Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: parSPih2JdlO0QAz5kc0cUe4RNaglvEc/EYkV3DBF8E=
Subject key identifier: 82:47:53:0E:1A:EE:B2:82:9C:53:84:FF:36:C9:57:62:1E:FA:50:9D
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 019A4D05CDABCF2029D669BEC365AA29448C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:17 +0000
Manifest this update: Tue 04 Nov 2025 04:00:17 +0000
Manifest next update: Wed 05 Nov 2025 04:00:17 +0000
Files and hashes: 1: Fih80Nlgmx3m_whvZZHZZjIiang.roa (hash: VaQgFDqa2oxdRNRXm5kYRO6eCGdj59ZMDn/K3AC/eNc=)
2: RbrpoNIXXajBUk8qJ4MBqJWZufY.roa (hash: nmur79J+mSsD2EymOR4FrGYKf9dZed60SfRTgagedsI=)
3: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: 9ZONTT82vlclF7y52k7yZXfJRg63HyE1AU5SrW3lVCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:cd:ab:cf:20:29:d6:69:be:c3:65:aa:29:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Nov 4 04:00:17 2025 GMT
Not After : Nov 5 04:00:17 2025 GMT
Subject: CN=8247530e1aeeb2829c5384ff36c957621efa509d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:f0:e7:f1:07:8c:11:e2:fb:78:af:e0:62:
e4:69:32:66:17:c5:a8:51:f7:a2:d7:ff:86:98:ee:
24:73:a3:25:67:d4:b4:03:61:3d:9a:60:72:ec:96:
69:13:09:6f:4e:58:db:1e:b1:97:ce:c8:4f:87:ea:
08:9a:a2:56:44:53:c4:3e:34:84:c1:21:d3:2f:c4:
52:40:12:cd:2e:03:07:2e:a1:5b:5b:34:39:50:71:
e6:67:a7:85:8f:0b:cc:11:9c:c0:46:fc:cf:fd:e3:
82:92:04:18:a1:e4:b0:7f:da:fd:6d:78:8c:1c:b0:
a5:cc:cf:08:87:1c:0e:a6:e4:9e:98:d3:e4:7b:ae:
04:9f:16:7d:77:77:55:c6:70:73:be:2b:12:f4:44:
6f:7a:ce:02:36:dc:2c:9a:f2:f5:12:4e:df:07:ac:
01:0c:28:ea:9a:de:6a:48:6c:f9:04:34:49:3a:2a:
84:bd:84:39:f9:1b:c4:d6:8e:91:1c:44:db:7c:f6:
1b:ce:a9:7f:a8:fb:19:42:65:6f:b9:4c:63:be:c6:
75:36:f5:43:4a:08:4d:2e:e5:55:c7:92:31:dd:eb:
49:eb:4f:65:26:fa:30:11:52:d4:da:ac:15:0b:b8:
84:dd:ac:08:f4:bf:54:84:3d:cd:ce:a4:83:1c:18:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:53:0E:1A:EE:B2:82:9C:53:84:FF:36:C9:57:62:1E:FA:50:9D
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:8e:f1:5a:ef:7d:7b:cb:4f:db:1e:30:93:35:d5:fe:7f:
8c:15:b7:4d:b5:1a:5c:f4:58:63:94:0b:42:ce:d8:31:c5:d3:
20:86:b3:7c:3e:5c:26:4e:fe:d2:fd:0c:c6:5d:d7:9b:0f:d6:
f2:65:91:23:ca:8c:51:00:e5:ad:59:65:77:71:37:3c:a3:50:
0e:0e:ec:9a:22:5a:c5:58:9f:77:2f:8f:9c:c0:3c:07:ab:8c:
0e:f9:a1:56:af:f0:d5:40:28:d7:0c:a1:84:cc:5c:38:86:c4:
a6:02:85:90:a4:2d:22:d1:65:df:d9:9d:dd:59:03:d8:c3:2d:
44:f5:c4:ed:fe:e6:f9:7c:7d:71:47:6a:dd:79:9d:a0:34:e9:
d2:f8:1a:e1:70:9f:ba:22:c3:85:17:29:0a:b0:cc:72:9b:e9:
b9:ce:3b:0e:aa:75:f5:bb:0a:17:a7:44:83:58:90:0c:77:36:
0a:5d:72:57:64:76:43:8f:6b:24:56:7a:e8:de:9e:ac:58:0b:
f4:79:a6:b6:03:bf:c2:e5:2f:ff:d6:83:09:94:f9:0a:58:26:
70:c2:c0:f2:bd:08:8d:18:c0:94:5d:e1:8e:a1:96:1f:1a:3e:
9c:c2:35:be:eb:68:c9:ef:2a:a5:1e:82:fd:82:6c:c9:59:19:
20:65:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:09 2025 by rpki-client