Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier: PQB1RH5l907aY4bR5GxDDCpMNtKpfBP7paYwbw8n5s8=
Subject key identifier: DE:3A:7A:EA:DE:3A:2F:F9:D7:8B:9F:33:87:B4:67:E1:62:9C:EB:D4
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 019A7225952C9C91D3B32FEE6555C9625193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (hash: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=)
2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: 27KqRzs1KZEJF20uvfp8r7NRi+OJk2tkD19wWK3FYME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:95:2c:9c:91:d3:b3:2f:ee:65:55:c9:62:51:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=de3a7aeade3a2ff9d78b9f3387b467e1629cebd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:29:ba:1d:14:f8:05:92:9e:d8:a9:9f:b0:
6c:19:16:a6:04:25:1e:36:5a:96:ce:ae:c7:40:dc:
4c:55:4a:41:c0:c4:8e:49:db:89:ef:bf:90:cb:9a:
74:95:92:9a:72:7d:1d:4d:63:43:9d:e1:67:77:bc:
27:89:04:a1:6b:ae:8a:32:f9:bd:b6:06:4c:1f:83:
b4:89:e5:0e:c0:94:29:2b:e0:ad:63:fe:83:50:16:
c8:b8:bd:de:01:6e:1a:57:c9:02:fe:1a:1a:a5:36:
5e:41:17:13:db:69:e0:b7:1f:38:7a:84:50:65:30:
2e:22:bd:e3:ce:15:6b:00:2b:77:42:87:76:83:57:
0f:7a:d9:39:bf:ad:de:b2:97:39:15:b2:57:90:7f:
33:56:37:fc:0d:db:3e:3c:e3:84:e4:63:a1:20:7e:
65:34:d6:b5:15:39:d0:53:df:fe:9c:0a:7c:2c:09:
9b:df:ab:79:95:99:4f:0c:0c:5e:dd:08:87:2f:00:
b8:0b:73:1f:3a:02:39:a3:fe:d5:e9:ee:c1:6a:46:
1e:f1:94:d3:68:0f:f4:8f:68:bb:46:43:3b:d7:19:
6b:2b:a2:41:d9:27:c8:d3:10:91:30:d3:45:e2:07:
64:d0:04:ce:79:79:a6:b6:6f:54:e8:ee:e5:8c:5a:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:7A:EA:DE:3A:2F:F9:D7:8B:9F:33:87:B4:67:E1:62:9C:EB:D4
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3c:6f:1d:bd:04:99:90:4c:ec:64:f2:9b:28:80:fd:0a:15:
1b:ed:80:e5:a3:b5:43:52:e3:04:11:ee:c0:01:dc:b6:62:d8:
dd:bf:fc:24:55:fb:4b:9b:04:54:46:a4:68:1a:da:dd:4b:75:
7f:a5:b8:16:8a:7c:e9:3d:fe:22:9a:6b:76:a6:61:90:d7:c5:
a4:14:b0:0e:a6:0c:db:f6:c8:0c:24:8d:18:a9:eb:ef:05:a8:
41:9e:d9:c5:72:0d:86:bf:45:e4:f0:62:62:34:86:a2:61:61:
7f:d9:a1:a6:84:cb:a2:64:9c:20:21:6f:ba:20:b3:b6:b5:06:
8b:fc:6b:6c:6d:a3:45:54:95:13:3b:0a:ea:85:58:73:68:ef:
f0:bd:ba:7a:62:56:1d:01:dd:6b:63:5c:0d:3b:73:ba:b1:7b:
f6:33:0b:1a:a1:db:69:fc:20:e5:ec:5a:a7:38:dd:16:d3:56:
08:7e:60:1a:07:cf:da:0c:56:45:6a:d8:36:f0:3f:1b:d7:f3:
ad:62:eb:ae:75:12:cf:04:eb:7e:41:e2:d2:35:87:d9:7e:04:
b7:cf:83:bf:64:6f:5c:98:5c:8e:b2:e6:96:42:ca:ef:77:6c:
ea:3e:cd:48:b5:94:f6:d9:d4:cf:58:49:f3:17:82:ba:f4:58:
4b:c8:0b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:40 2025 by rpki-client