Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier: RVScJkLJq1K8GWfR69g1aFEvdSvryotD6CCZrrYYLQI=
Subject key identifier: 31:A5:68:5E:10:91:8E:C0:EF:68:05:FD:18:EA:23:80:42:4B:B8:57
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial: 019A258A908B8AEC2330F2BA7FB585550D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number: 16B4
Signing time: Mon 27 Oct 2025 12:00:29 +0000
Manifest this update: Mon 27 Oct 2025 12:00:29 +0000
Manifest next update: Tue 28 Oct 2025 12:00:29 +0000
Files and hashes: 1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: JR/FHKjfrRgKOyFOOGxRDZddkzNXNnIph9fwPn0+hHY=)
2: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
3: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:90:8b:8a:ec:23:30:f2:ba:7f:b5:85:55:0d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Validity
Not Before: Oct 27 12:00:29 2025 GMT
Not After : Oct 28 12:00:29 2025 GMT
Subject: CN=31a5685e10918ec0ef6805fd18ea2380424bb857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:cc:60:c0:3d:c7:81:75:a6:77:f8:4a:54:
5f:cf:f5:fe:ac:85:b1:27:b0:29:4b:95:2c:14:8f:
be:a5:22:57:dc:4c:a4:e1:dd:de:01:54:3d:e8:cb:
cf:f8:cb:7e:0c:ba:90:69:0d:fa:56:6f:8c:ee:08:
f6:b5:15:34:e1:f8:da:1f:21:b1:4d:78:57:b7:a0:
3c:1e:b2:f5:68:a3:cd:fe:73:e5:57:49:db:93:3c:
34:20:a0:2c:65:ef:61:69:eb:a4:f7:14:ec:d3:67:
e2:dd:6b:ed:be:44:d1:16:8e:08:fc:ae:33:ef:4d:
a3:b0:04:74:63:3c:b0:15:ca:8e:27:05:2e:f7:8e:
57:96:6a:98:ca:c8:b2:b9:8c:76:6f:dd:7f:cd:a1:
2c:05:fb:66:2e:38:88:ac:32:61:96:b4:29:d0:39:
1f:c9:62:8d:04:8c:34:31:02:19:2f:fe:dd:45:87:
7f:c0:8b:ac:75:bc:6f:23:74:14:3d:44:c7:f6:41:
45:a8:1e:8f:13:97:10:7e:86:38:4a:28:80:7b:67:
2d:d8:c2:1a:54:33:95:a4:6b:7e:51:db:29:a0:78:
36:fb:08:14:56:ae:ae:dd:da:ba:aa:ec:85:8b:81:
18:f6:95:85:0c:80:33:03:3c:8d:89:01:7e:79:89:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A5:68:5E:10:91:8E:C0:EF:68:05:FD:18:EA:23:80:42:4B:B8:57
X509v3 Authority Key Identifier:
keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:23:af:99:07:aa:d6:19:d9:08:c8:d3:28:fe:5f:f4:69:eb:
8d:6e:70:a1:2e:8e:65:fe:ce:db:10:41:3c:3f:dc:52:ef:ab:
fb:23:69:9f:1b:da:89:1f:1e:ce:f5:03:38:ac:05:b5:d9:36:
ce:54:7c:6b:84:59:b3:e6:b6:62:c8:65:b2:e9:80:8e:b6:15:
05:e1:b6:c5:0e:11:3e:0e:6d:e2:4f:95:a7:07:56:f7:75:bb:
27:ec:ac:fe:27:5e:d8:16:e4:11:9f:6d:7c:d7:dc:03:53:f6:
e0:21:de:48:87:62:27:7b:5f:e2:a8:f4:ad:1e:b8:e5:b9:d4:
04:eb:f2:7a:79:a4:cf:e2:b9:64:7c:32:d5:bf:3e:24:a9:8d:
47:bf:ce:13:b0:89:0a:cd:ff:f6:6c:47:4f:f4:ab:02:94:ee:
8c:b0:76:7f:20:dd:03:97:ea:7d:11:d6:d9:43:d8:1c:ba:2b:
2e:25:84:07:ad:51:dd:87:c5:f0:80:09:b4:96:ed:19:f2:df:
52:db:5d:cc:20:c4:44:33:74:9f:85:99:ef:78:d7:1d:96:af:
87:42:da:cc:d8:40:1b:f0:99:6c:25:07:35:ef:b9:58:44:60:
6f:d2:34:fa:56:2c:ec:b2:e2:4e:ec:01:e4:3c:38:94:98:0e:
68:21:bd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:09:52 2025 by rpki-client