Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: qorhAvkAG6PCr7UlQRqGj6kIZbp4MtClsP7oMldg5cc=
Subject key identifier: EC:D0:8B:31:26:AD:F8:67:C6:BA:11:33:63:12:8E:25:D2:DE:FE:7A
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 019A4EF4C950506F8B8CEE80FD2CFBAE048A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=)
2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=)
3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=)
4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: 4astggyRf5a9WRQyaKJ/CY0OxCZorxPtO4k8LwHMJHU=)
5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c9:50:50:6f:8b:8c:ee:80:fd:2c:fb:ae:04:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=ecd08b3126adf867c6ba113363128e25d2defe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:55:c9:62:26:a9:86:37:f9:b0:65:40:e4:
11:88:58:a8:3b:69:a2:cc:37:bf:44:94:4d:f5:b2:
6c:02:44:d1:49:bd:46:06:0b:dd:85:c7:82:f6:d5:
7a:07:bb:d5:1c:07:37:30:a5:b0:df:1f:3f:22:2f:
dd:e1:78:af:4f:d4:81:7a:c1:d2:64:07:c2:ee:7b:
61:b9:f5:05:25:e7:f8:8e:77:fa:67:65:90:21:2c:
f2:39:a3:10:77:5b:0a:2b:46:8d:1d:69:38:06:1f:
1a:a1:f2:da:f9:96:c3:ba:6f:8b:a3:22:e1:2a:4b:
39:43:82:b1:d7:4f:e5:e2:52:d4:24:44:ec:fd:7d:
c9:d5:6a:a3:91:67:d3:e6:ed:f5:ca:7d:37:62:73:
ab:eb:36:ae:62:14:35:e4:a5:b2:35:85:b8:97:f9:
23:b7:7e:c2:e3:0e:8d:ba:f5:d1:8c:7c:c7:60:d9:
c3:b8:09:2f:a2:8b:22:88:a0:db:ea:2b:6e:aa:76:
b2:61:c7:81:d3:eb:06:33:4e:3b:85:df:93:ed:0b:
99:c8:bf:09:2f:e1:e6:e6:9d:ba:4e:7a:ad:c4:b9:
05:6a:c4:c6:41:fd:e2:d8:08:f3:da:45:0e:91:89:
ac:77:46:ea:dc:8f:46:34:03:86:3d:c8:df:5b:7b:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:8B:31:26:AD:F8:67:C6:BA:11:33:63:12:8E:25:D2:DE:FE:7A
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:52:7b:3f:7f:d6:46:70:b8:a9:52:6d:af:b8:1d:5b:48:c9:
e7:49:b9:ea:08:2e:60:83:7b:99:23:45:4a:01:c8:90:56:b5:
b5:34:1d:a7:02:3e:41:63:25:c2:ae:1d:80:fd:54:a9:c4:b0:
3e:60:36:08:14:ea:33:99:76:3a:15:d0:63:15:2c:86:8a:0d:
82:24:f5:3a:fa:f5:49:8d:2c:3a:ca:ad:d1:47:7a:6e:db:bb:
f5:1e:cc:47:38:26:ec:23:67:34:05:fb:51:5c:f9:88:f7:36:
ff:2b:ba:ce:e1:c5:85:5b:17:79:d9:82:cf:73:67:9d:e4:91:
dc:df:28:2f:e5:b4:22:85:83:ac:43:a8:fe:98:e8:5d:5c:44:
19:54:7a:c1:fa:dd:80:e1:e8:8d:81:89:2d:c0:22:18:3e:03:
b1:a9:ea:2f:7b:1f:32:c6:50:96:0e:85:35:83:b8:63:af:3d:
3c:84:84:b3:58:8b:92:4d:48:f3:25:70:13:76:f7:54:9d:45:
d6:06:15:46:16:09:37:27:e6:0d:02:2e:33:dd:b0:84:e1:fc:
19:e4:f1:d6:bc:e2:1e:9b:f1:49:f7:f3:60:7b:0d:a0:31:aa:
3e:f8:78:73:3e:29:94:16:24:5a:59:28:8f:b9:c0:20:1b:ae:
90:dd:4c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:33 2025 by rpki-client