Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier: O4y5SAA7njbU2mwAO++zmeM7nO3E6nBx8KYxpeZoEB8=
Subject key identifier: F9:21:98:82:8F:93:21:CC:9C:A1:C4:54:E5:47:19:01:C2:2F:F8:7B
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial: 019A4DE1BB22370FCF43E53F12579D9FE0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number: 16B7
Signing time: Tue 04 Nov 2025 08:00:30 +0000
Manifest this update: Tue 04 Nov 2025 08:00:30 +0000
Manifest next update: Wed 05 Nov 2025 08:00:30 +0000
Files and hashes: 1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=)
2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: 0Hf8Or5EoLgOjr0g8nINSOKhcuAU12xAdVoo636UQWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:bb:22:37:0f:cf:43:e5:3f:12:57:9d:9f:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Validity
Not Before: Nov 4 08:00:30 2025 GMT
Not After : Nov 5 08:00:30 2025 GMT
Subject: CN=f92198828f9321cc9ca1c454e5471901c22ff87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:67:5a:d3:b3:e8:57:b6:e5:38:0e:26:3f:
ee:1f:39:f7:06:40:2f:7a:2e:cd:39:93:7d:9f:5d:
65:ae:a2:bf:1f:9d:8c:f4:97:ed:6b:f3:e1:4d:b3:
fd:f7:d4:67:58:ae:47:df:ec:83:98:27:e4:f9:60:
ab:b6:a1:86:00:b6:2a:8f:4e:00:09:f7:c5:26:1d:
59:7f:32:04:e5:02:2d:db:72:a2:33:9e:ca:a0:7f:
cd:5b:ca:86:c9:c7:96:73:48:5e:e8:8d:c3:94:d3:
04:f2:92:21:f9:92:39:92:e2:fd:6e:3c:4f:db:4b:
73:19:bd:18:6d:34:e7:92:46:5f:b1:65:bb:6d:a7:
95:7c:a5:a2:9d:2e:5d:1c:89:9d:51:5b:29:89:36:
ca:68:6d:1d:ec:53:ae:73:2c:51:fe:ee:b5:47:43:
37:af:c7:c1:d0:1c:aa:82:68:4c:01:ab:ea:b0:56:
62:1d:26:a6:eb:c6:7e:7d:12:71:57:f3:02:dc:ba:
57:69:cc:d1:94:6e:a4:b2:7d:ac:ba:65:ea:e6:f7:
48:39:e1:75:87:1d:14:bf:ba:79:ac:8f:32:29:d6:
4d:b3:be:7e:f5:68:d8:9e:17:ec:cc:f5:75:19:01:
0c:27:05:23:86:af:99:ad:32:38:48:95:b6:fc:76:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:98:82:8F:93:21:CC:9C:A1:C4:54:E5:47:19:01:C2:2F:F8:7B
X509v3 Authority Key Identifier:
keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c0:03:c2:b4:f0:6d:11:4f:e9:ac:ca:c1:7c:17:95:0f:cc:
b8:e5:27:23:b7:ad:10:66:3f:52:d3:9d:e9:20:83:f3:03:40:
cf:06:dc:a1:0a:5c:3c:9a:28:ba:c3:35:d0:9b:e2:a4:fb:df:
7c:ee:49:ca:3c:61:fe:a0:0c:0c:ed:96:8d:a1:fc:3e:93:3b:
fb:d3:0d:5f:3c:2d:6b:c8:f4:f4:c6:60:2a:4c:de:21:90:b6:
93:be:d7:2b:47:28:c2:36:59:0f:89:fa:43:6e:fb:5f:45:90:
36:ce:b0:7d:9f:38:03:fe:a5:c9:62:fe:2e:bd:47:63:53:5e:
91:9a:18:cd:b4:22:c2:cf:aa:2d:3d:a0:1d:0b:eb:ef:eb:db:
2f:74:6f:80:2e:16:23:3f:ee:3c:9a:17:a0:39:47:5d:95:9f:
e0:22:0f:4a:d4:f8:ad:c9:ca:a4:64:81:06:92:10:e1:46:71:
89:ab:31:7a:92:39:dc:c6:3e:9d:f5:bd:0b:67:5d:f9:3c:38:
cb:a1:f1:6b:c7:9b:8c:5a:58:15:c0:f1:ae:a3:df:a5:07:63:
57:ed:c7:0a:fc:c1:13:c7:46:80:f4:97:02:ca:25:8e:70:bc:
9b:31:7e:b1:6e:16:b0:9d:de:09:b1:09:68:53:7e:77:35:2b:
f2:46:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:03:01 2025 by rpki-client