Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: 3+t3V+CJ3t8Ggi+vZKzjazydnxgaKu3YZc8g4kXtpdw=
Subject key identifier: 14:3A:29:27:9D:8A:19:C7:26:B3:88:EF:5A:58:1C:CF:D3:20:E8:82
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 019A4E866609DA9C1C1E56F255F2806F80D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:21 +0000
Manifest this update: Tue 04 Nov 2025 11:00:21 +0000
Manifest next update: Wed 05 Nov 2025 11:00:21 +0000
Files and hashes: 1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: Qqiwaj7S7LNWfGiRA+ARNZT5GAPxLKAteN9ALPVm0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:66:09:da:9c:1c:1e:56:f2:55:f2:80:6f:80:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Nov 4 11:00:21 2025 GMT
Not After : Nov 5 11:00:21 2025 GMT
Subject: CN=143a29279d8a19c726b388ef5a581ccfd320e882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:9c:32:1e:d8:00:9c:26:47:73:32:25:a1:
09:d1:d8:fc:c7:69:62:45:a4:ba:97:fa:8d:3c:00:
d0:7a:e5:6d:59:46:7b:d6:95:e2:eb:22:24:e0:e4:
52:07:be:2c:31:18:ed:65:3b:7f:75:56:9f:3d:d0:
69:2b:b8:3e:8a:d1:20:d7:c1:97:09:51:a0:a5:a8:
2e:f1:d9:6a:be:b9:0f:10:31:d0:26:be:10:80:ee:
ae:8d:94:79:3b:77:a4:8a:45:81:eb:bb:f1:cd:95:
f6:b5:51:64:c6:7d:35:67:98:b1:35:78:03:70:4c:
14:aa:53:24:b6:4c:c6:b5:e8:41:85:d4:a8:c4:fd:
a8:3a:f2:e6:59:d5:39:f7:3a:63:6f:7c:40:4a:8e:
f3:65:ff:bb:7a:35:44:33:86:37:d0:5c:e6:a0:8a:
e0:0b:91:a2:fd:bf:17:f7:12:10:8f:3f:bd:f2:f6:
04:1a:9c:a2:13:d8:ff:b1:2a:d3:4f:ad:86:66:2c:
21:19:69:6e:8c:a6:2c:b0:c4:10:99:3e:9d:9f:3d:
83:0a:f5:e6:37:fc:8d:70:0a:be:f5:9d:1b:0b:8c:
e9:7c:4d:50:31:53:a4:53:96:be:0a:fa:5e:47:99:
84:de:35:00:06:39:42:62:cf:60:63:1d:1c:47:d8:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:29:27:9D:8A:19:C7:26:B3:88:EF:5A:58:1C:CF:D3:20:E8:82
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f5:36:a5:5d:f5:2a:09:5c:33:5b:30:1b:b3:71:d3:9f:17:
55:63:4b:66:3e:bc:4c:ff:f8:d8:97:ad:0b:2d:bb:08:77:c1:
2d:9a:60:52:63:94:af:d1:d6:e0:2a:99:31:72:92:ff:ac:9c:
39:10:40:3f:25:86:41:92:71:fc:20:50:61:27:67:82:df:63:
7b:6b:a7:1c:a3:db:08:5b:2d:d2:6f:89:28:aa:ae:e0:4b:79:
e8:80:64:b7:09:24:7c:c9:e9:5b:f7:d5:43:a3:63:d0:29:1d:
56:73:f2:06:7b:76:dc:bc:4f:34:a5:0d:0c:3f:b2:59:a6:48:
ae:c9:65:87:76:22:0a:21:6f:0f:53:57:17:42:a4:d4:6b:e4:
30:fb:af:f9:9e:a1:c4:30:cd:72:93:40:5c:af:93:ff:60:ab:
8a:5e:8b:e5:68:6b:97:80:69:8e:ad:fb:1e:49:49:0f:cd:9c:
b1:26:a5:c5:39:cb:e1:a8:7d:14:da:85:66:0c:e1:25:21:42:
c5:0b:ea:39:9d:66:94:64:e2:0e:04:fc:c0:c6:9d:ff:1e:0a:
c0:c7:5a:1a:26:d5:6f:19:cd:5a:9e:ef:b0:6a:52:38:10:81:
69:7d:ec:3e:16:cc:a9:4e:e6:73:85:15:49:79:a2:81:5f:a1:
9d:31:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:52 2025 by rpki-client