Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: hoOtQ7BGRptYXX2bQfhRVVqhSgWGGUtVLZxeJ2niPU4=
Subject key identifier: 82:DC:71:4F:29:42:CE:C7:91:8E:62:09:E9:AF:6B:C2:0C:7A:D8:16
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 019A70A57A8ED45E7DD0D3231E05D101558B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 80
Signing time: Tue 11 Nov 2025 02:01:24 +0000
Manifest this update: Tue 11 Nov 2025 02:01:24 +0000
Manifest next update: Wed 12 Nov 2025 02:01:24 +0000
Files and hashes: 1: IV6LAMTesDGR72HXRT_RM2ewtd0.roa (hash: Ji82TeFvw2AWO7ouVte9FvWBgNe+1lXjlT4zAWwBKBg=)
2: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: REXtCm99XhtEF60Gt+M06RWXiRVsm7415V7QTcf56yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7a:8e:d4:5e:7d:d0:d3:23:1e:05:d1:01:55:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Nov 11 02:01:24 2025 GMT
Not After : Nov 12 02:01:24 2025 GMT
Subject: CN=82dc714f2942cec7918e6209e9af6bc20c7ad816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:78:06:4f:46:cb:0e:e8:68:c3:64:6b:5a:
a6:83:c9:f9:9c:18:8c:43:e5:1c:8e:cc:3b:26:33:
58:cc:ea:e5:51:a7:8e:44:bd:4f:8f:5c:fc:41:17:
86:4d:23:74:a3:2c:8f:b3:f7:47:89:23:18:06:c1:
41:6b:c0:0c:f5:5e:68:30:15:d6:1f:b1:a8:9e:d5:
fb:15:bf:7f:23:71:3a:78:bf:3a:40:35:3e:d5:5d:
67:0c:6c:00:b3:58:4f:37:42:bf:57:11:00:e6:0d:
36:62:d0:c4:bd:bd:c1:44:76:7a:9e:52:ca:af:9f:
00:fd:b8:cf:c2:bb:c8:cb:2d:1b:7c:79:5a:09:6e:
4c:03:36:69:29:20:dc:00:60:c9:7d:68:74:56:fa:
5f:b5:df:36:b4:db:ce:39:b1:95:2c:da:99:18:67:
b8:72:80:f3:83:ad:0b:ed:de:2a:6d:d2:96:ea:80:
b1:50:ff:ee:f3:f9:1c:76:1d:e6:47:97:a8:c7:e4:
eb:4c:9e:33:f9:8d:a9:62:50:26:0b:af:a6:7f:22:
42:b1:71:52:e8:0e:f8:12:da:c1:73:64:c4:1f:fd:
f3:0d:4d:66:cf:50:a2:92:58:89:3a:e2:cf:60:cc:
c0:dc:5e:a4:ed:59:3f:c8:f9:48:c7:0d:14:dd:b2:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DC:71:4F:29:42:CE:C7:91:8E:62:09:E9:AF:6B:C2:0C:7A:D8:16
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8b:1e:f4:65:b7:5f:98:3c:1b:67:d2:ac:6a:59:d7:8f:2c:
ad:aa:1e:4d:a1:08:a0:fa:4d:27:10:5b:64:43:d8:d9:a5:80:
d9:16:e3:2b:fa:b6:4d:fd:0e:bc:aa:16:be:d6:9f:ea:ba:7a:
55:3c:9e:ca:df:86:c3:e6:f2:91:d3:44:4f:b6:23:ff:79:95:
56:ce:2e:0d:64:0e:be:8e:3c:68:18:04:0f:78:c3:e8:84:8c:
32:63:19:d2:78:8e:85:fd:49:b9:41:f2:02:f8:f8:2a:6b:2c:
f2:b3:4c:de:33:c0:f7:09:96:3e:51:4e:b6:24:5e:d9:08:3f:
5f:8b:9f:f5:5a:78:84:54:94:f0:69:cc:6f:b2:60:bd:4d:1b:
b6:29:ae:88:47:b7:df:93:b3:73:79:97:68:d1:f3:b2:7e:44:
57:f7:bd:56:fb:17:37:78:66:b9:3f:7d:03:c3:53:e7:f6:c2:
da:1e:fc:45:f3:9e:7d:19:9a:8c:7b:b6:89:02:07:e8:9e:60:
6d:2a:66:5f:70:7b:71:18:00:43:7d:4c:20:ff:50:e4:ff:6e:
c9:ca:2c:f4:e9:80:89:5a:ff:f4:16:d3:da:3d:a2:89:51:4b:
7b:31:70:36:48:95:e8:ac:6f:5c:a2:7f:53:dd:ea:bf:7d:83:
ea:84:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:17 2025 by rpki-client