Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: wfJD+UHfH+OGEHzZjwkDYyAtS40/LCFk/X09wfx389c=
Subject key identifier: FC:2A:3D:71:58:44:9C:A2:D3:8D:E1:E4:00:7F:6B:24:5C:92:C6:BC
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019A503E004DCEB95A5C97488E73D2AB391E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 16D3
Signing time: Tue 04 Nov 2025 19:00:31 +0000
Manifest this update: Tue 04 Nov 2025 19:00:31 +0000
Manifest next update: Wed 05 Nov 2025 19:00:31 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: 91k5FnyEZpbC6W0AZebTBVSj7K6wJDafS9+C8QVNsJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:00:4d:ce:b9:5a:5c:97:48:8e:73:d2:ab:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Nov 4 19:00:31 2025 GMT
Not After : Nov 5 19:00:31 2025 GMT
Subject: CN=fc2a3d7158449ca2d38de1e4007f6b245c92c6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:d3:71:61:c1:99:ed:c7:5c:f7:c6:50:60:
e5:ac:76:f1:2a:97:86:88:bc:63:ea:0e:75:7c:11:
18:39:5e:c8:38:6e:cf:8f:6b:76:cc:f2:b4:aa:74:
4a:ea:16:4c:13:48:8b:c5:65:da:c6:d8:c6:b8:22:
66:f7:a4:e5:fd:c9:3a:29:b2:d0:58:6b:56:88:76:
0a:f4:85:6b:64:52:69:66:52:4c:5f:af:60:27:ea:
8e:6e:ff:ec:65:10:f1:4a:92:04:19:e5:c4:71:64:
51:c9:01:30:77:5e:5b:d9:89:30:79:3b:f5:e8:82:
83:91:65:cc:80:aa:cb:25:fa:6e:61:1e:17:37:76:
51:62:f2:73:1a:a4:a8:95:ce:6e:ae:af:5d:37:08:
4d:1f:79:2b:10:36:18:a0:3c:fb:a6:9d:0a:75:14:
ea:43:13:fd:4c:d1:78:4b:13:86:39:98:0f:ac:90:
20:bd:6c:45:3c:20:0e:ef:8d:64:88:c9:fd:29:ae:
f9:a8:d7:0a:fa:0d:1e:5c:8d:f5:45:65:2c:f8:55:
eb:45:45:e3:ab:98:94:a0:bf:d0:20:01:59:44:ea:
78:4a:89:d8:67:aa:6b:d5:24:9c:f9:4c:e1:93:1f:
af:d4:33:3a:df:9c:22:67:5a:d8:e1:7b:01:26:9c:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:3D:71:58:44:9C:A2:D3:8D:E1:E4:00:7F:6B:24:5C:92:C6:BC
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:19:7a:fb:f8:11:57:21:0d:99:82:66:df:38:b8:c8:8a:a8:
94:02:0b:92:a8:4d:6c:b3:b9:12:b1:ec:7f:ea:c2:26:0b:07:
c2:c2:02:26:32:ee:fe:6e:34:27:e8:f5:b4:81:7b:9b:ee:ca:
72:24:2b:1a:c0:22:e2:40:b3:cb:92:d4:b0:78:c6:a8:ec:1d:
d2:8e:c4:68:80:81:3d:89:f9:29:bb:e7:b8:4f:85:e8:74:e7:
5a:f3:98:3d:28:47:89:ef:37:da:62:88:61:3e:d3:8f:c2:d0:
1a:5f:c2:b5:66:92:fc:03:5b:7d:7a:07:e5:0b:91:55:72:8c:
81:46:e6:f9:c7:28:37:8b:77:08:8a:64:ce:b1:24:57:a3:72:
29:d8:7b:01:50:17:09:56:45:bb:84:6d:2d:e6:75:96:75:99:
9d:7f:7b:06:d2:88:47:f4:66:45:34:d8:f3:84:ce:50:5f:1c:
a7:9f:67:77:76:6c:8f:14:fd:a0:1a:bc:92:06:d5:fd:b7:12:
f4:6e:f5:b9:a9:4d:08:d4:cb:ff:2e:1e:3a:9f:75:98:d2:95:
55:3c:3e:be:16:5e:68:6b:35:aa:ad:9a:4a:d5:9b:ca:27:b8:
0b:c1:c4:b1:b3:0f:e1:fc:f5:74:3f:a8:94:c3:41:36:7c:a3:
00:5e:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:33 2025 by rpki-client