Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
File: ufurlhxKPhbNdhvC_tuaKBd8tHM.mft (raw, json)
Hash identifier: 78hKbjPwxMprFXx+6xGGJ1qiSA/6UQ6hhMPUk9yeiqw=
Subject key identifier: B0:FB:1F:91:0B:BD:4A:1F:5E:15:37:F2:77:8F:5F:C4:1A:C0:6D:2F
Authority key identifier: B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73
Certificate issuer: /CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473
Certificate serial: 019A7149F66802CCD5795B0BC86D27D5ACF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
Manifest number: 01A4
Signing time: Tue 11 Nov 2025 05:01:03 +0000
Manifest this update: Tue 11 Nov 2025 05:01:03 +0000
Manifest next update: Wed 12 Nov 2025 05:01:03 +0000
Files and hashes: 1: h4uw6ufwFOQi4mDrtcZ6XaqmPV0.roa (hash: h3p/LWTg/DWcs8xgDXGpmbcqHQbGvNr+C69wyUtdibA=)
2: ufurlhxKPhbNdhvC_tuaKBd8tHM.crl (hash: DbSWVjJu/h4b5k/69L3KVmeayjbE87B/XgHksZccNfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f6:68:02:cc:d5:79:5b:0b:c8:6d:27:d5:ac:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473
Validity
Not Before: Nov 11 05:01:03 2025 GMT
Not After : Nov 12 05:01:03 2025 GMT
Subject: CN=b0fb1f910bbd4a1f5e1537f2778f5fc41ac06d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:06:cc:8c:b1:37:6b:66:6c:f4:61:1e:a2:
25:d7:bb:95:42:e1:bb:c2:bc:0c:61:f1:d3:62:81:
61:96:ae:e4:d7:22:56:4e:86:b1:5c:91:b0:ab:e2:
d1:bf:18:88:5b:3d:17:8f:56:cf:e8:57:87:92:5f:
a3:ae:fe:a6:71:27:35:37:fd:ac:58:1c:4d:f3:c7:
07:fa:dc:cf:f2:b1:0a:bf:8b:38:3b:50:84:2b:e9:
99:46:83:34:e9:8b:8e:c6:e3:ce:90:8e:11:e7:2b:
cc:12:27:37:42:40:ff:25:60:e1:62:4a:b6:dc:11:
a4:1f:0e:5a:1a:51:2c:bc:80:19:0a:12:cb:a1:ba:
96:43:2e:77:e8:e3:84:d5:a5:85:c9:86:76:17:a2:
ae:a4:ce:44:f0:62:35:90:9d:02:35:18:af:d3:cb:
d7:37:51:44:81:31:27:0b:2c:6d:0b:45:6e:ba:0f:
01:c6:fe:ed:fd:12:a3:98:5e:12:92:59:9b:91:e8:
5c:62:c5:04:dc:47:99:63:dc:d6:51:48:61:23:0c:
4a:50:bb:a7:a9:24:a1:97:58:8a:71:b0:bf:44:44:
41:0f:7f:77:71:48:12:43:07:17:4d:f2:83:3d:f5:
11:15:a6:e4:7f:d2:91:b5:f4:7b:90:ea:d8:72:02:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FB:1F:91:0B:BD:4A:1F:5E:15:37:F2:77:8F:5F:C4:1A:C0:6D:2F
X509v3 Authority Key Identifier:
keyid:B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:63:8c:2c:16:53:90:90:dd:9d:20:ac:91:da:78:f7:2e:c1:
07:f3:8f:18:5e:1a:e7:62:fc:22:1d:31:29:89:1f:56:8f:f0:
3f:87:ff:05:ba:fa:f3:4f:b1:a0:81:a9:fa:3e:b7:82:84:c5:
c9:06:ff:13:a6:de:f7:fa:ff:e6:36:87:f7:f5:6d:90:98:18:
ca:e0:a9:6e:0d:6e:70:7d:e6:17:11:16:45:f2:df:21:67:57:
e8:3b:97:ac:74:96:40:5b:b7:a3:e0:c9:b2:b0:9f:19:39:b8:
17:72:6a:56:1c:8f:eb:9e:38:b6:5d:8c:2c:ca:fc:bc:a5:6b:
b1:38:35:38:e6:15:6d:7d:22:09:90:10:8c:bb:14:cc:ad:6c:
9a:f9:e0:b8:b5:fd:ad:0a:f3:7f:e6:62:1b:f0:cf:0c:9d:cf:
85:12:76:6d:09:9d:a8:a1:c7:79:ae:68:d1:c5:0d:1d:1c:4d:
fc:a7:5f:ed:fa:c9:f9:70:0f:c3:b5:c2:8a:7b:d5:29:d0:f1:
c5:a4:fc:aa:84:dc:fb:16:d6:f6:c4:48:87:c6:03:a2:09:b3:
e3:10:e7:6d:3b:db:8e:58:af:62:65:48:ed:04:9c:ee:25:f1:
06:48:08:5c:76:20:c5:69:0e:3d:3e:97:b7:bb:78:63:f7:09:
43:bf:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:37 2025 by rpki-client