Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: jU3rkn4usbqhukXgq7h+4wsxjZK+wFPTKdDxKq1Zbz4=
Subject key identifier: BC:6B:94:42:51:F8:23:F8:1F:F2:2F:EC:55:D9:D4:D2:AE:C3:2E:90
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019A4DE1627F0D173240D39AD1E3BA0B6E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 0F17
Signing time: Tue 04 Nov 2025 08:00:07 +0000
Manifest this update: Tue 04 Nov 2025 08:00:07 +0000
Manifest next update: Wed 05 Nov 2025 08:00:07 +0000
Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: McKpvaiFJhEjxTvpFsGTMdAIRxQBf0PqitShrtxfr6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:62:7f:0d:17:32:40:d3:9a:d1:e3:ba:0b:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Nov 4 08:00:07 2025 GMT
Not After : Nov 5 08:00:07 2025 GMT
Subject: CN=bc6b944251f823f81ff22fec55d9d4d2aec32e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:c7:4e:d5:d6:69:4a:18:79:8d:3a:3e:7f:
ea:cb:ce:95:76:90:54:50:c9:0b:6c:85:8e:4a:0b:
12:12:7a:d1:d1:e2:64:9e:fe:63:0a:d6:d4:e6:e3:
2c:e8:45:a8:d1:47:16:43:ef:b3:40:3c:01:07:fd:
19:41:d7:c9:60:a5:40:8e:1d:25:87:ec:c3:59:2b:
1b:a8:79:b9:45:51:17:5f:99:0b:f0:b7:5d:14:7e:
54:9f:ba:67:84:7d:2f:a7:45:fd:79:2a:3a:07:c1:
6f:e9:50:70:82:cd:45:8a:c6:bb:a7:69:41:70:fb:
75:b8:ec:34:06:14:ac:f6:0e:69:fe:22:bf:ea:01:
d4:9c:1d:4a:fc:03:3b:e7:83:ee:66:91:18:c9:d8:
5b:ae:ef:53:64:fc:32:2c:39:b6:9b:93:fe:05:48:
e8:06:f1:49:d5:83:ba:e4:87:4e:37:d3:d9:39:34:
7e:57:fe:ee:69:87:87:85:3c:d2:00:b4:18:da:97:
06:30:11:e8:0c:eb:f8:38:c6:68:9e:54:75:f0:82:
e9:97:67:9f:34:6a:49:f4:bc:5b:dc:82:c1:09:df:
12:83:3e:7c:ce:83:ed:e8:7e:b1:dc:14:56:bb:b8:
c6:97:76:70:ab:83:ef:f1:26:02:2c:75:7a:50:08:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6B:94:42:51:F8:23:F8:1F:F2:2F:EC:55:D9:D4:D2:AE:C3:2E:90
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d7:8c:fd:6f:c5:14:5a:cf:51:f3:d4:05:7a:7f:bb:3b:1d:
ed:99:95:1c:ac:f3:d0:6d:ee:8c:08:7f:d1:98:aa:56:c3:03:
73:5b:e5:21:a7:c2:22:fc:4c:3a:02:94:92:8d:3a:84:95:15:
1a:24:db:ec:91:78:6d:9c:9a:04:54:f7:c9:57:12:12:7f:c8:
1b:df:eb:0d:80:9c:aa:a2:99:a4:ae:c4:a8:32:3e:72:2a:64:
98:39:e2:54:97:41:c0:61:3c:14:a7:dd:a2:f3:a7:d4:56:28:
82:fa:4a:d6:26:2b:b6:af:d1:30:e4:2c:32:80:26:15:60:6c:
bf:9b:44:47:34:c4:04:81:ec:89:d1:97:de:8b:5c:7e:50:67:
88:0c:ae:7a:13:a9:f3:7e:bb:77:46:04:26:0a:73:47:29:20:
9d:d7:35:5e:48:69:d3:92:e0:fd:c7:d2:a6:69:01:3e:d4:c2:
2a:14:39:6e:47:9e:63:5e:d2:9c:8e:1a:79:53:33:80:6c:ba:
50:8a:a1:d3:ad:d9:e3:c3:e8:00:41:2d:9d:a5:cc:ab:44:3f:
28:e1:10:f3:5f:b7:00:b8:42:73:4b:4a:94:1f:c2:8d:ab:c0:
6e:10:31:0b:68:10:61:22:1b:24:6a:9c:11:7c:05:43:80:9e:
d2:4b:7b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:30 2025 by rpki-client