Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: NMrcsXXqiuNKvEeRMLcnxQB+ES/DWf4IjzdbaXQmDRQ=
Subject key identifier: 79:28:8C:E2:C9:AA:3A:C0:30:BD:61:11:6E:F6:73:3E:78:88:B7:13
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 019A533F66875FF876C76DCF4FACCFE95B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 171F
Signing time: Wed 05 Nov 2025 09:00:55 +0000
Manifest this update: Wed 05 Nov 2025 09:00:55 +0000
Manifest next update: Thu 06 Nov 2025 09:00:55 +0000
Files and hashes: 1: HvGkzNX-LlaIXMSfIk5S1mOC0oY.roa (hash: cwXFNBAD/M2F0MUB/ov5M8039XefOPt3b2kagm/DMzw=)
2: ZqsDRLhiPpia2P-7RyyhANwTVV4.roa (hash: 0rsjP4AuQ2t0LszFPHOckD8EVFICht07+jDEBI6TOgQ=)
3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: tu34sHFgHs35u/vgNoZgg7sMwY7CCRhDpjjje0r6UWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:66:87:5f:f8:76:c7:6d:cf:4f:ac:cf:e9:5b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Nov 5 09:00:55 2025 GMT
Not After : Nov 6 09:00:55 2025 GMT
Subject: CN=79288ce2c9aa3ac030bd61116ef6733e7888b713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:17:1a:89:ad:b0:d5:7d:52:cf:cd:a6:db:
37:bf:5d:4e:ba:6c:f5:d4:d9:cf:94:df:1a:89:a9:
25:d3:8e:49:0d:c2:c3:17:61:6b:08:73:a0:9c:10:
6c:04:19:99:33:3e:6b:72:b7:60:81:0f:6c:65:e8:
6c:e7:13:21:3e:29:54:ab:af:cd:45:49:94:99:87:
3f:bb:b4:38:3b:5a:2b:4a:24:5a:d5:bb:1c:1d:f9:
92:3a:fa:b8:be:c7:6d:35:5b:f5:2c:1a:28:fd:e7:
95:ec:15:1f:d4:81:d4:8d:2e:7d:f2:5e:d1:51:4f:
5d:74:b5:fe:d3:ea:18:7a:6c:57:29:3d:03:9d:be:
80:8a:de:11:02:cd:ce:63:e7:e6:8a:09:99:63:cc:
9b:21:f5:dc:e7:3a:e6:dc:80:5c:bb:2b:f8:7d:07:
88:5c:16:20:b2:da:20:2d:ab:9c:5d:42:06:7f:07:
2f:5a:87:ae:05:57:6b:61:28:40:a4:a5:3c:9e:68:
06:1e:d7:9a:78:36:15:f0:cf:30:de:63:93:ce:61:
98:2a:f9:a0:0c:dc:47:48:33:a0:d1:98:4c:e4:36:
a3:e0:5e:60:02:fb:2b:0a:14:b7:61:9d:ee:10:5d:
09:2f:10:9f:a7:b2:fa:c0:e1:64:57:da:cf:d5:d8:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:8C:E2:C9:AA:3A:C0:30:BD:61:11:6E:F6:73:3E:78:88:B7:13
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:ef:20:a1:f9:6d:e5:5a:ae:4a:5d:4e:ea:b8:02:bc:a2:cb:
3d:51:0f:21:f2:cf:d5:35:77:70:9f:9e:11:b4:7e:57:d1:ac:
85:fc:0e:fc:0b:91:74:76:ea:63:58:ca:a1:2a:b9:0a:29:7b:
15:1c:0a:c6:42:08:ea:5b:08:b4:9e:84:92:3e:32:4d:9c:3b:
6c:e3:1d:11:df:a2:4f:73:eb:8d:75:1b:a9:55:0e:30:24:d9:
ec:70:37:18:0b:1d:53:b2:6d:52:d7:64:7f:a7:44:03:26:82:
27:c3:71:df:a6:53:15:fd:30:d2:35:dc:f4:b0:83:97:d9:45:
e9:24:21:c2:22:90:e1:ea:19:49:71:30:52:ef:59:a4:eb:8a:
4c:a1:b9:8f:51:f1:1b:9a:7d:31:f0:38:bc:cd:39:3e:ed:ac:
cd:0b:4e:7d:b9:45:57:6d:2e:17:b9:16:2d:03:5a:e2:80:ab:
25:e9:f5:1e:04:68:73:ca:cc:70:ee:34:77:f7:bf:1f:f8:90:
03:06:f2:de:ce:84:f0:8f:da:58:ea:53:c8:53:aa:cf:61:97:
3b:f0:68:7b:c0:66:ea:25:41:ef:2c:b5:0f:48:f8:5d:9f:61:
43:1b:f0:8e:00:bd:ed:ba:50:9c:3e:fa:f7:66:8a:00:fa:ff:
da:89:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:31:42 2025 by rpki-client