Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: 3t5nVcYIb8XK8K6Rf4doNSwgJpPMniE8mv9Ittw2rRg=
Subject key identifier: F6:32:47:88:23:4D:D0:22:E2:F2:66:49:90:26:2A:9F:C5:B4:52:D7
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 019A71EE928E070B8E0A51F197C86598D4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: isaiDUJmkWw/d3Cva9L5XBt5u/cym4Y6TmJoGUNURao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:92:8e:07:0b:8e:0a:51:f1:97:c8:65:98:d4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=f6324788234dd022e2f2664990262a9fc5b452d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:f9:b3:26:85:15:9d:40:5a:e1:25:45:7e:
ce:bc:41:d4:a8:bb:af:a6:8e:51:3e:fa:31:29:b8:
f2:74:b0:9b:16:fb:d6:6c:95:ee:b1:aa:64:b2:bf:
a7:9f:be:d4:1e:27:c8:0b:c1:1e:c6:d3:c6:cb:db:
0c:92:4e:3a:72:3c:9d:83:42:04:b0:50:eb:04:40:
dc:80:62:07:46:50:95:b3:f4:1d:7f:ae:b0:bd:28:
89:01:d5:2b:0f:6e:45:7b:39:46:69:a1:6d:2c:96:
b6:3b:48:83:b0:fb:ec:7b:4a:14:7f:20:87:b1:8e:
df:87:ae:4b:90:9c:ee:be:a2:12:4e:84:19:45:f5:
bf:e8:a7:16:67:a8:02:c7:a5:5f:6d:42:92:ed:e1:
6a:91:28:d8:ee:8e:d9:c1:13:3b:2d:5b:54:91:c7:
60:cc:fe:d2:23:c6:c1:7a:4c:48:c1:32:27:2d:f6:
a8:c9:bf:20:26:06:c7:3c:87:05:ce:12:a9:85:72:
d1:bb:f4:6b:17:a9:46:7d:12:24:9a:98:6e:d0:85:
86:06:38:ee:7c:2a:5d:19:5b:b9:94:0e:f9:5b:80:
bd:33:d3:be:e3:1e:0a:65:31:00:9f:51:75:cd:e2:
6a:a5:f7:98:95:75:28:b6:dc:00:02:67:d0:9a:0b:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:47:88:23:4D:D0:22:E2:F2:66:49:90:26:2A:9F:C5:B4:52:D7
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:46:05:b7:5a:48:7c:10:7d:34:45:d8:14:2a:05:40:03:38:
9c:2a:68:3c:a1:67:26:28:ea:b9:1a:f5:19:d0:24:95:34:2c:
94:31:11:5a:87:bb:81:86:5f:34:dd:dd:f2:e3:4d:99:b8:9c:
b4:18:5c:79:40:23:cf:12:ec:86:b9:a2:ae:93:4e:46:99:6d:
17:43:50:47:99:77:6e:e7:be:66:98:aa:42:e0:4e:93:68:f0:
72:6d:e7:8f:13:c8:39:1c:ac:39:a5:85:ac:9c:94:bd:08:c0:
b3:43:ed:99:b3:9e:83:3b:9a:ce:3b:10:84:f0:08:e3:31:14:
07:98:33:2f:12:59:c6:df:7e:71:00:aa:47:ae:a4:e2:3d:62:
8b:51:f0:a0:dd:c8:24:52:4e:8d:d4:e1:7c:56:5f:51:df:fd:
49:8d:99:d3:e2:27:33:62:f7:8f:23:02:be:98:6b:ec:a1:b5:
da:39:bd:63:ee:78:42:9d:27:d9:71:53:0a:b5:fa:ac:78:f6:
78:9a:28:0a:c2:b8:cd:a3:d9:89:71:9b:e0:d0:bc:1a:8d:ed:
2e:73:61:d7:91:6d:fe:17:04:60:7f:75:34:c6:90:84:e7:52:
16:69:85:fc:84:bf:c9:4d:1a:cc:bb:0a:a7:3e:ca:36:93:da:
14:23:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:44 2025 by rpki-client