Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
File: uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft (raw, json)
Hash identifier: y8hs8dXrtYyu6f9Ws6C8CUewvoWBl9X7C/1cDBD/CgQ=
Subject key identifier: 7D:5E:2C:DF:FC:89:B5:D5:03:FD:B8:89:2F:FF:10:F4:29:EE:49:AF
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial: 019A7180A09536E1658DD0413E70EC96F098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
Manifest number: 47
Signing time: Tue 11 Nov 2025 06:00:46 +0000
Manifest this update: Tue 11 Nov 2025 06:00:46 +0000
Manifest next update: Wed 12 Nov 2025 06:00:46 +0000
Files and hashes: 1: 3odw06eY_aIJMJ5gia4SCuGIEhI.roa (hash: HtI0JFszp0zK+HxeeFPZ+mMVGR6pXK8jygEDvaNdyvQ=)
2: ZtDCJODtY7tlGUY4mI_YRwWJbRY.roa (hash: Yeg65Usz9zdCfiKTUR//qasZbCYjIaaB9OcLvlxhcWk=)
3: uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl (hash: t24AbxmbrmotRYbhaooTog8Q8fOEHAjmU/y9sAp0pZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:a0:95:36:e1:65:8d:d0:41:3e:70:ec:96:f0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Validity
Not Before: Nov 11 06:00:46 2025 GMT
Not After : Nov 12 06:00:46 2025 GMT
Subject: CN=7d5e2cdffc89b5d503fdb8892fff10f429ee49af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:d0:d6:33:b3:f2:ee:56:81:d1:06:ad:86:
d1:3a:7c:a2:38:b9:7b:2c:3d:d0:08:c7:b7:10:2d:
1b:f8:f8:c8:d1:57:62:b0:75:33:10:70:4a:de:f7:
e5:18:83:5e:ad:a9:a1:cb:c8:63:f1:e3:cd:12:dd:
48:76:bf:07:5e:78:13:88:ce:68:88:ff:bc:ec:e7:
bc:d1:71:bf:43:29:63:ec:40:ac:ea:db:60:b8:1f:
c3:e0:d9:16:46:1d:30:95:12:32:d2:dc:fe:f6:ac:
e2:b7:0d:73:14:f3:95:14:c3:0a:76:5e:c4:84:e8:
b6:0d:ad:1f:21:a7:77:a3:98:5b:8c:0a:7f:fc:e0:
64:f4:49:08:f8:ac:95:66:61:0b:c7:72:77:a0:65:
86:02:ec:8b:24:00:3f:ee:c1:7b:0a:19:9c:c4:61:
82:eb:24:05:01:f9:69:43:54:66:c4:54:d6:60:aa:
42:c2:08:d8:dd:05:88:21:1f:6d:80:07:87:b0:74:
25:50:fc:58:aa:40:33:07:57:57:b5:43:34:1b:e6:
bd:ae:18:ea:5b:27:3b:c8:b8:79:7b:47:25:e7:28:
a0:a0:f1:6e:58:9a:a8:e4:4b:3c:22:9f:67:35:99:
36:78:22:7c:cf:bc:46:6b:de:ec:eb:97:ed:fc:f7:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5E:2C:DF:FC:89:B5:D5:03:FD:B8:89:2F:FF:10:F4:29:EE:49:AF
X509v3 Authority Key Identifier:
keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9d:db:9a:6b:4d:61:6d:25:39:ec:e3:23:4b:fe:76:05:a5:
4a:2b:b3:85:1c:15:de:58:85:db:48:bb:45:eb:c7:90:67:a4:
e8:b5:f4:a7:e2:c5:1a:fc:39:bd:9b:a5:eb:b7:28:a8:db:67:
ba:f0:e1:6c:51:d9:72:ab:5b:84:5b:ec:56:ad:ec:3e:43:a6:
86:2e:01:fc:d0:be:0a:dd:87:c6:47:e1:b0:ef:f0:49:50:d0:
dd:cb:4b:eb:4b:4e:1a:a2:f1:98:26:7a:6b:49:75:91:b0:5d:
c0:5d:9a:2c:0d:ad:91:47:c0:cc:3b:50:1a:33:8a:ad:88:7b:
c4:5a:5b:69:71:62:fc:ae:8c:77:4e:de:8c:fa:b7:0c:12:4a:
db:f8:49:dc:a3:da:5a:76:27:d1:24:71:59:2c:85:bc:c5:fd:
7e:3c:02:61:fe:f6:87:24:32:02:af:0e:b0:3a:33:4f:b6:7a:
87:03:5a:14:d1:15:44:b4:c9:01:5f:68:39:c9:46:73:c0:21:
97:a7:c4:79:99:2a:ab:48:58:17:eb:cb:2d:2b:ff:30:ee:37:
83:07:38:3a:27:f5:20:e1:f6:ac:34:51:b2:b1:af:3e:9f:73:
0a:52:81:28:e4:74:21:ab:7b:54:ae:87:25:82:c1:89:8f:e6:
b7:74:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:28 2025 by rpki-client