Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier: /ujg9J5Ls/Ci4/+objD2xeKXzMdDVjm6EnTNJUENQsk=
Subject key identifier: AF:74:AD:1F:EE:CA:43:1E:9E:01:0E:5C:F4:BB:B7:20:BF:4B:C0:2B
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 019A733873C4DFFAFAF39968D6717B33F00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number: 06FD
Signing time: Tue 11 Nov 2025 14:01:10 +0000
Manifest this update: Tue 11 Nov 2025 14:01:10 +0000
Manifest next update: Wed 12 Nov 2025 14:01:10 +0000
Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: rh8EnOGd/w7E9Ox0M0XXBF10BX7yvgz7Cna9CUbh1vw=)
2: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (hash: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:73:c4:df:fa:fa:f3:99:68:d6:71:7b:33:f0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Nov 11 14:01:10 2025 GMT
Not After : Nov 12 14:01:10 2025 GMT
Subject: CN=af74ad1feeca431e9e010e5cf4bbb720bf4bc02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:d6:9c:2f:52:3d:d6:7f:d0:8a:c4:c9:c9:
d3:2e:b6:39:1d:09:3b:27:9d:c3:dd:0e:29:c8:96:
71:c8:70:f0:a5:07:5b:73:86:72:19:ce:79:f0:2f:
1c:aa:5c:82:12:d8:26:60:67:67:ed:31:40:71:fd:
9e:ce:20:05:19:67:2f:c9:af:22:58:a5:ff:1b:18:
18:59:62:fe:af:eb:ca:5f:a2:bc:c8:11:c1:4a:7c:
7a:8b:1d:35:09:16:f7:f5:b0:b1:f2:f8:4b:9f:7b:
7e:f4:3d:93:d6:c4:45:94:a2:2b:83:43:ee:a9:16:
a4:b3:7c:e5:a8:c8:da:9b:a7:12:f7:e5:a7:cf:ec:
f3:c7:40:2f:05:30:b9:ba:e0:7e:41:16:4c:26:c2:
79:d7:47:23:ed:6e:18:db:8e:47:f8:fb:10:90:8c:
49:3c:5f:b8:e2:30:ba:b5:80:8b:8b:6a:63:74:fb:
b7:e8:d6:4e:77:f1:06:1f:73:b6:9f:72:18:3d:f4:
f6:e9:5f:21:2a:49:0d:ed:05:1c:2a:88:04:f2:ca:
ce:f2:e0:f7:8f:d5:50:59:8a:bf:c2:7a:94:e8:34:
7a:c4:aa:7d:c4:a2:b1:72:e4:72:07:7c:f5:e5:36:
d9:7f:0c:13:61:76:4a:d2:a6:37:7d:93:d6:dc:2f:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:AD:1F:EE:CA:43:1E:9E:01:0E:5C:F4:BB:B7:20:BF:4B:C0:2B
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:97:8b:0a:24:35:f0:5d:a5:ab:93:b7:1a:0d:d0:38:5b:a0:
f1:05:db:4a:7d:32:94:20:5c:e6:1c:0d:e2:29:68:f3:16:7d:
fe:b4:bd:fe:56:4e:db:59:c3:9b:01:06:66:e0:5a:4e:1b:be:
de:3c:6f:86:33:59:ea:5c:fb:37:7a:ec:de:ce:c0:4d:5e:4a:
58:f9:ba:70:fd:77:57:97:6a:5d:81:fe:6c:2b:45:5b:60:d1:
0b:99:81:ff:0d:f6:dc:99:9a:a7:37:fb:28:1b:65:24:d4:c9:
9a:8d:e0:1c:6b:8a:7f:f1:bc:14:7e:42:48:8a:ea:1e:e0:98:
f0:78:2d:a4:63:a1:c9:df:fa:54:a2:af:13:46:0a:33:b1:ad:
12:ab:34:5c:9f:cb:95:17:57:df:e5:63:32:f4:45:bf:8e:14:
32:00:c4:8a:d1:32:17:ca:84:be:1d:a8:22:b1:7d:c8:9d:b3:
b4:4b:0f:f6:5b:51:a5:16:18:4c:8b:a1:e8:b0:27:c1:4d:2b:
8c:ab:d5:7c:59:f3:78:32:5e:d3:99:79:d3:91:7e:77:6a:83:
66:b1:87:2b:6a:37:8f:27:f5:94:39:81:56:a6:29:83:66:b1:
34:ad:8f:26:c8:56:bd:8b:56:00:00:8b:88:76:a0:02:a5:42:
79:7b:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:16 2025 by rpki-client