Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier: snbd6Ff7MdFLz2fCeHNuqV2URETJYQ/QexObQoG0dQw=
Subject key identifier: BB:24:E1:45:F2:DB:6E:24:F9:1F:BF:A9:07:55:54:9B:F0:E3:AF:C2
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 019A714A0A45A4A3201B23E0E1D46D1CB558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: 8NfEolnHRA0ySTIDyaQFpiDbjr+s2GzHhHn25B248+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0a:45:a4:a3:20:1b:23:e0:e1:d4:6d:1c:b5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=bb24e145f2db6e24f91fbfa90755549bf0e3afc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:c2:d4:ee:67:69:7a:51:91:5f:66:c6:92:
21:1b:c0:b9:25:4e:b1:c2:7d:21:61:69:f9:a7:00:
f9:e2:2b:50:b7:e7:4e:f1:06:54:46:a3:7d:4f:9e:
bf:2d:bb:bb:8d:1f:91:d6:81:a6:02:4d:7a:2e:e5:
9b:b3:38:16:85:b3:dd:0f:1e:ed:7d:c4:7c:2e:0e:
44:56:ea:07:7a:ab:e8:c4:13:29:1a:cc:5f:9c:62:
86:fa:fb:8f:b4:7a:cb:56:ad:fb:22:7f:39:8d:f7:
92:5c:b3:22:b5:6b:5c:35:3d:93:5a:51:f1:25:ca:
4e:97:4b:ca:6e:a6:14:cc:25:d2:71:3f:a4:ec:b6:
c9:bb:db:6c:92:d4:a0:b9:ef:17:38:05:72:76:d4:
48:5a:ca:cb:f4:d2:c3:3a:c2:4f:9e:e7:c3:13:81:
b0:04:d9:62:7e:46:21:77:df:12:6b:a5:92:1e:ec:
45:e0:97:b7:2e:42:f9:35:52:8d:3d:0c:09:73:31:
81:a8:a9:ec:94:24:1e:6b:02:ac:a9:d8:76:cf:3c:
d5:40:3b:41:a1:26:98:dd:28:94:76:75:77:03:27:
1b:76:3f:ed:5f:04:a6:bf:98:f2:9e:35:6f:85:2b:
74:ad:9f:2f:a2:b5:90:4c:b0:87:3b:4f:29:8b:83:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:24:E1:45:F2:DB:6E:24:F9:1F:BF:A9:07:55:54:9B:F0:E3:AF:C2
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:3e:10:ed:05:20:9a:00:f5:ea:93:74:05:1c:66:fb:59:
f4:a7:56:ec:39:80:aa:9f:49:b7:8f:92:70:a7:9b:bd:06:49:
b6:bc:1e:8a:5c:01:30:fa:c2:fc:e6:8c:09:80:07:9e:67:32:
7f:b0:13:83:ad:88:62:52:fd:de:8f:b5:6d:fd:ef:ab:7e:68:
99:22:04:4a:ba:27:f4:22:bb:fa:88:32:3d:b0:2c:d4:89:70:
37:e0:f1:61:65:f7:70:a4:63:9b:60:a0:81:a4:f5:44:21:37:
ce:a3:23:f8:45:40:b4:8e:6d:a0:5f:81:21:c4:0e:74:78:ca:
65:be:13:5d:1a:f7:14:bb:0c:ca:9a:78:06:7f:fc:81:a6:ad:
a2:2a:26:f3:c3:cc:03:2d:46:71:02:e6:b9:93:b8:72:85:0a:
6a:dc:09:08:b3:ac:c1:a4:e2:c1:b8:d7:6f:99:18:24:22:0c:
2d:ca:76:bd:a5:71:59:f9:66:bb:aa:2b:f1:cc:24:da:39:79:
f7:a0:eb:74:0d:f9:70:f5:39:f0:ea:a0:ac:0d:b8:f6:3e:15:
6a:e2:48:1d:41:72:fe:c2:d0:51:23:d2:6e:a4:33:dd:99:dc:
0c:03:1e:79:14:d2:77:d8:38:35:45:8f:74:a9:29:13:14:d2:
ac:30:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:52 2025 by rpki-client