Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: XO5x5tN96IN5cMvLBEPjI3cxSf3lxZ48x4gcUrK0aeA=
Subject key identifier: 8F:90:06:E7:81:9F:1E:33:EA:43:95:C0:04:B3:47:3D:55:4B:6B:76
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 019A71B7C12949CFF7A92090286098FABB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: Fih80Nlgmx3m_whvZZHZZjIiang.roa (hash: VaQgFDqa2oxdRNRXm5kYRO6eCGdj59ZMDn/K3AC/eNc=)
2: RbrpoNIXXajBUk8qJ4MBqJWZufY.roa (hash: nmur79J+mSsD2EymOR4FrGYKf9dZed60SfRTgagedsI=)
3: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: FdmkiYgQkiprY7UPyJOA3UwxguqztKKTu1s5diKi4iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c1:29:49:cf:f7:a9:20:90:28:60:98:fa:bb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=8f9006e7819f1e33ea4395c004b3473d554b6b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:7f:5a:fd:d6:f2:6c:8b:17:3f:d3:e0:a4:
a7:81:34:ce:2b:2f:62:e1:6c:e5:1a:bf:0f:88:f2:
41:78:73:29:9a:70:b4:1f:df:69:83:b4:93:a3:25:
af:2a:03:d3:18:a3:e7:c4:0c:9d:c1:b5:c8:1d:22:
b0:9b:07:c1:a2:c3:23:80:3c:20:33:97:4b:6f:ad:
89:1e:53:dc:12:54:6c:c8:48:12:6b:80:6f:37:ca:
9b:20:97:42:33:f5:37:79:5c:45:6f:ed:fb:ad:bc:
0a:cb:84:71:32:ac:af:26:8c:8d:1a:6e:0c:34:c7:
e8:12:73:79:6d:25:5d:11:e4:80:19:af:de:f2:8e:
0a:82:56:fe:08:1a:a2:eb:a2:54:6b:87:89:3f:75:
b6:ce:f0:aa:11:ee:19:0d:c0:5a:d1:3b:4d:90:e4:
1e:cb:a4:57:8c:4a:61:e9:fe:33:1b:05:10:80:08:
45:6a:06:40:3f:69:ce:a8:52:27:3f:6e:f8:c9:42:
40:fa:83:d1:44:9c:7f:38:e7:f2:ac:8b:af:3e:02:
31:80:98:8d:d8:c1:9b:9a:b4:75:12:66:f7:b3:ee:
56:f6:b6:9e:bc:10:bc:ef:bd:ab:f4:ce:0c:5c:5e:
f9:02:7d:6d:89:61:7b:0b:e1:5f:87:db:e7:18:bf:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:06:E7:81:9F:1E:33:EA:43:95:C0:04:B3:47:3D:55:4B:6B:76
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:b0:ab:44:15:e2:95:1b:d6:be:cb:96:0b:c1:d2:e0:e8:
65:31:15:59:0a:dd:89:cf:b3:e5:b4:89:34:26:57:1f:8e:f1:
f0:eb:ed:46:a0:14:29:ec:29:88:98:46:b0:35:15:f6:bc:81:
b4:23:5c:f8:1b:0c:6c:f6:8e:bc:f3:07:2e:1e:16:74:da:22:
9a:19:68:cf:43:21:b4:9b:08:1a:72:2d:46:8d:16:56:98:39:
2c:c7:16:b2:13:d3:99:0e:00:f8:87:2d:fb:24:84:88:d3:eb:
1c:24:e0:4c:c2:97:1c:43:46:4f:a0:36:33:cc:6f:01:95:2d:
0e:e6:2b:7d:65:fe:8c:bc:0b:d6:85:0c:9e:19:cb:22:3e:8e:
30:d8:89:df:61:34:11:4a:e5:99:91:e6:d8:4f:52:a2:02:ea:
a4:f3:d4:6b:71:dc:ee:e1:8a:25:37:2c:df:8d:0f:9a:3e:4a:
98:eb:03:63:f4:bc:96:36:dd:48:2f:2b:10:c6:92:47:55:32:
b8:e4:25:66:23:b4:5f:2a:96:a9:c8:13:61:33:c1:19:2d:bf:
d9:9b:eb:9f:9d:33:35:05:04:e4:be:d3:2a:fa:c3:40:23:41:
27:13:4c:bd:d4:59:79:04:14:22:b6:f4:5b:3f:4c:23:00:54:
bd:0c:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:33 2025 by rpki-client