Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier: vIN31W1OHWzLeM96icYwr2XNui8ibHHBD1sV59ygrcE=
Subject key identifier: 43:D9:B6:79:67:50:BA:D5:76:31:40:6E:7C:28:28:56:D6:22:F5:29
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 019A53AC91891A34CD422E40D0858FA65C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 11:00:09 +0000
Manifest this update: Wed 05 Nov 2025 11:00:09 +0000
Manifest next update: Thu 06 Nov 2025 11:00:09 +0000
Files and hashes: 1: glEOdXhVW21eI1WzkfhB7HXgdWk.roa (hash: NB7punoyXRSMYamA4JNNL+eHLxMEHb1wLp8lwyoauNo=)
2: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: oZcO6Sb5GFcoXhRiDxyhK4kaCYwpVwl6f1rTv9fornY=)
3: ybYQIpMfde41Tc94ckzGr4yZyvk.roa (hash: o6qsKgPuxOXvm5e0AfBzKvfmoP1y9YyfuSfaRj+weT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:91:89:1a:34:cd:42:2e:40:d0:85:8f:a6:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Nov 5 11:00:09 2025 GMT
Not After : Nov 6 11:00:09 2025 GMT
Subject: CN=43d9b6796750bad57631406e7c282856d622f529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:f3:06:f4:38:64:a7:17:c4:5e:dc:da:56:
7b:1f:48:52:83:80:57:46:ea:fa:b7:c8:41:57:97:
dc:6c:6e:00:24:38:9b:a5:f3:f1:95:ca:23:f0:19:
20:f2:5f:14:39:19:f2:b0:61:7d:78:00:4d:da:64:
21:4d:71:d5:79:e6:55:75:5d:0d:6c:e1:84:de:c6:
c1:e8:d3:8c:d2:90:16:82:6b:56:dd:3b:7d:02:ac:
34:2b:23:ca:d1:ab:20:2b:30:4e:06:6b:41:6e:66:
ce:d4:84:f0:5d:30:40:65:e7:0d:21:a2:1e:e9:0e:
1c:40:3d:81:d1:dd:54:d5:29:97:04:a0:49:bc:6c:
4c:49:75:18:ae:ec:d1:64:93:8c:05:36:df:95:19:
fc:89:3a:b1:af:ba:3a:ce:d0:e7:b0:d7:bb:b2:a1:
e0:63:ff:58:8f:8e:77:f1:10:bd:4e:2c:66:f0:0a:
ed:ca:2e:0e:b9:17:ea:02:ad:94:33:3c:45:c8:bd:
d5:23:44:e7:b3:ea:14:a5:46:ff:84:e1:42:8c:b4:
04:90:d1:04:84:8f:ef:df:07:39:d1:ef:cd:49:e9:
c1:ae:49:74:ce:8e:d5:68:b7:e7:de:5f:e1:8c:d6:
23:1d:69:f3:31:4e:60:3a:52:ec:09:dd:83:cc:08:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D9:B6:79:67:50:BA:D5:76:31:40:6E:7C:28:28:56:D6:22:F5:29
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ec:0c:26:6f:ff:8f:a7:2c:bb:6a:dc:a0:34:7c:33:fa:b7:
e7:9e:3b:6c:88:ec:a6:37:aa:04:03:e9:fb:fe:2a:3a:26:91:
b8:c8:cb:ce:a3:0d:59:9b:f8:cf:9e:1c:bd:0a:e7:4d:2c:40:
96:a8:94:34:ec:af:2b:7a:51:dc:0e:ca:d9:ab:de:e4:99:40:
17:02:c1:48:58:78:58:22:38:b6:6d:c2:43:e5:8f:44:5c:5c:
4d:6b:87:df:86:8f:74:b7:29:c3:96:d2:1d:ba:6e:ce:e2:4c:
d5:97:8a:33:cc:c4:3b:b1:9a:b0:21:66:37:05:12:e2:8e:3a:
fd:f2:06:02:a5:66:d4:93:73:9d:76:22:58:ed:e7:5b:c0:68:
2c:b6:7f:77:85:97:d4:23:70:99:64:e2:5a:65:b1:33:bc:4e:
a0:4e:7b:11:b6:95:72:38:a4:80:6f:a6:2c:03:60:29:8c:60:
d0:e3:ff:00:34:dd:73:2a:70:91:65:85:db:b9:1e:ab:83:c9:
6a:16:2e:79:f2:8b:d0:4d:dc:29:8a:03:3f:c6:6b:66:c2:02:
ef:3c:59:78:12:0c:dd:b9:69:e5:1f:ca:ca:ee:fa:75:5e:19:
25:1e:ea:e5:98:38:95:99:b9:9a:6e:7d:81:f8:97:ee:81:3d:
47:6f:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:46:50 2025 by rpki-client