Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: DF/fz21qeb3A9b+iJRiIKOnTtTmIUGBuDyBUdAtIcME=
Subject key identifier: A5:C7:0C:19:7D:2F:88:F9:2B:C3:95:16:5F:AD:7C:23:51:28:16:13
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019A4DAABDB9F60B0FB45238843225F93697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 0426
Signing time: Tue 04 Nov 2025 07:00:26 +0000
Manifest this update: Tue 04 Nov 2025 07:00:26 +0000
Manifest next update: Wed 05 Nov 2025 07:00:26 +0000
Files and hashes: 1: kcs2xZoDmPXZrjiKX5DvOPWpkqQ.roa (hash: BzU/GVljA4JQZocf7nZChzPTPhXWy8F7yFPm928mpUo=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: 2/1IuN0BpSTNC8zG1hfKaNPWvFl/tlkXhlcpUx0ohGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:bd:b9:f6:0b:0f:b4:52:38:84:32:25:f9:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Nov 4 07:00:26 2025 GMT
Not After : Nov 5 07:00:26 2025 GMT
Subject: CN=a5c70c197d2f88f92bc395165fad7c2351281613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:3c:50:41:ba:07:9d:aa:00:a2:ad:40:6e:
cf:da:a1:b7:1b:c8:69:b3:01:ac:c1:37:36:bf:be:
a5:f9:2c:60:47:b1:b7:1c:eb:01:96:33:8b:ac:72:
d7:10:ec:1c:81:a6:09:5f:cf:47:ac:a4:a6:35:65:
4a:ed:a9:12:0a:ec:2d:4c:19:69:aa:a5:5a:c5:8e:
94:dc:78:d7:53:00:47:3c:b0:cf:e4:bc:d1:9e:89:
17:64:d3:1a:27:bd:1c:f0:2e:8f:ee:98:d0:74:e3:
8a:f3:1a:bd:05:33:88:5c:2d:23:30:d4:02:01:67:
ca:1e:2b:c0:6a:86:89:93:18:cb:17:ab:b9:5b:60:
c8:5a:a8:08:9a:c8:82:cc:ea:e2:d1:b4:23:76:69:
e1:71:db:cf:6e:96:35:bd:74:b9:4d:b9:36:c5:39:
cb:f0:b1:88:0a:92:ea:94:50:c6:94:50:10:78:a0:
ad:06:20:c4:a2:53:a7:ae:b9:30:33:7a:b0:9a:e8:
fb:1d:e5:c1:a7:b1:17:c7:13:b3:03:4c:65:05:25:
ec:4a:a8:fc:cc:4f:73:e7:5c:ad:0b:58:c1:7f:0e:
39:1b:93:c4:ca:7a:bf:88:b3:e7:88:d3:63:99:d7:
44:db:58:50:5b:d9:73:a8:21:dd:6f:52:37:71:1a:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C7:0C:19:7D:2F:88:F9:2B:C3:95:16:5F:AD:7C:23:51:28:16:13
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:99:b9:43:76:f6:89:ba:c5:3a:99:d3:65:16:5b:06:03:76:
82:dc:e2:8e:df:eb:bf:ae:3f:00:11:48:b2:d7:dd:f5:f9:32:
b8:10:51:37:17:1f:14:66:66:57:05:29:33:3f:e3:08:81:51:
bd:c1:fb:0b:bf:0e:48:9d:e7:b2:c4:f0:5e:5a:37:ac:32:07:
4e:4f:0a:a7:42:0f:3d:48:ca:c0:05:75:cb:ed:ed:83:0d:e2:
07:30:d1:25:1e:e4:7d:13:55:6c:35:c9:32:cf:15:ea:d5:5f:
7e:1f:1e:39:43:18:59:b9:18:e0:04:da:04:2c:73:a3:f2:03:
7b:29:11:ce:32:f1:64:a6:30:59:59:5e:b0:ba:26:d4:6d:16:
b6:4c:f8:fd:a1:6c:54:e5:97:85:0e:b7:92:99:11:b6:ee:55:
16:9a:a0:6b:df:b7:72:fa:91:d2:27:e8:73:6d:a0:8f:09:9b:
c3:8d:46:7f:f0:12:9c:a2:4e:c1:75:04:e0:71:32:f6:a1:f7:
f2:26:b2:05:70:bf:1e:4a:12:b4:c6:bf:e7:80:b9:f9:ff:0e:
0d:04:28:6a:f3:24:8e:07:82:8f:be:32:8e:b3:8b:40:bc:c0:
ab:80:5d:ac:fa:67:0a:25:cc:99:06:9a:2c:78:0c:d3:1f:fb:
df:23:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:00 2025 by rpki-client