Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier: uV2R0J7Jb4L7kuavNIUWuXqkEbwLYmDwGURLYVIlGkI=
Subject key identifier: FF:C7:C0:8E:C1:51:19:F3:53:5C:FC:66:08:40:F1:77:F6:B4:7E:00
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019A522CC9A22D024F6D6A4F6E269D95796E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 04:00:58 +0000
Manifest this update: Wed 05 Nov 2025 04:00:58 +0000
Manifest next update: Thu 06 Nov 2025 04:00:58 +0000
Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: qkLMe10O3acfNDOJJ/MZBuSaEqKk34QkeJf6F1vpc6s=)
2: ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa (hash: eMuwrfWnfxM1wbDxkNrz13AdocnFAytqpqdxZyIl058=)
3: ne7qsdOlLQR8_nG6p7MVEAshtxk.roa (hash: b2CjvPaYoVbJ4qHUSs8bzU5L8lkSjdW1w+FExaBaHqU=)
4: owuwWzW3ptzbUlMGr01FLYIGSSY.roa (hash: E0V5+KOpIdqo+plR/JmJS5ifpH340RwXyldBs+uj1oQ=)
5: z1ERBgPc796EUpstpTm_KKosGxs.roa (hash: 1uUH+Aes6TW/J4OIjEYgjpDXA6d37PjKx+xzTglktTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c9:a2:2d:02:4f:6d:6a:4f:6e:26:9d:95:79:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Nov 5 04:00:58 2025 GMT
Not After : Nov 6 04:00:58 2025 GMT
Subject: CN=ffc7c08ec15119f3535cfc660840f177f6b47e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:32:b4:97:06:0b:04:6c:9c:b9:fe:ad:99:
7b:76:f2:4d:67:87:ad:b0:b0:56:d1:49:07:73:e2:
d8:71:d3:ce:64:f1:01:4f:90:36:f1:87:82:9f:52:
06:b8:bf:8e:72:83:08:06:e1:65:3e:9e:fa:e4:c1:
5b:54:5a:28:c2:54:f4:2b:5f:5a:0f:54:29:1f:06:
8b:17:39:63:cf:03:81:4a:7d:e9:42:b7:06:e7:db:
d3:e4:a4:e3:04:2f:52:83:6c:3b:55:96:80:f9:20:
ff:89:7c:09:dd:37:f1:3b:22:40:84:2e:1d:e0:84:
68:c9:40:d1:bf:cd:ec:8e:6c:c9:6c:bd:0a:3e:4a:
f5:ac:f7:b5:c4:11:de:c5:2e:90:33:00:0c:5f:af:
30:85:95:36:f4:d2:07:8b:16:28:49:0e:45:64:68:
12:23:a9:62:83:0c:f5:21:df:2d:99:ef:5a:d9:82:
31:fb:08:1f:f9:ba:18:1d:ad:79:fa:41:48:32:b3:
44:46:2d:fe:2e:31:eb:f4:08:ff:90:5b:bb:b7:71:
2c:ff:cd:df:5a:72:99:cf:0c:5e:31:54:de:ad:ab:
f9:31:b7:3a:b0:e9:fe:7c:ed:2c:43:cc:8a:7e:19:
9b:ba:9a:d3:dd:27:7f:17:b7:6c:9f:73:ac:5b:e7:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:C0:8E:C1:51:19:F3:53:5C:FC:66:08:40:F1:77:F6:B4:7E:00
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:ae:58:c3:46:11:15:b1:09:ae:4f:37:2e:26:37:76:a9:
9d:2c:53:61:91:5b:25:6a:e7:b6:b3:fe:b1:ca:5d:15:38:5f:
16:44:f0:37:b4:d4:3c:d7:05:35:a6:40:50:ac:22:1a:22:76:
52:78:92:f3:06:be:5c:75:ba:b3:75:4a:2c:fe:6d:89:b8:20:
58:df:ea:22:fd:25:fd:56:1c:05:38:3e:f7:f9:db:c0:92:63:
b2:48:86:12:54:d6:f5:20:0a:df:0d:af:42:b9:b4:0d:f7:76:
4c:af:fa:52:c9:a9:73:99:dc:88:f2:5d:d9:c6:6a:61:3b:6f:
82:7e:a0:5b:9b:97:93:7f:a2:15:cf:c7:fe:72:2f:b2:59:b5:
69:b0:fe:20:b8:f3:28:2d:ff:6d:2e:cf:d1:6f:cb:46:43:11:
0b:be:2b:8d:f5:52:9e:84:e0:31:ab:11:1b:97:7a:91:89:40:
93:a7:48:7c:43:0e:34:31:7d:31:c3:9b:e6:bd:09:6b:4c:0e:
c1:10:36:75:f3:81:ff:7f:d3:7a:4a:d0:3c:93:53:29:90:e0:
86:7d:85:c0:b9:a6:5f:13:10:ae:4d:50:3a:32:7f:27:ad:8b:
4b:ee:a3:6e:e6:83:fe:87:d7:d8:18:a5:ed:bf:40:cb:59:6b:
33:4e:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:19:51 2025 by rpki-client