Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier: truXIydpbonARmYTGCA9oJQ2MyPnQZ9iChqEA+bfUHE=
Subject key identifier: DF:C7:92:8E:8E:BC:46:7B:EC:3F:43:7C:47:C3:99:6D:7C:25:C0:D1
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 019A251C9501D08BB17DD0172E8AEE4419CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 10:00:21 +0000
Manifest this update: Mon 27 Oct 2025 10:00:21 +0000
Manifest next update: Tue 28 Oct 2025 10:00:21 +0000
Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=)
2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=)
3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=)
4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: ZdzaotzFOr8d8jsTvlgRjjyYo3VCsEUNXpXx315HBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:95:01:d0:8b:b1:7d:d0:17:2e:8a:ee:44:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Oct 27 10:00:21 2025 GMT
Not After : Oct 28 10:00:21 2025 GMT
Subject: CN=dfc7928e8ebc467bec3f437c47c3996d7c25c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:49:64:4f:54:24:72:04:5a:db:c9:78:2d:
72:20:86:53:8c:71:02:70:e4:b2:5a:09:1a:62:ea:
83:83:0d:4a:c8:e6:54:57:cb:ad:0d:24:a8:0c:8b:
d0:e2:ec:d7:a7:10:33:8a:81:46:be:38:06:0f:e6:
0d:a3:3a:45:c0:40:58:92:7e:99:04:df:5c:27:2f:
5d:40:7b:30:f7:bc:c6:4b:e5:24:fe:f7:81:b5:ee:
46:d0:c5:17:c3:fa:25:b9:38:cd:e7:0a:79:d2:92:
cd:c0:46:42:b6:45:a4:7e:d9:c2:b3:6d:72:54:94:
a3:e8:76:2b:cd:f6:c0:ca:71:2d:c9:51:09:ca:87:
d4:0f:dc:69:5a:f2:9e:d9:ef:32:d7:ec:17:15:aa:
54:d1:3e:bc:8c:c3:a4:da:01:45:0c:b1:97:6f:cb:
ac:d0:a2:42:5c:d3:d0:db:e8:62:0a:aa:d6:7e:51:
80:a0:e3:fa:02:e2:09:8e:c1:d3:58:3f:20:8c:e9:
f5:0f:d8:2e:24:8e:5f:3a:f3:41:63:95:6f:33:61:
a1:ab:cd:de:3f:c1:93:55:a7:ee:97:12:b7:ec:0e:
92:11:a4:20:26:82:4e:cb:f1:f7:7b:69:66:92:00:
b4:b5:1a:65:35:9f:8c:86:e5:2c:99:01:49:dd:b7:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:92:8E:8E:BC:46:7B:EC:3F:43:7C:47:C3:99:6D:7C:25:C0:D1
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:39:de:98:64:e7:3d:90:7c:a3:d7:fa:8e:38:aa:af:08:
e9:2d:b7:67:b0:f8:50:c1:09:d6:1f:d9:ff:b5:ae:f3:c3:6a:
5c:b6:2b:25:67:ef:89:d9:8f:55:fe:17:2e:47:86:84:ca:25:
16:e9:c1:dc:e3:8c:0d:cb:6d:db:61:32:1d:d2:4c:7b:d8:98:
fc:99:3c:73:ae:24:1d:1c:fc:5d:9e:cc:03:ae:94:ef:1c:72:
a1:17:13:c2:e9:67:cf:c7:e5:25:82:65:47:7a:c6:72:91:94:
c8:ee:cf:27:6a:73:ed:ba:d5:09:02:c5:b6:59:b2:33:0d:0e:
53:4e:53:a2:34:5e:64:db:31:fe:58:c4:06:ef:4e:71:67:ea:
3b:5c:6a:3e:71:f6:94:61:4b:df:f1:57:e8:3c:f9:4c:c8:87:
cb:9d:e4:d6:b7:b8:49:81:89:b5:ba:7b:32:bb:f5:cb:33:b0:
b3:88:8b:20:9f:38:3a:f5:34:4e:78:c1:5f:48:b7:13:9b:fb:
c2:94:3c:4c:a0:e3:01:85:54:ac:4a:31:f3:99:4b:12:b9:9e:
d6:37:bb:44:f6:bb:42:4a:46:fa:ae:6b:2b:32:7b:9c:0e:4e:
29:8c:11:f8:0a:ab:6e:19:ba:bf:73:91:c7:49:02:ca:67:78:
5f:c5:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:36:59 2025 by rpki-client