Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: T2oRfLPXRJst1OlRWUFlM6mJwcuVPK8C1I7Cty9Anw0=
Subject key identifier: F6:1A:73:C5:05:44:15:48:CF:CE:28:80:B1:3B:9D:56:41:AE:FB:D8
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 019A4F993E04167F8482C43CC31A82EFB38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 16:00:34 +0000
Manifest this update: Tue 04 Nov 2025 16:00:34 +0000
Manifest next update: Wed 05 Nov 2025 16:00:34 +0000
Files and hashes: 1: JTEfgbcrr8NRTkw-w0rbLDkwOBo.roa (hash: pDGrFl+zPntVOdC+wAqPCIkri5GYwFIWXTpGxCwXD/o=)
2: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: t+ZV0Ann9nG216u+sg9cyn02Lv39nLJHXdnYj1ZkQO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3e:04:16:7f:84:82:c4:3c:c3:1a:82:ef:b3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Nov 4 16:00:34 2025 GMT
Not After : Nov 5 16:00:34 2025 GMT
Subject: CN=f61a73c505441548cfce2880b13b9d5641aefbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:76:1b:9b:9e:2f:40:60:bd:e1:54:fc:8a:
5a:28:6e:0d:28:f6:63:63:24:04:86:54:4f:e4:1a:
1d:ba:39:4f:f1:c1:4c:98:f9:40:f8:4a:28:c8:73:
98:7f:d9:b7:d9:34:47:29:99:d0:d3:35:7a:cd:9c:
8d:01:17:f6:41:20:23:01:ab:29:9a:b3:3d:0a:98:
96:71:2c:8c:f0:3b:10:f5:81:90:dc:14:9a:8a:02:
fb:ef:b5:7d:d0:2f:bf:ae:15:7a:c1:2d:d7:97:26:
cf:75:47:77:8d:f7:40:c6:99:19:40:d3:f5:d6:32:
9a:0f:7a:44:f2:45:c5:d4:57:4d:38:11:41:4d:13:
87:17:05:f5:be:54:3d:72:9b:2b:62:92:ab:65:13:
0f:35:40:06:0e:bc:38:63:d5:3b:b2:29:38:b2:80:
3d:4b:62:0b:ba:51:c3:55:71:65:2e:de:0d:47:4e:
52:c4:ab:cf:2e:ff:27:56:16:ff:c9:07:03:87:54:
34:e8:df:9a:3e:ec:b3:f3:9c:9c:8d:9c:c6:bb:b5:
33:17:a5:fe:5e:2d:54:96:05:37:cc:ff:f2:11:ce:
70:97:fa:c4:c8:74:9c:ab:e4:55:f6:ee:4b:bd:38:
c0:ad:14:c5:41:77:7a:ac:83:79:3c:be:1b:57:e0:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:73:C5:05:44:15:48:CF:CE:28:80:B1:3B:9D:56:41:AE:FB:D8
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:d9:ac:59:75:d1:ea:50:16:cc:c9:91:dd:c9:40:5b:ea:
fc:e7:dc:3c:84:a2:92:68:30:d4:8f:fa:9e:d0:3d:c3:d6:7f:
c7:32:db:0f:a0:05:f5:f8:b7:38:14:4a:d9:69:00:c2:8c:d2:
34:f4:4b:e0:37:60:23:2e:1c:ac:f7:9c:6d:16:3c:35:89:c3:
d9:77:db:aa:2b:9f:8a:5e:2e:86:3f:fc:d0:c3:12:22:97:82:
ba:78:ef:ca:ed:2a:46:fd:4c:7c:64:13:47:88:97:18:f9:3a:
bf:b1:be:a4:85:9a:35:34:c1:10:10:9e:05:14:96:94:7e:93:
b6:df:a3:15:c8:82:6a:15:93:9d:fa:f9:06:ac:fa:95:ef:51:
01:cc:f1:e2:80:8d:93:84:7a:51:68:e4:11:22:33:a1:df:a2:
62:6c:38:77:4e:de:6f:84:67:ef:29:84:f5:d6:c9:0d:b7:7c:
b0:9c:34:6b:5f:79:d8:b5:ab:be:73:9a:30:05:00:10:d9:59:
24:15:13:54:8a:c0:94:38:90:a9:27:0e:81:01:1e:ba:48:2e:
a7:ee:32:79:f5:ab:7a:e2:61:4b:95:1a:4c:46:61:16:f8:5c:
e4:21:d8:a9:16:40:eb:3b:b4:f1:aa:89:86:86:57:3d:95:dc:
52:41:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:01:30 2025 by rpki-client