Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: QnfqqD4ZBbFlTu8t7D8tjWZF6v5dCbzdbk8hoscVjk0=
Subject key identifier: BA:86:B7:8E:77:7A:4B:E1:D6:56:6D:7E:20:19:BC:42:A7:98:3D:A7
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019A4F991CC922A691B5658DAB7E6C44B61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1486
Signing time: Tue 04 Nov 2025 16:00:25 +0000
Manifest this update: Tue 04 Nov 2025 16:00:25 +0000
Manifest next update: Wed 05 Nov 2025 16:00:25 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: vCSHY4bzSomi8rKDfE5BPpaBisXaW8nKaQQC43iW4os=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:1c:c9:22:a6:91:b5:65:8d:ab:7e:6c:44:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Nov 4 16:00:25 2025 GMT
Not After : Nov 5 16:00:25 2025 GMT
Subject: CN=ba86b78e777a4be1d6566d7e2019bc42a7983da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:68:5c:78:59:6b:bf:ad:bb:43:ba:cf:76:
37:c8:eb:e0:92:33:d8:54:2a:8e:fe:95:2b:97:14:
93:e0:1d:17:1a:0f:b8:ca:c1:3f:5c:1e:fe:c8:f0:
f4:de:70:d7:0d:b3:fe:66:2b:af:4c:39:0f:be:c4:
69:f3:ca:2f:7e:8c:d0:49:b0:0b:6a:de:13:51:ec:
4b:0e:0c:d1:64:5b:a3:cc:bc:dc:25:35:fc:16:2c:
8b:82:cf:79:cf:fa:49:2e:bf:d8:53:29:e4:c8:32:
3e:e7:1b:9a:af:47:6f:80:76:22:2b:16:5c:85:60:
fc:cc:8d:80:ce:95:be:57:e6:37:66:51:e5:a4:8a:
1a:b9:62:e2:15:db:8b:b5:cf:0c:36:f2:fa:e5:db:
0f:82:6a:dd:db:ef:79:f1:33:79:96:01:17:ec:e1:
48:0b:a2:f3:53:6c:21:cd:87:dc:69:44:e8:2f:99:
3f:3e:65:04:b3:8c:b3:8f:a3:cd:34:75:b2:6c:ca:
1a:7a:13:5a:e2:39:d2:11:d2:6d:58:5e:f3:94:d2:
2c:a6:5d:65:45:eb:42:40:d2:5f:76:42:c8:5f:0c:
0f:ad:dd:7e:00:81:2c:14:65:b4:86:2d:f3:01:25:
ca:d9:09:8c:69:20:c9:39:93:db:15:e2:7c:b2:f3:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:86:B7:8E:77:7A:4B:E1:D6:56:6D:7E:20:19:BC:42:A7:98:3D:A7
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fe:27:a4:b8:9c:ae:ae:ac:0f:b9:de:f1:de:b4:46:7d:75:
31:ab:89:d8:ec:2c:ef:2b:09:c4:38:a2:a7:cb:65:db:55:98:
37:14:4d:60:7b:6b:30:c8:9e:55:91:11:fb:ae:56:b7:2f:05:
93:f2:05:9a:c9:b7:4d:1f:b8:a7:cb:7c:dd:18:56:09:90:49:
ad:f5:89:87:1e:52:95:c2:30:86:f2:1c:27:a6:f8:2e:65:ed:
86:4d:ad:f2:70:00:70:9c:de:38:61:0c:b1:1b:10:b9:c6:79:
7a:45:ba:84:92:18:71:03:1d:fd:74:61:8f:5b:ed:e2:2a:cf:
52:b5:65:ce:06:1c:6b:1d:74:15:3d:8c:2c:2d:6a:a7:a2:e9:
bc:f5:ac:7d:29:b6:aa:ab:52:d0:30:d5:46:d9:d3:80:7f:ff:
92:00:ed:31:63:ae:eb:88:c3:a9:92:63:3c:c6:fd:94:4c:dd:
e5:83:c4:5c:d8:56:9b:f7:63:bb:41:24:c0:d9:be:11:4c:e2:
e2:b1:14:7f:4b:5d:73:0e:e4:69:0c:2a:2f:c6:80:3f:3c:49:
66:25:f9:66:a8:3d:f5:a3:46:87:ef:a8:4a:0d:83:09:4f:c1:
7c:84:22:60:d2:8e:23:86:15:3a:80:06:6e:91:48:87:59:66:
e5:ad:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:57 2025 by rpki-client