Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: As8r9I0nYe0GJs4KqF6b4M3ygXVHsE+hABdGQ+ORzT4=
Subject key identifier: 3C:A5:D6:8B:C4:23:86:09:E0:05:62:04:10:A3:FD:70:04:98:7F:4B
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019A4EF5C1FE07F78464C9FAF162B0110BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: kA1R4KaLFbw+yroguLPAjaGZ+WP1BjAUOCP1Th+oGz4=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c1:fe:07:f7:84:64:c9:fa:f1:62:b0:11:0b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=3ca5d68bc4238609e005620410a3fd7004987f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:71:8e:5b:b9:06:01:5f:49:e0:5e:f3:4e:
7b:da:43:f3:26:07:e1:e1:e5:28:93:6a:e5:b1:8c:
93:d5:2b:9a:87:0b:06:bd:50:0a:9a:38:b9:e4:ae:
75:74:f5:24:4a:7e:0f:51:ad:85:79:de:24:1c:8f:
8b:c0:fa:86:df:0d:d3:a8:5c:60:48:4f:61:a0:51:
e0:66:02:31:53:2b:0b:c1:1e:36:d8:f9:b6:4f:b7:
eb:f6:5f:af:b3:0d:d5:c3:09:1d:b3:73:82:07:4b:
94:c0:e1:b6:1b:03:83:ee:83:cb:6c:5a:7b:68:3e:
5d:80:dd:de:a1:12:79:f6:ba:6d:48:55:d7:da:1c:
5f:cc:01:6c:97:36:e5:1d:a1:15:15:cc:a0:7b:cc:
22:bf:84:84:11:68:7b:f7:09:ca:61:cd:eb:d5:9f:
c9:75:1b:d4:b1:4f:76:dd:13:43:09:16:38:6a:5e:
66:6c:04:45:d7:6b:34:fc:6f:81:3c:cc:67:29:f5:
74:52:1b:5a:25:77:6f:41:66:00:b0:ab:82:d9:a9:
c8:1d:56:3d:51:ae:8a:d3:e1:ca:67:e3:91:4e:7d:
14:5e:99:04:8b:93:fc:ef:1b:9c:ed:0b:1f:47:26:
83:26:fb:8e:93:23:fd:c2:0b:55:54:de:54:48:05:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:D6:8B:C4:23:86:09:E0:05:62:04:10:A3:FD:70:04:98:7F:4B
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:c0:56:60:b0:1c:01:a8:bb:f7:f3:c5:8e:3c:5a:cc:f6:
ad:a4:a1:5a:2b:02:9c:5b:2b:a9:49:21:a5:c6:26:d9:51:83:
e4:b1:f9:4f:31:d8:cd:49:14:f8:7f:35:f4:af:da:f8:cf:47:
d8:ba:ba:76:a3:1c:c9:82:26:ac:6e:69:66:34:3d:c0:d4:30:
d8:c0:a8:0c:f5:3c:e7:ca:fb:1d:79:64:6c:76:4f:cb:96:53:
88:90:0b:55:b0:bc:eb:4b:86:75:70:e1:25:a6:b6:c9:0f:6a:
7a:e4:cf:f8:0d:ab:e4:50:02:3a:95:e8:8b:64:96:32:cc:36:
1c:50:82:f2:3f:ee:a3:f9:25:65:c0:5c:bd:4e:17:db:de:62:
67:59:b5:8e:68:57:78:af:45:f3:c7:81:1d:94:eb:9a:2d:b9:
36:82:b6:d7:d3:64:a4:75:bf:e2:3a:f0:58:08:08:c7:92:26:
0c:74:f4:43:15:fc:03:5e:40:82:01:18:52:eb:4c:fc:cc:7e:
65:c5:8d:04:3a:82:0a:e1:e3:50:5e:56:46:46:5f:0c:bc:2a:
9f:1b:8b:b6:bd:c9:1d:c1:e3:02:b7:13:ba:1f:d9:57:66:6b:
81:ac:98:5a:57:75:1e:d0:71:6e:1e:bb:9d:bd:b5:8e:3c:d9:
38:01:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:43 2025 by rpki-client