Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier: Ez4A2aYHXONdTQ8BBfTZpuiBs0N4uNwdepcitl1OTrg=
Subject key identifier: 9E:24:E0:3C:FB:63:56:E1:81:63:79:32:CA:32:79:57:6E:94:75:2C
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 019A522C6976307FF8446C8F97931BF4962C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number: 09C4
Signing time: Wed 05 Nov 2025 04:00:33 +0000
Manifest this update: Wed 05 Nov 2025 04:00:33 +0000
Manifest next update: Thu 06 Nov 2025 04:00:33 +0000
Files and hashes: 1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=)
2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: kBX73cNFF/FnWv2A5Ka84f0ofAPHJCo6vMCN29vQ+GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:69:76:30:7f:f8:44:6c:8f:97:93:1b:f4:96:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Nov 5 04:00:33 2025 GMT
Not After : Nov 6 04:00:33 2025 GMT
Subject: CN=9e24e03cfb6356e181637932ca3279576e94752c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:09:96:97:1c:47:4d:d0:90:08:e4:8d:97:
a1:47:26:0d:de:a4:95:3e:25:c6:a2:62:0b:14:8f:
03:8d:09:2d:d7:3d:be:53:4d:a9:52:e5:79:ea:15:
fc:54:d0:6c:83:e4:b7:c0:51:5a:a1:6e:1f:d2:5a:
41:0b:93:11:42:6d:e7:27:09:d4:d8:44:a5:89:49:
59:ec:7b:fa:9e:90:63:76:9b:c2:18:3b:ac:ef:d4:
c8:13:41:99:58:76:df:9e:e8:2a:db:bb:ca:13:9a:
4e:9b:53:02:2e:32:4e:d8:88:ae:ff:48:5b:24:85:
66:0a:20:d4:96:db:d8:00:1d:9f:a0:72:98:d0:98:
4d:ac:34:02:80:f5:d4:fc:76:8a:12:a7:60:ca:67:
f9:e7:81:75:d5:11:3c:1a:09:99:8c:14:5a:ed:c1:
b2:19:de:9f:55:5c:6d:18:93:c5:9b:ef:35:3b:7e:
39:db:29:af:42:52:a4:2a:59:3b:9a:f5:26:4f:7e:
59:66:7b:45:8b:4a:f5:5f:71:55:47:55:3b:b9:87:
9b:71:de:03:b9:ec:9a:db:54:e6:55:7e:1e:1e:32:
32:9e:55:4c:35:d5:99:a5:3c:7f:e3:60:38:64:dd:
2d:46:ad:62:d1:84:35:b0:73:4d:28:b6:b1:9e:2e:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:E0:3C:FB:63:56:E1:81:63:79:32:CA:32:79:57:6E:94:75:2C
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6c:46:b7:e1:d1:a3:87:69:c8:0c:e1:91:bf:e2:1a:2c:e9:
91:32:5f:fc:24:84:57:5f:8a:f2:f9:ed:d1:a8:e0:7f:f0:63:
77:b7:92:9f:f2:c3:a0:83:1f:52:5d:52:e9:57:bc:96:50:33:
7f:ca:1a:98:d8:4b:d7:b3:d6:b1:09:68:08:6c:91:4a:cc:65:
e5:aa:df:03:8a:c2:13:0c:2c:c1:78:ff:c9:77:d2:53:15:8a:
ee:f4:7d:6a:0d:f9:87:58:eb:99:bc:0b:46:f4:46:2f:07:32:
3d:aa:8c:47:3d:8b:9b:d3:73:96:1b:56:c8:03:64:a1:01:e6:
a6:69:07:3d:cb:a6:34:a9:db:29:5f:c3:6a:fd:4f:b7:e7:94:
cf:0a:f1:7e:7d:cd:85:08:fe:67:c0:15:7e:dd:36:15:ae:2b:
a9:77:64:80:f9:b1:89:90:dc:6b:3a:03:8d:2c:55:02:73:1b:
22:a2:b9:fe:9d:db:e9:d5:9e:a9:87:96:48:90:16:3a:15:72:
24:1c:35:a0:6e:ce:2b:77:fe:f6:09:65:6e:ce:69:fa:44:37:
ba:0b:ff:b2:03:b8:0e:f6:3f:ba:ce:30:49:a8:db:4f:05:af:
ee:b0:89:68:8d:8c:d6:47:6e:dd:56:de:0f:2c:c9:8f:ed:1b:
0c:bb:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:59:41 2025 by rpki-client