1:48:
2a:fd:a5:29:d5:78:2f:01:de:07:01:c7:b4:f9:93:d5:8e:71:
d5:ec:19:90:13:48:a0:3d:0d:05:53:0c:3f:78:07:9a:3c:cb:
2a:57:ef:61:3b:6e:2d:12:f4:42:fd:3c:ea:ea:3f:56:9e:70:
30:dd:a7:12:73:f7:99:2c:82:c9:fe:9b:b9:d4:a8:8e:cc:ef:
3d:b7:a6:76:69:5b:fc:93:3c:7e:7b:f8:84:01:f0:5c:8f:fa:
73:e2:85:f4:36:d9:bd:8f:d6:6c:78:ca:57:38:b0:b6:09:ca:
28:16:48:e3:66:b9:18:02:3a:3e:0c:38:c6:a6:27:8e:09:93:
1c:59:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:25 2025 by rpki-client