Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: W2u15ucUfji7Z9vcLhaM4wuFRzGYNo5tO0k8+pPu2Cc=
Subject key identifier: 89:7E:AB:1F:45:1E:BC:37:1B:E4:4E:D9:F5:D0:03:B9:10:07:84:28
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 019A7301AC29175BAA2B2E63EDB8A1C2B385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 09DC
Signing time: Tue 11 Nov 2025 13:01:20 +0000
Manifest this update: Tue 11 Nov 2025 13:01:20 +0000
Manifest next update: Wed 12 Nov 2025 13:01:20 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: mugmXhfl+xPQv7trhGPpKC3GVVmoaqtrnHJdTIVeb2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ac:29:17:5b:aa:2b:2e:63:ed:b8:a1:c2:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Nov 11 13:01:20 2025 GMT
Not After : Nov 12 13:01:20 2025 GMT
Subject: CN=897eab1f451ebc371be44ed9f5d003b910078428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:a2:8b:ac:2f:a8:7f:19:5e:35:25:f9:e8:
f4:6c:71:0c:73:00:eb:4c:8b:47:c9:e2:2a:40:7c:
14:41:78:48:55:d6:80:2b:4c:b7:aa:33:9d:9e:7c:
f3:02:7d:f1:f4:c9:35:90:29:e8:23:9a:5b:4b:ed:
87:98:9a:cd:80:f0:8f:cc:ba:32:7c:c8:58:ec:6a:
70:d2:87:66:bd:ed:4f:01:63:2b:43:f3:bb:22:86:
5e:53:10:79:6c:44:d0:dc:8a:23:bb:52:38:74:24:
bc:39:fa:bc:cd:d1:d3:de:ee:91:f8:12:15:2c:e8:
34:27:a3:15:68:5d:89:bf:6c:19:4a:a7:d9:71:16:
8b:6e:30:1e:f3:d2:89:80:fa:ef:91:35:d0:9a:8c:
04:b9:5b:32:aa:09:9b:14:d1:13:a3:46:41:9f:65:
b3:30:c3:bb:4d:4f:59:f2:69:01:23:04:39:45:f1:
a0:4d:87:b0:23:53:ae:45:68:6b:44:65:5c:51:77:
4d:15:98:0f:36:0b:f2:15:19:5f:b0:90:e7:3a:3a:
a1:56:6e:ce:f9:e4:89:ce:83:15:70:90:57:34:f4:
ff:00:5a:2a:67:79:19:b3:c8:e5:c6:83:80:84:34:
b7:8f:c0:eb:ef:92:02:ee:ab:9b:6b:ab:99:e8:8a:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:AB:1F:45:1E:BC:37:1B:E4:4E:D9:F5:D0:03:B9:10:07:84:28
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f4:6c:22:11:15:07:14:96:66:4c:3d:47:03:0c:c6:b7:f4:
d3:7c:33:33:10:f5:e3:6a:72:9f:d1:b0:12:81:41:32:3a:18:
7d:9d:04:4c:0b:04:66:b5:13:35:b2:f3:25:21:65:f2:9f:2a:
3f:9a:64:cb:d0:09:f5:8c:33:d6:a3:b6:56:e2:a7:ca:00:d7:
93:32:f0:3f:7e:dc:53:11:b7:c7:4d:a2:78:51:7a:e5:38:0e:
0c:7e:05:bd:8f:20:4c:d9:60:37:74:26:a6:a4:ae:4e:bb:06:
c9:50:39:f7:4f:6c:5b:e6:80:44:d0:83:c4:00:28:bf:79:3f:
e7:ea:0b:ac:21:75:49:12:05:b0:07:93:53:da:ad:67:fc:85:
88:40:d5:c4:8b:c5:3a:c9:44:a5:46:1d:99:d8:57:5d:38:15:
9d:93:49:ee:1b:18:71:35:e5:09:23:04:76:4b:c6:5a:35:a3:
53:52:83:97:16:a1:d6:75:12:14:0b:99:4f:d4:17:9e:01:e7:
1a:12:8b:7b:4b:9b:ae:60:76:1b:3a:19:75:0f:09:e3:e5:a3:
97:42:44:fd:dd:00:b8:cd:32:da:1a:7c:ad:bc:21:fc:29:d7:
9a:21:9e:29:b8:0f:a6:86:94:63:4a:fe:04:8a:a8:04:74:76:
50:d6:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:57 2025 by rpki-client