Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: hs4fwdMuxaXiohYQKOKniUtj90je8rXWtKyPDDQBBZw=
Subject key identifier: 10:1E:BE:A8:C1:9F:02:9C:2E:AC:DE:F8:89:A6:37:51:33:D4:D4:B2
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 019A4C986438C0FE53E5FFC7B8372CE93176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 02:00:46 +0000
Manifest this update: Tue 04 Nov 2025 02:00:46 +0000
Manifest next update: Wed 05 Nov 2025 02:00:46 +0000
Files and hashes: 1: Kp9T4yQ0BWzmIgTW27o6VMb8qh4.roa (hash: 8tmSpbSEt6oRRtmXjjT27qxLy0bdW3q5K1nXAwi0cxU=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: soSi3C9Qczwa2ikjP7Ikt083orOoL20eHtagqDZQfp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:64:38:c0:fe:53:e5:ff:c7:b8:37:2c:e9:31:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Nov 4 02:00:46 2025 GMT
Not After : Nov 5 02:00:46 2025 GMT
Subject: CN=101ebea8c19f029c2eacdef889a6375133d4d4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:7c:98:f7:09:c4:2f:ff:ec:19:82:81:87:
78:50:cd:6b:58:4b:94:9b:f2:f3:38:7c:bd:7d:1a:
c7:95:0b:97:7c:36:c2:bd:a8:ab:a8:c5:f4:a4:2d:
17:e5:bd:9f:f3:e2:e0:23:97:9c:4d:7b:a2:18:f1:
96:e7:40:ad:0b:17:28:35:97:2b:f6:b7:97:9d:fc:
6c:1b:cc:07:94:39:2f:88:bd:57:0f:96:96:de:a4:
32:9f:e7:28:1f:10:5e:e7:ff:ca:06:e6:79:3a:eb:
27:a5:87:b1:e5:88:95:26:67:23:58:82:6d:de:9b:
3c:65:22:60:1f:40:ad:4a:66:c4:06:84:50:0a:9b:
90:0b:03:ad:f1:c5:b6:b0:e7:dc:e2:bd:93:5f:10:
34:5d:86:9f:fb:e5:fc:00:10:e0:c1:8c:41:c7:31:
ea:fc:dc:e3:74:2d:8f:99:4f:c6:ff:29:e7:84:75:
15:49:c4:57:a6:1a:97:9c:dc:17:01:a5:5f:6d:0d:
08:cb:09:af:af:0f:e6:0a:16:42:fe:31:e1:7a:63:
52:b4:11:f1:b0:9d:b3:3c:47:42:7a:2f:02:37:94:
73:b3:99:9a:b0:54:27:28:20:01:81:25:c0:d1:c1:
c5:c8:6a:5c:ae:d2:de:da:8d:14:fe:76:31:59:5d:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:BE:A8:C1:9F:02:9C:2E:AC:DE:F8:89:A6:37:51:33:D4:D4:B2
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:73:8d:13:c7:1d:05:f1:b8:c0:fe:43:8d:ee:4e:2d:9f:71:
1b:cd:cc:a8:5f:d9:c2:52:bc:39:a2:eb:31:6d:8a:52:f4:e2:
fa:c2:a6:0e:85:45:0b:9f:68:85:3c:74:5e:06:07:a0:f2:2d:
6f:8f:48:21:c9:6d:5e:8a:2b:98:0c:db:5a:0c:11:69:76:c0:
b9:ed:21:64:a9:a0:db:76:07:36:16:48:94:79:38:ce:a9:f8:
21:41:b6:d3:d9:53:b5:de:a5:52:5a:b7:82:4c:0a:3a:cf:e9:
50:92:d7:2a:0b:dd:34:f7:a9:69:43:da:48:7c:23:d7:21:55:
7c:41:ef:f2:13:92:93:74:75:b0:60:93:b2:76:4c:59:24:9d:
60:e6:ab:9e:a8:34:af:1c:e1:05:9b:80:d1:27:8b:3d:ea:77:
47:b2:64:ce:56:e9:93:8a:ee:48:a1:d5:28:b3:62:9d:fa:0e:
92:1d:2f:bb:7e:f1:3b:a1:c0:6f:87:14:23:7a:a7:e0:ee:86:
8e:07:c4:a8:b1:4c:e6:6b:81:f1:19:72:77:f2:c9:9f:b5:3e:
49:cd:39:79:01:0c:9d:b1:ab:4f:6b:82:15:9b:ef:e6:dd:8f:
97:40:ea:f6:29:cb:a4:c7:8e:2d:62:15:4f:8f:5c:4d:99:1f:
80:8e:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:01 2025 by rpki-client