Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier: rnnZwUcqz2Aelyuq0bvNhpc7P/d8hCXDLVhcZ8kwmGQ=
Subject key identifier: 1B:3A:55:FB:66:3E:1A:D3:13:BB:8B:FE:F6:60:66:FC:C3:63:79:F6
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 019A72262A241800D7A3DC1FD1970CD04AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: yExes3DaUGR121uJRYeCHWXUDaCfjdM1hoHnc6lDGQQ=)
2: ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (hash: zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2a:24:18:00:d7:a3:dc:1f:d1:97:0c:d0:4a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=1b3a55fb663e1ad313bb8bfef66066fcc36379f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:f1:8c:81:88:63:39:1e:c0:be:16:b6:06:
35:6c:1c:55:b6:59:e7:80:15:77:c6:90:13:90:f5:
b0:f4:43:7f:f1:ee:83:14:d7:ab:c7:69:08:11:a8:
0c:22:c8:69:99:14:dd:fe:9f:4a:bb:8e:8f:6b:0c:
10:a7:33:ed:56:b0:f2:23:50:f4:ec:1c:73:39:ee:
a8:3d:73:76:7a:a7:f7:83:86:fd:29:a2:53:18:bb:
5c:e7:75:cb:1e:a9:f5:9c:7b:c2:1b:2f:c8:58:3a:
16:5d:d4:3b:55:1a:55:7e:80:a4:2b:b9:b7:e3:f0:
e4:dd:1b:b0:8e:3e:04:89:d4:9d:20:aa:65:4d:da:
d5:4d:48:fb:a7:8e:c1:bc:79:ef:33:14:5a:a2:d2:
d4:0e:31:4e:ce:b8:86:dc:40:68:72:32:1d:93:dd:
58:33:cb:30:09:d5:12:e9:88:df:72:9c:c4:2d:f6:
62:95:ce:f5:53:f6:48:56:bb:c1:2a:3e:ba:13:25:
84:4e:81:4d:b4:fe:30:3c:f6:a8:20:e2:a2:bf:3d:
f2:bf:78:d2:a2:e6:71:33:a6:83:21:cd:1c:51:92:
c5:b3:85:ae:9e:cd:eb:f1:95:02:2e:eb:e0:98:94:
8f:a9:a5:92:d8:3d:dd:f9:89:a5:02:d0:06:d0:df:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:55:FB:66:3E:1A:D3:13:BB:8B:FE:F6:60:66:FC:C3:63:79:F6
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b5:46:52:2e:d1:8e:47:9d:2e:ff:d4:82:8e:4d:aa:86:2c:
f5:85:4d:79:83:c3:23:50:c0:21:91:e0:22:2f:2b:de:0f:35:
3e:fd:ec:97:a4:30:53:67:d0:54:e4:36:81:ed:a6:de:63:b1:
48:16:c2:ae:72:80:75:d5:4a:fb:0f:e6:5a:72:bf:d7:95:a7:
c7:83:fb:5c:50:dc:01:20:27:c3:71:65:22:b4:3f:29:be:6d:
6f:05:ea:01:20:b5:fa:5f:c5:55:ec:03:f5:53:8e:06:da:61:
b1:c3:11:75:f7:6a:65:45:fd:12:74:78:5f:7b:43:6a:04:c2:
ea:a1:d2:33:c6:79:2e:3f:06:6d:02:7d:0a:ee:e9:95:88:ed:
27:04:45:97:dc:80:44:c0:4d:fd:9c:9e:de:ed:f7:29:db:90:
06:d5:ae:f8:ac:82:78:35:a8:af:b8:b6:ea:57:92:3f:c3:4b:
6a:8a:4a:74:7c:d1:b6:c3:58:c0:4c:71:3d:6f:df:c8:e4:09:
36:24:08:05:ba:53:35:00:a0:19:ab:8f:ba:57:f5:46:ef:ba:
84:3d:b6:0f:c8:f4:1c:61:50:f0:a7:60:80:53:fb:f9:73:67:
29:d2:24:c3:69:2b:04:d3:70:bc:d5:e5:3a:d9:c8:0f:22:bb:
df:c9:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:11 2025 by rpki-client