Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: 7czuy0iXCdOJXJ4/mgKc0SjtTxHoG0Mi1Nn4cI6H2X4=
Subject key identifier: 8F:75:EE:65:D7:8D:90:3E:FD:1C:2F:D9:53:48:62:0D:D0:24:81:D8
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 019A64A14B0E8A96B2039988DB01BBC94E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 1728
Signing time: Sat 08 Nov 2025 18:01:23 +0000
Manifest this update: Sat 08 Nov 2025 18:01:23 +0000
Manifest next update: Sun 09 Nov 2025 18:01:23 +0000
Files and hashes: 1: HvGkzNX-LlaIXMSfIk5S1mOC0oY.roa (hash: cwXFNBAD/M2F0MUB/ov5M8039XefOPt3b2kagm/DMzw=)
2: ZqsDRLhiPpia2P-7RyyhANwTVV4.roa (hash: 0rsjP4AuQ2t0LszFPHOckD8EVFICht07+jDEBI6TOgQ=)
3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: r2uH4UKY9qpZrysGdnjh0vf4UfWrCINrwyRIOWpu1W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:64:a1:4b:0e:8a:96:b2:03:99:88:db:01:bb:c9:4e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Nov 8 18:01:23 2025 GMT
Not After : Nov 9 18:01:23 2025 GMT
Subject: CN=8f75ee65d78d903efd1c2fd95348620dd02481d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:de:28:fd:6c:43:74:ef:17:0e:fd:c2:53:
d1:d9:7d:d6:ba:14:63:7e:3c:e7:e2:e2:b3:93:c9:
bf:3f:6b:f9:0e:f3:4e:51:46:27:8c:f8:0d:e9:1f:
f1:bd:28:ab:59:29:39:d1:bc:82:6f:30:71:79:68:
98:6f:3f:7f:9b:d9:98:cf:4f:46:53:98:7d:e9:79:
a7:de:1e:4d:76:a3:3e:52:3b:c8:2a:92:af:4c:5d:
35:8a:f3:56:6f:6e:a8:4f:1d:75:f6:27:ee:b8:f4:
60:0d:21:40:40:e1:84:c7:c7:82:bf:1e:ba:56:a2:
34:bc:13:7f:1d:da:42:88:3e:9d:03:9c:b2:eb:3e:
99:a5:2c:2a:c3:fe:e4:1a:b8:6e:d2:b9:a4:a6:b0:
cf:f0:01:60:83:f4:83:96:9d:56:76:12:82:75:80:
7a:9c:dd:bd:68:6c:15:fc:6a:9d:73:0b:81:28:ae:
70:fb:9b:b6:d1:33:99:4c:7d:7c:d0:cb:f0:a2:28:
57:d0:e1:01:35:59:be:27:c1:e1:9e:0c:8a:37:b9:
92:c9:fe:11:d5:78:43:9a:74:7f:aa:ba:f7:75:1d:
f8:12:cc:30:2f:21:65:02:8d:6d:bb:e1:07:cb:ee:
a8:b7:ec:be:5b:7c:04:fd:5f:d6:52:82:55:c2:5d:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:75:EE:65:D7:8D:90:3E:FD:1C:2F:D9:53:48:62:0D:D0:24:81:D8
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e4:96:1b:52:27:56:fe:b8:00:c8:4f:6d:93:5e:07:ec:96:
6e:63:05:15:86:dd:fd:6b:5c:4c:28:fc:64:74:f2:f8:f1:78:
e8:6f:bb:22:a5:b4:f0:05:fb:8d:68:fd:a4:bc:ca:79:64:54:
65:3b:15:5f:39:fe:88:09:0b:56:6d:e2:90:af:ce:26:9f:7d:
e2:89:23:93:7c:ea:9a:14:91:43:66:66:c7:78:b3:d3:69:7b:
d8:8f:37:d5:4d:df:93:c2:a2:d9:81:d9:48:4a:76:a7:aa:9b:
cd:1c:8f:98:30:e7:9c:13:64:77:4b:73:3c:88:84:82:93:e3:
f9:b9:22:dd:de:19:47:74:7b:c4:73:90:95:68:7f:c1:95:8d:
ef:3c:21:ab:a9:35:09:bf:16:2c:62:16:db:d6:a4:e6:fd:78:
a2:dc:82:84:cf:81:98:1f:2e:65:66:c8:fe:94:4f:5f:c2:49:
45:32:89:58:7a:d7:2c:11:d3:98:de:90:12:b2:ad:68:eb:a3:
05:53:33:31:ac:70:7f:19:2f:d5:5f:85:a5:e8:3e:d9:1c:f7:
8b:23:30:b5:16:4d:8d:41:c9:db:d1:62:07:9a:c0:2f:f8:81:
c8:60:c4:2c:a8:f8:90:d8:d1:43:88:b5:ff:f2:aa:08:8f:4f:
ac:cf:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 21:41:41 2025 by rpki-client