Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: 5vngqvx02eCSNNgi0RWkJb6TmY10RjrzxQ8fPLubLFQ=
Subject key identifier: BF:21:AF:CC:2F:9A:C4:93:46:61:3F:12:C6:E6:DF:22:A3:FE:FB:CD
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 019A22C0D40022A2A92BA416650C515C7048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0DAF
Signing time: Sun 26 Oct 2025 23:00:53 +0000
Manifest this update: Sun 26 Oct 2025 23:00:53 +0000
Manifest next update: Mon 27 Oct 2025 23:00:53 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: lqeSwxf8SdZkQVbLaaxHwsQ+GVGShpKIOqBkofMXxy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:d4:00:22:a2:a9:2b:a4:16:65:0c:51:5c:70:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Oct 26 23:00:53 2025 GMT
Not After : Oct 27 23:00:53 2025 GMT
Subject: CN=bf21afcc2f9ac49346613f12c6e6df22a3fefbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:0c:ac:5c:db:82:57:f3:95:3e:ea:64:3e:
c7:a4:91:06:a2:b7:21:a3:d4:7e:4c:f0:f5:ab:e7:
d6:db:25:aa:a2:4e:ef:9c:d0:4a:47:87:0b:87:0a:
7b:2e:55:f3:db:a3:1f:32:bb:e3:db:3b:eb:00:a8:
0d:4b:80:8a:74:52:59:50:bd:94:d7:bf:87:41:63:
d2:9b:1d:ea:67:f7:e4:3e:e7:54:62:60:77:86:f1:
7d:bb:01:79:11:0c:fa:3f:14:f7:0c:5a:9c:1a:ec:
94:d2:6d:f6:56:bc:d8:80:58:95:be:0d:84:28:8e:
06:2f:5e:2e:e2:9f:5f:d8:ad:29:d1:50:f3:f6:d2:
96:99:49:9d:c7:7c:d8:57:a6:6f:1d:2f:eb:83:79:
86:4a:cb:8c:36:1b:2a:bb:7d:01:39:44:45:90:20:
95:5f:7f:5d:7b:06:72:2c:99:1a:6b:30:54:98:d4:
0c:ab:04:9b:56:87:c8:7b:66:ad:bd:95:5a:d0:9c:
f9:35:e2:93:da:f6:ab:dc:64:4f:62:c2:10:6f:ba:
12:be:2a:70:6f:ff:f0:9a:c1:ff:bb:e4:7f:61:28:
07:63:85:23:3d:69:5c:ba:a9:fc:e6:03:b7:af:99:
64:34:b1:7b:e1:43:15:5a:2c:74:0d:77:0c:fd:33:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:AF:CC:2F:9A:C4:93:46:61:3F:12:C6:E6:DF:22:A3:FE:FB:CD
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c9:f3:d2:b3:76:1b:a4:a3:40:4d:12:19:c7:72:8e:64:f0:
1e:24:f2:37:c5:91:f0:51:9c:a8:49:33:99:d4:28:6e:17:20:
b1:2e:7a:12:2e:00:5d:90:52:57:30:d4:af:6c:a2:fe:c0:18:
e1:f2:fe:04:6d:16:f7:fc:e8:56:88:19:23:91:5b:e0:bd:01:
46:a4:c0:f7:c5:c7:01:f4:c8:f1:5d:df:16:3c:a4:22:36:12:
cf:12:cc:a6:a1:cf:3e:5f:57:4d:12:df:96:84:91:43:73:e8:
fc:79:60:9b:70:11:dd:a3:b4:97:6f:8c:d7:59:7b:51:7d:30:
29:e6:64:0f:a9:d6:2c:08:15:3a:83:33:09:03:db:15:92:5b:
45:7d:47:22:01:86:bf:b8:30:96:b1:40:02:1c:a4:a8:87:16:
62:f0:af:ac:75:0d:c7:f3:df:b0:fa:fb:31:98:4a:d6:78:13:
9b:18:eb:54:60:ac:88:4c:97:ff:8b:eb:06:4c:6b:f7:9d:d1:
fc:7c:19:e1:0f:fe:c2:88:57:4c:59:37:86:d0:34:18:bd:3d:
ab:d8:08:c2:6c:5a:5f:68:18:1a:35:9b:4a:36:ad:9d:e8:85:
38:59:e8:08:cd:cb:32:48:f0:fc:48:d9:d9:da:ad:8e:06:45:
dc:90:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:44 2025 by rpki-client