Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
File: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft (raw, json)
Hash identifier: AsVvUNrW1WL76Am33fSfj/pSQwgtFYlY5rnoTRG4EmI=
Subject key identifier: 46:A5:45:BF:90:74:E0:D3:FF:99:DE:12:BD:A9:A9:D9:C5:45:73:CC
Authority key identifier: B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
Certificate issuer: /CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Certificate serial: 019A4F2B50A69A2A7DCB9D28162A6342B9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
Manifest number: 0CDF
Signing time: Tue 04 Nov 2025 14:00:29 +0000
Manifest this update: Tue 04 Nov 2025 14:00:29 +0000
Manifest next update: Wed 05 Nov 2025 14:00:29 +0000
Files and hashes: 1: c47adC4Bxlaw5597wV2V7KU0TIk.roa (hash: LtdOn5FUGrZ35ebiBFAgNw0wB+y/797Rd6pVef69jvw=)
2: uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl (hash: 5ltADnxgEAQHHElcnLlEd+Zv+caWCoYWDvztAdelip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:50:a6:9a:2a:7d:cb:9d:28:16:2a:63:42:b9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Validity
Not Before: Nov 4 14:00:29 2025 GMT
Not After : Nov 5 14:00:29 2025 GMT
Subject: CN=46a545bf9074e0d3ff99de12bda9a9d9c54573cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:c6:02:2f:c7:b0:14:71:b3:49:ae:ca:b0:
aa:d6:b7:cd:9b:3c:a6:63:62:9f:98:99:97:2b:35:
54:4f:97:78:5b:c1:aa:21:b5:b6:7b:a4:73:2e:69:
97:00:ec:63:82:2a:3e:34:90:e4:6b:dd:08:77:2c:
10:81:22:f7:b8:6f:53:80:0c:cd:46:55:7b:f0:cf:
a8:50:4b:cb:2c:70:04:2e:2b:bf:e9:dc:07:e6:cc:
c6:04:44:cc:1e:5e:83:4e:49:98:46:2a:d6:99:1c:
e3:03:9d:13:ff:8a:c0:9c:4d:86:00:ce:d8:8f:e0:
a1:96:1c:f6:a2:2e:08:8c:17:be:a8:11:ec:47:32:
c7:10:a8:db:19:35:db:78:b9:6f:81:fe:30:1a:4d:
79:ed:e5:14:0e:3b:24:88:0a:f8:f9:8c:21:eb:5c:
5f:ed:e2:47:25:db:47:b0:5b:45:7c:28:fd:0d:38:
9a:15:0d:58:c9:b9:d8:7f:08:4e:63:88:20:7d:a4:
e9:e2:6a:b9:c7:f8:20:be:2f:b8:d2:df:9c:39:bb:
09:1e:25:4f:f6:0f:bf:80:ed:11:c4:ba:29:32:54:
02:14:77:0e:1f:e5:2e:cb:6c:b7:19:7a:2b:95:58:
ae:98:34:d6:3a:2c:92:0c:63:a9:1f:c1:fa:2b:cf:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A5:45:BF:90:74:E0:D3:FF:99:DE:12:BD:A9:A9:D9:C5:45:73:CC
X509v3 Authority Key Identifier:
keyid:B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9a:9c:b3:c4:4a:ff:52:5b:2f:6c:54:a4:e1:9f:14:b4:c9:
24:c8:53:ee:78:17:c8:f2:bf:9d:80:b9:d3:48:2d:70:e9:f7:
58:ea:fd:11:c8:1f:ae:0e:1d:83:14:4e:75:14:b2:d2:0a:32:
1f:3b:cf:fb:4c:86:d6:e7:01:54:ce:76:2b:f5:10:c2:d4:f1:
12:3a:28:22:01:65:f2:b8:b8:4d:a9:1a:52:90:c8:99:ce:35:
a8:01:5d:a4:91:05:50:18:b0:29:96:cb:89:20:e0:2b:10:bc:
86:14:4f:a9:b0:fe:42:f8:a7:75:ba:78:17:89:89:5f:d7:07:
a3:bc:9a:7f:04:e1:7a:b8:2d:e6:53:fc:a1:4c:da:1c:65:22:
81:a4:63:e7:2f:10:96:2f:60:82:67:f5:b9:c7:8b:77:d2:ac:
a3:45:93:c3:f0:df:d3:5f:9c:e2:d2:f3:0c:14:f6:58:5f:48:
c1:74:c9:10:ff:75:af:66:44:e3:5a:37:86:c0:df:1c:06:69:
99:dc:17:43:47:59:c5:3e:3c:3c:be:61:5c:79:37:00:b3:79:
13:80:0c:40:85:a5:01:3c:d8:db:9e:d9:f1:40:f4:86:cf:06:
bf:57:49:6b:d5:56:e4:33:c3:c8:56:a4:29:4d:f3:bb:b7:da:
34:dc:ed:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:27 2025 by rpki-client