Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: +ZGdfxaeFe8WBNlxXKoI+912bVkqGcch2VlPpx4FbEs=
Subject key identifier: F7:04:95:98:84:99:61:5F:E9:0B:84:52:2C:46:03:81:8E:86:C6:CA
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 019A4E86698C533ADE74BCFA337BEE8A548A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 0918
Signing time: Tue 04 Nov 2025 11:00:22 +0000
Manifest this update: Tue 04 Nov 2025 11:00:22 +0000
Manifest next update: Wed 05 Nov 2025 11:00:22 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: e6ltQrlcUtUrNbuc4J7NItu1lzGL5M80GXFBNufdZ5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:69:8c:53:3a:de:74:bc:fa:33:7b:ee:8a:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Nov 4 11:00:22 2025 GMT
Not After : Nov 5 11:00:22 2025 GMT
Subject: CN=f70495988499615fe90b84522c4603818e86c6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:a7:fe:2f:70:f0:30:0f:5a:8a:7e:29:ab:
04:0a:f3:68:3a:5f:54:0d:e8:d3:fa:fa:cd:b5:09:
bd:72:5b:16:cd:f4:b8:bf:d9:d6:e8:e5:63:65:4e:
a0:92:16:f0:25:23:6e:8a:33:9b:81:00:7a:35:07:
14:be:f5:3d:ac:f5:24:1a:13:da:c6:14:a0:20:6f:
e0:81:fe:0d:5a:87:f1:84:b9:ff:c3:2f:3e:7a:44:
49:4b:a5:c1:26:d9:c7:2c:c5:3d:41:de:b9:d2:44:
be:59:a2:f4:ef:52:61:dd:98:f0:9f:30:5c:b0:05:
0f:7a:67:20:da:ce:01:01:8f:be:e9:67:a1:0f:1a:
13:7f:f0:13:44:2d:6c:18:63:ec:6e:e0:d6:04:4e:
18:0f:b8:c6:aa:14:7a:94:4e:69:a8:90:05:1d:4f:
8b:1e:2c:d2:f3:3f:5f:03:80:9d:75:cf:21:e8:13:
26:c6:27:1e:1d:16:b5:f8:b5:92:7a:03:31:ab:db:
4b:58:69:be:57:87:26:d6:da:f9:e2:2e:04:32:bf:
25:46:fc:56:2c:dc:31:f1:70:04:cc:95:97:07:ba:
be:b4:e1:37:9d:6f:ab:c9:1f:4b:33:37:21:71:46:
4d:4e:ae:43:db:2c:3b:2f:15:77:98:6d:8f:4b:dd:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:04:95:98:84:99:61:5F:E9:0B:84:52:2C:46:03:81:8E:86:C6:CA
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:83:ed:52:df:22:f9:35:c3:35:3a:ac:01:d7:d0:84:ed:6b:
cb:ad:9a:c4:7c:d1:42:c8:18:97:14:7a:a1:45:3b:6e:12:03:
2c:72:72:5b:c5:1f:a1:67:d4:50:d2:eb:24:be:36:1a:96:51:
85:d3:1f:bd:5c:54:d0:3c:6c:2c:cf:8e:be:a7:a7:b6:74:71:
ee:81:cf:14:f3:36:64:41:db:ab:93:41:05:b1:0a:60:9f:dd:
51:16:73:1d:4c:f2:5e:ac:db:ae:4d:54:a0:1f:6b:df:19:3f:
bc:fe:b7:91:f2:02:b2:a8:3c:16:f3:40:be:96:7a:05:9c:71:
22:98:ee:cd:55:a6:5b:76:62:09:f3:0e:2f:ab:0c:0b:bd:71:
4f:66:29:26:bc:6d:9a:f5:e0:a8:e8:98:34:20:e1:3c:87:b7:
4d:3a:55:9d:78:67:8b:e7:28:a5:7a:ee:45:13:99:73:d7:36:
e7:6b:56:19:44:46:f0:77:cf:9a:cb:96:56:25:1e:2d:27:6a:
f5:6e:cb:f3:49:e0:3d:17:89:8b:5b:05:18:e6:0a:bf:e8:a4:
0d:3d:77:bc:1c:7d:26:01:68:61:a2:d4:e0:71:d9:ee:3a:48:
a3:7b:a9:64:31:2e:96:b5:26:18:7b:0c:9e:47:fb:e8:1e:99:
2d:6c:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:40 2025 by rpki-client