Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier: VJ3ZvxeRRB3P47ZJG7peF9vH4pMfKj1JLDFHds37GTs=
Subject key identifier: 14:F2:C5:84:C4:76:81:B1:8A:84:24:D6:BB:66:6D:B0:6D:AC:C9:9E
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 019A21E4F2D547127EBC5396D82439BD0825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number: 09AB
Signing time: Sun 26 Oct 2025 19:00:43 +0000
Manifest this update: Sun 26 Oct 2025 19:00:43 +0000
Manifest next update: Mon 27 Oct 2025 19:00:43 +0000
Files and hashes: 1: prumtdRguLUWgSqqHbzk8jBqloQ.roa (hash: xMMK2x/LYfV9Soh0v548c3TFIIdeHQqfXsiwhf98SBU=)
2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: IsmIg7BCLd2yX0SWtHSUPX5/vOGpwZwMAwzk21Ikyok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:f2:d5:47:12:7e:bc:53:96:d8:24:39:bd:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Oct 26 19:00:43 2025 GMT
Not After : Oct 27 19:00:43 2025 GMT
Subject: CN=14f2c584c47681b18a8424d6bb666db06dacc99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:6e:a7:55:84:9b:3e:4e:08:ba:bb:06:22:
f9:e2:95:40:8f:04:7d:dd:73:0b:61:4f:ee:8c:e3:
f8:48:bf:18:2b:cb:6c:75:06:3a:a4:c4:60:08:23:
36:15:f5:f4:94:91:57:0f:22:ee:39:d3:5c:07:77:
20:08:b7:b3:16:55:c5:14:dc:74:4b:54:64:42:00:
4a:20:f3:69:4d:b1:f0:6d:30:6a:e4:99:de:4f:a0:
0d:d9:07:2c:57:e1:5d:2a:d0:0b:cd:6c:27:c3:49:
4c:20:74:b5:13:09:39:8a:9e:f9:63:23:22:8a:64:
e7:6f:47:33:07:06:96:e2:5d:4d:ea:d7:68:b4:07:
3e:59:94:fd:b9:79:76:bd:30:ac:0a:87:16:9c:d5:
60:76:84:ad:84:18:49:33:c3:43:de:d0:b0:73:b3:
32:02:cc:98:4d:bd:46:63:dd:c0:67:cf:bd:d9:19:
6d:18:c4:e4:7b:3b:82:eb:47:63:40:68:9b:fe:39:
ad:73:9c:3b:dd:92:48:94:0b:14:49:20:fc:92:76:
75:83:b7:72:ed:35:04:5d:8b:04:4d:2f:c8:b7:1e:
51:c9:f1:cd:52:76:8b:b8:7d:f6:83:ff:62:65:07:
82:23:c7:16:7e:dc:b3:a3:cd:5d:94:c6:e8:d4:43:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:C5:84:C4:76:81:B1:8A:84:24:D6:BB:66:6D:B0:6D:AC:C9:9E
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d3:8b:5b:b3:a7:29:d9:9b:bf:9b:da:98:79:e8:5a:82:3d:
06:7c:f6:dd:17:bd:ca:69:d7:cd:91:fe:b6:99:8e:1a:6c:68:
d8:d5:af:f2:2c:bd:5a:58:40:98:0e:ea:6a:13:86:29:4e:e9:
2e:5d:e4:93:18:fe:7c:61:30:3b:e6:1a:7f:31:f6:b4:a8:e2:
e4:46:8f:4d:b3:dc:f6:f8:13:ed:5c:2d:09:6e:87:da:3e:86:
99:1f:20:1d:d6:0b:93:bf:5e:e1:ee:04:9f:f2:01:43:4d:5b:
19:8d:e5:79:be:d2:98:6d:04:fd:f9:9f:c9:ef:72:35:3b:bb:
1c:da:fb:ba:e6:0f:2f:9f:c1:2b:13:e9:5c:7f:f9:7d:75:7d:
59:1b:71:aa:2b:3c:23:f3:ad:a3:be:0f:7d:e4:6f:41:4c:c2:
bf:84:b0:99:07:94:41:97:06:35:ea:71:87:55:82:17:20:0f:
ff:67:67:c8:32:96:31:09:64:a1:9a:4f:25:e0:08:7a:51:fc:
5b:cc:c8:44:90:18:fd:18:61:8f:48:c5:2b:7e:eb:16:f1:3a:
a4:7d:df:35:eb:e2:51:fb:4b:89:61:7b:96:50:50:2d:28:3b:
5c:3e:ff:08:ad:30:b2:e0:c4:5e:09:a1:f6:1b:b2:fa:16:4b:
56:f1:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:18:41 2025 by rpki-client