
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: DgSnZtNMG2c1gozw6v26NT88emVr46tKbsaJgeFbXcM=
Subject key identifier: 33:24:7A:CC:7A:D5:04:0D:E3:AE:9E:14:51:DF:3F:33:EF:1F:77:3A
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019A1D9A866F1C1ACAFF1EBA8A3BAF7827BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 0EFE
Signing time: Sat 25 Oct 2025 23:00:57 +0000
Manifest this update: Sat 25 Oct 2025 23:00:57 +0000
Manifest next update: Sun 26 Oct 2025 23:00:57 +0000
Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: B7AjlTNmc3AopgUVBYvBY6drgFzpDwzn7MaisjeKd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:86:6f:1c:1a:ca:ff:1e:ba:8a:3b:af:78:27:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Oct 25 23:00:57 2025 GMT
Not After : Oct 26 23:00:57 2025 GMT
Subject: CN=33247acc7ad5040de3ae9e1451df3f33ef1f773a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:5e:b2:a3:4a:6c:cf:ef:8f:01:60:dc:12:
13:03:ab:7c:4c:eb:de:00:d2:59:8b:fe:7d:ce:a6:
e2:83:09:4f:62:a9:8a:f1:10:dd:54:9e:a1:0c:9e:
7a:6f:0d:a4:f9:b8:69:fb:12:4e:3d:c5:1a:bd:c5:
36:dd:03:39:d2:c6:83:f1:66:c4:67:32:35:7f:33:
39:b5:a4:f7:e4:f6:92:67:db:5e:a7:36:cc:42:52:
3f:01:82:6d:e3:85:bf:ad:3d:73:c0:11:85:0f:3b:
c3:80:bb:af:69:ea:3b:a0:fa:97:c9:19:07:77:1b:
97:4a:40:b1:3a:8a:88:09:ed:bc:0e:0e:55:8b:87:
5c:56:91:8a:dc:5a:06:9b:c7:fc:27:1f:b3:7f:c4:
29:c8:16:5f:7d:41:d0:49:29:ed:7c:02:11:81:59:
6d:bb:ba:e8:ec:89:5b:85:25:7e:aa:ed:7f:f5:02:
eb:9a:00:1b:72:27:3f:18:a5:e3:e2:a9:6b:49:72:
af:c0:5d:56:6f:9e:24:f6:f5:f3:b2:3a:e3:c0:ec:
91:a8:26:d8:e3:e1:48:a3:07:b1:70:e5:34:8a:e3:
66:41:c2:9d:dc:55:df:22:91:ac:6e:31:c9:95:57:
4e:df:c3:62:c5:a1:e3:be:97:fc:c9:00:a3:68:62:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:7A:CC:7A:D5:04:0D:E3:AE:9E:14:51:DF:3F:33:EF:1F:77:3A
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4e:7f:59:c8:e2:09:80:ca:b8:55:81:a5:dd:d8:7a:4e:39:
2a:0c:74:ee:fe:ec:03:22:87:2e:5d:dd:c7:c2:cb:f8:c7:cc:
56:f9:61:ca:5c:49:72:31:3c:4c:af:d3:6b:98:8a:37:08:69:
58:a9:f2:ed:da:f5:2d:f6:4b:de:98:c8:76:a7:c8:98:9e:d7:
38:69:db:e1:e1:eb:d3:bc:66:73:35:5c:24:41:df:fd:02:f4:
81:37:b9:0e:42:71:38:96:d2:02:3d:48:51:c3:b6:bb:30:c2:
76:fd:44:f5:3d:16:92:a5:8b:a9:cf:70:64:c5:b8:64:3c:70:
bd:dc:3d:14:5a:28:fe:59:a1:00:d8:af:36:cd:eb:77:e4:ac:
d6:d8:9a:4c:b9:be:05:f5:8c:d4:ea:e4:dd:01:8b:b4:a7:9f:
46:15:a3:bf:c2:92:67:c0:63:c1:54:56:95:c5:32:d2:d0:90:
5a:09:9a:e2:ce:ef:a6:ef:61:34:5d:a8:19:fc:11:78:ca:bd:
f4:76:3e:7f:7d:d9:41:98:0d:97:04:a5:7c:2e:f1:c3:1b:1a:
3f:e8:66:08:1d:50:d5:20:8f:d2:e6:11:4d:b4:22:50:87:dd:
3d:8d:e2:4e:07:4c:6d:e6:6b:48:29:5d:64:56:a4:4c:c5:0a:
55:86:0b:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodmoZvHBrK/x66ijuveCe9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTE0ZGZmMzZiOTQ4YjU2YzIxMWQyNWYzOTg3NTFkMzVi
OTNjYzIwHhcNMjUxMDI1MjMwMDU3WhcNMjUxMDI2MjMwMDU3WjAzMTEwLwYDVQQD
EygzMzI0N2FjYzdhZDUwNDBkZTNhZTllMTQ1MWRmM2YzM2VmMWY3NzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QNesqNKbM/vjwFg3BITA6t8TOve
ANJZi/59zqbigwlPYqmK8RDdVJ6hDJ56bw2k+bhp+xJOPcUavcU23QM50saD8WbE
ZzI1fzM5taT35PaSZ9tepzbMQlI/AYJt44W/rT1zwBGFDzvDgLuvaeo7oPqXyRkH
dxuXSkCxOoqICe28Dg5Vi4dcVpGK3FoGm8f8Jx+zf8QpyBZffUHQSSntfAIRgVlt
u7ro7IlbhSV+qu1/9QLrmgAbcic/GKXj4qlrSXKvwF1Wb54k9vXzsjrjwOyRqCbY
4+FIowexcOU0iuNmQcKd3FXfIpGsbjHJlVdO38NixaHjvpf8yQCjaGILPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMkesx61QQN466eFFHfPzPvH3c6MB8GA1UdIwQY
MBaAFLkRTf82uUi1bCEdJfOYdR01uTzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2Et
ZmYwNWQ0NDZlN2ZkLzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2EtZmYwNWQ0NDZlN2Zk
LzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApE5/Wcji
CYDKuFWBpd3Yek45Kgx07v7sAyKHLl3dx8LL+MfMVvlhylxJcjE8TK/Ta5iKNwhp
WKny7dr1LfZL3pjIdqfImJ7XOGnb4eHr07xmczVcJEHf/QL0gTe5DkJxOJbSAj1I
UcO2uzDCdv1E9T0WkqWLqc9wZMW4ZDxwvdw9FFoo/lmhANivNs3rd+Ss1tiaTLm+
BfWM1Ork3QGLtKefRhWjv8KSZ8BjwVRWlcUy0tCQWgma4s7vpu9hNF2oGfwReMq9
9HY+f33ZQZgNlwSlfC7xwxsaP+hmCB1Q1SCP0uYRTbQiUIfdPY3iTgdMbeZrSCld
ZFakTMUKVYYLmA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 02:58:17 2025 by rpki-client