Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: UzV3y9n9dxbzZJYB7xNm66yxrme/VXPl0dE51ESz5lg=
Subject key identifier: C8:23:9E:A0:83:54:B1:A8:17:01:34:87:5B:2F:2A:99:89:9A:5A:54
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019A5D1EAFBEDB211BDF749C189F5E1F5E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 148D
Signing time: Fri 07 Nov 2025 07:01:23 +0000
Manifest this update: Fri 07 Nov 2025 07:01:23 +0000
Manifest next update: Sat 08 Nov 2025 07:01:23 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: 3f0gv0dB2GusDhs3TqYkOgt7NfBdsAiRafQ7GualcOs=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:1e:af:be:db:21:1b:df:74:9c:18:9f:5e:1f:5e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Nov 7 07:01:23 2025 GMT
Not After : Nov 8 07:01:23 2025 GMT
Subject: CN=c8239ea08354b1a8170134875b2f2a99899a5a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:61:b1:49:d5:d9:c4:4c:27:21:37:6a:6e:
c8:af:b0:97:32:00:de:76:67:94:8c:47:76:0d:a9:
b7:84:f7:e7:d2:f8:d8:e1:e6:21:9a:59:81:ae:c6:
e0:6e:a1:de:fe:8a:fe:c3:55:49:15:b8:99:91:6e:
a1:15:d0:4f:04:fa:26:a8:9f:83:11:77:5e:2c:11:
09:5a:7b:a8:d9:22:aa:b0:0c:0f:86:be:ff:d7:65:
28:19:66:b2:50:a7:46:4c:9d:f5:70:f2:11:98:7f:
c7:27:23:ed:91:0c:79:6c:04:c5:af:ee:fb:dc:67:
8b:4d:b7:b8:ce:cd:da:24:f5:47:c7:a8:a8:46:b5:
b1:1d:1d:13:f8:9d:96:7c:25:89:16:8c:01:be:ee:
97:09:20:04:42:60:e5:0f:31:ad:67:48:66:ac:16:
19:56:99:b6:06:f4:ba:f8:b4:da:ae:e6:8e:c6:33:
e5:21:5c:78:17:5e:a5:ad:52:cd:3a:c7:76:1f:07:
a2:fb:53:b6:1a:45:16:d9:99:cb:45:8d:21:54:be:
c4:7c:2e:f8:df:f9:79:ce:36:20:09:24:04:3a:94:
99:97:5a:75:3d:fc:e5:77:f4:fb:9d:b9:d0:e6:4a:
c7:c2:2d:51:39:ed:8c:e9:c5:44:ed:d7:51:f5:be:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:9E:A0:83:54:B1:A8:17:01:34:87:5B:2F:2A:99:89:9A:5A:54
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:05:8c:47:82:04:39:4e:22:5b:f3:3a:08:24:0d:ff:b3:a6:
f4:49:a8:d0:c1:7b:c1:94:bf:97:59:3a:0f:2a:b8:72:9e:5f:
4d:2a:1d:7e:39:db:b5:da:dd:db:7f:6a:8b:00:f2:df:f8:48:
44:e5:fa:dd:03:14:75:72:9e:87:2c:a0:9c:c6:e9:3b:e4:50:
18:f8:0b:10:f7:3c:9d:ed:79:06:23:01:97:e0:3d:bc:0e:21:
c9:a4:c0:8a:88:2f:47:30:ff:2b:47:ec:2b:f3:55:51:d6:fd:
2e:b1:59:bb:e8:e1:65:f3:0f:2a:41:ec:a4:b8:4a:0c:0c:4d:
8d:03:37:0c:30:ec:3d:5e:d2:df:d9:03:d8:de:77:18:23:3f:
2e:c8:29:4c:c1:d4:d1:66:b7:d9:7d:58:a5:13:41:fc:bf:af:
51:c2:d8:b6:62:07:19:d6:95:20:70:af:5a:06:b4:3e:a1:f3:
6c:01:f5:d2:49:3a:df:c6:5f:9c:c2:9a:4b:1c:35:39:9e:64:
41:a7:fd:e7:ca:22:4f:76:9d:c3:c8:c3:e7:1c:48:e0:8e:a8:
ed:56:5b:10:59:83:44:79:d6:a1:68:a5:69:99:7d:91:df:c6:
0b:11:39:a7:8d:0f:a0:91:ac:1d:be:a7:05:0e:44:70:54:49:
9e:50:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 13:39:17 2025 by rpki-client