Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier: 2vntyp+l4JInVjKtx4eyXaCWnXbqUbvbwuZ49ugBW8g=
Subject key identifier: E0:F0:D1:0D:AF:D8:93:A2:BA:24:EC:25:E7:A9:F3:D3:FE:BF:F2:89
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial: 019A4DE208E9B2BF9BBF97AC411945A60BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:50 +0000
Manifest this update: Tue 04 Nov 2025 08:00:50 +0000
Manifest next update: Wed 05 Nov 2025 08:00:50 +0000
Files and hashes: 1: PA8CjloTPg-68N7OnvoYD-1oLhk.roa (hash: 4/Ym4G39HmXB13TW6+krF+Wwi7w8FIhxrF2UkWzgLLU=)
2: c26zPerzgVBHPu_vijyV_Oovrl4.roa (hash: Gk43PDLGRAfU27KozR+OSnOsvS5KnMxHT/HJnzP3YQ0=)
3: i_g5q7-hPStlEv1O5n0OZOzfR60.roa (hash: m3x1cS4XhcesKKNznb1VTlqwdh2lVHJU/PvB8L7dB+M=)
4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: rCFXzreJXWrSF1K8x6G8HPOKblkVSj3DKyiFhJAkE1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:08:e9:b2:bf:9b:bf:97:ac:41:19:45:a6:0b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Validity
Not Before: Nov 4 08:00:50 2025 GMT
Not After : Nov 5 08:00:50 2025 GMT
Subject: CN=e0f0d10dafd893a2ba24ec25e7a9f3d3febff289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:18:2b:99:ce:a3:5d:a7:40:e3:49:fe:f3:
90:79:b2:70:97:8b:52:61:82:28:14:45:0c:41:06:
17:d0:03:4d:d3:4b:78:ed:33:7c:b9:33:7f:9a:a3:
68:5e:01:1c:cc:4a:2a:09:81:f1:2c:be:73:fd:6a:
10:8e:40:a4:8c:70:0f:07:e2:b1:93:b8:bb:bb:16:
63:e7:5f:89:03:a8:4d:e7:04:61:13:2a:ec:f2:81:
85:8d:bc:22:73:6e:ce:fa:a6:25:a7:ff:7a:a7:09:
e3:55:49:64:39:ea:fd:a5:fc:ad:be:f5:ae:a5:bf:
69:80:2e:3f:28:20:41:d7:60:69:f0:3c:c7:f9:74:
46:13:a7:dd:db:5d:82:1e:05:0c:82:1c:c8:e6:53:
90:d2:69:6c:f8:c3:92:f3:0a:71:15:1e:b2:59:4b:
ac:82:c6:e4:7a:28:da:85:cd:56:03:8d:aa:bd:47:
52:4e:1e:e8:68:2b:12:30:2f:c5:c5:8b:98:7b:20:
1d:24:d6:9d:b5:38:3b:14:fc:22:c2:04:4e:b9:14:
af:47:06:d4:d4:79:f8:6f:6b:e1:2c:a6:7e:68:d1:
16:6c:63:e7:d1:dc:50:78:1e:50:c5:1e:99:e0:5e:
2a:02:8a:82:f8:02:5f:84:17:d3:e1:65:4f:45:f7:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F0:D1:0D:AF:D8:93:A2:BA:24:EC:25:E7:A9:F3:D3:FE:BF:F2:89
X509v3 Authority Key Identifier:
keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3f:a0:c7:8f:98:4d:40:a2:c2:6e:a5:e1:cb:65:85:99:96:
2e:24:25:08:8a:12:05:ca:1f:7d:0f:5c:c2:71:a9:00:88:f5:
69:73:19:e9:9b:86:5a:e3:97:0e:d4:5a:ca:19:bb:43:3f:74:
dc:3e:a0:be:72:bf:1e:71:26:8a:09:40:bf:12:21:85:21:e5:
00:51:db:d6:3f:c6:90:b4:db:a5:59:d4:9b:7c:3e:f1:1d:cf:
f5:65:eb:dd:3e:85:71:7c:19:9f:ba:2e:10:70:53:de:49:1f:
61:21:ca:97:2c:f9:df:2e:92:d7:db:3d:05:71:6e:a7:a8:8c:
01:a0:28:a9:33:d2:6e:d0:4a:fc:48:d0:8d:f6:da:8d:c7:6e:
3b:6b:20:e7:de:bc:ab:a8:0a:77:5e:a5:c2:fd:f2:70:76:9f:
c7:38:4f:c7:32:0d:40:86:b5:72:4c:5e:83:ec:c0:86:a2:67:
90:98:49:54:8e:6f:04:ba:2f:9a:92:b5:d9:1b:4f:b2:d5:95:
3c:c0:00:bc:9a:67:cf:72:6b:1b:3a:08:2c:13:1f:de:17:04:
f8:29:1d:9e:89:aa:94:be:e0:c0:f6:68:fe:d1:f1:8e:30:c1:
b5:94:cd:19:b8:48:df:d2:95:14:7f:70:e7:e1:91:ce:db:59:
e7:15:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:37 2025 by rpki-client