Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: WTFB7AFBNbtW5ROheEiThdn1ADuqJE6bkUiqAbJaYVE=
Subject key identifier: EC:12:4A:86:61:85:BA:44:28:2E:48:72:E2:7E:98:42:35:5C:56:6B
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 019A4E86B2D34E02F1095FDACCCDAD68A592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 15E7
Signing time: Tue 04 Nov 2025 11:00:41 +0000
Manifest this update: Tue 04 Nov 2025 11:00:41 +0000
Manifest next update: Wed 05 Nov 2025 11:00:41 +0000
Files and hashes: 1: KOY956O0ZjGYECFFFDbPr__HT1k.roa (hash: PSHRUyvb1HDzLSIQ11VKvNrKXl5fv+dVEb1Xq/ei9D8=)
2: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: DRopa7WLdL6ZfdyDmUFbQWg0U0YFFcaey7q/WxLwNT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b2:d3:4e:02:f1:09:5f:da:cc:cd:ad:68:a5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Nov 4 11:00:41 2025 GMT
Not After : Nov 5 11:00:41 2025 GMT
Subject: CN=ec124a866185ba44282e4872e27e9842355c566b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:41:f9:7b:bd:f2:a9:6a:a4:49:89:8e:8c:
8c:84:d7:53:86:3d:87:0e:29:ed:00:b1:f0:73:d4:
a8:f0:d5:04:d2:67:1f:31:44:ae:61:b2:05:f7:30:
0c:3f:c5:cd:e0:c9:3e:c2:f8:3d:25:71:ff:eb:c3:
30:97:69:e5:08:1e:b5:4b:34:ed:a9:cf:22:43:56:
cc:ee:74:b0:4b:b8:2a:67:55:b9:88:30:fa:41:a2:
cf:66:5e:d9:e5:5e:6c:b8:e2:7b:8f:61:98:cd:6a:
6e:e5:0d:79:b2:68:de:82:a6:8b:2f:19:e1:d9:00:
5c:ff:d2:be:9e:e2:32:f5:26:d8:d3:f0:fb:c3:9d:
9f:06:a9:38:af:f4:b8:c5:9e:72:8b:33:c8:78:f9:
74:43:cd:e5:ba:f9:91:16:10:27:a9:6b:ac:09:2a:
22:fd:f6:05:2c:c3:41:b1:32:36:76:ef:41:00:ef:
9c:6c:4e:a3:4f:8a:65:bc:9e:e8:0f:e5:f5:48:2b:
a6:8b:ea:1b:35:c3:04:4d:e2:49:a5:3f:36:62:6e:
5a:78:c8:70:8e:74:79:76:8f:3c:c1:59:43:92:1b:
c8:c4:75:fd:8e:6b:e8:03:9f:60:76:70:be:d1:d6:
11:63:ac:03:f0:57:52:48:da:79:5c:2b:bf:a7:98:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:12:4A:86:61:85:BA:44:28:2E:48:72:E2:7E:98:42:35:5C:56:6B
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:5e:06:56:18:b9:95:6c:d7:62:29:ee:02:ac:15:cb:90:
9b:65:3a:2b:13:1d:a2:ab:bc:8b:d8:3c:58:12:dc:66:c1:b8:
2e:cd:e0:af:a9:9d:cb:fe:43:01:61:27:39:4e:75:37:90:85:
98:fc:eb:97:af:fd:ca:a1:88:ed:f4:3d:e7:b1:84:1e:d2:8a:
eb:b8:0b:76:81:cc:36:24:a7:d6:df:85:a3:01:b1:67:47:87:
27:23:84:e6:0d:19:32:15:7c:29:a5:4b:6c:78:29:0c:b0:ec:
d7:f9:99:c0:5a:4c:f0:3e:47:62:a2:d4:b3:eb:79:9a:80:39:
a1:e4:8d:f0:cc:e7:6f:8e:48:13:7c:e8:97:02:f4:14:d0:a4:
f4:2f:cf:24:67:d0:04:d2:f4:db:b8:14:b2:35:9d:40:a7:6d:
ed:77:5b:ae:a4:cc:c0:2e:61:a2:b3:b0:fb:4a:e6:32:1a:a1:
e0:bb:e6:6b:3d:48:ea:7f:ef:40:34:20:47:dd:41:88:05:c5:
15:45:8a:82:a4:1a:43:6e:e6:fc:5f:ba:d2:ac:34:1b:f8:a2:
56:15:d3:60:ef:07:0a:32:62:bd:8b:6b:32:d0:58:53:14:cf:
2b:1d:9a:e4:77:7b:33:80:6e:02:ab:b5:22:c3:20:8f:26:7b:
cd:44:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:54 2025 by rpki-client