Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: EoS2wNxht6qa2aTbMues9cS/Mtng2Bn4FCUF4JwvXeo=
Subject key identifier: 8E:69:F0:F4:12:17:E2:34:C6:7F:F3:3D:B9:A3:9A:B0:B1:38:21:9D
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 019A7337F500C4019223703167881B34EF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 14:00:38 +0000
Manifest this update: Tue 11 Nov 2025 14:00:38 +0000
Manifest next update: Wed 12 Nov 2025 14:00:38 +0000
Files and hashes: 1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: XtnM8TEpG5kQat5Mi3q58kWe9IoMODPbBW7AWO5DRws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:37:f5:00:c4:01:92:23:70:31:67:88:1b:34:ef:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Nov 12 14:00:38 2025 GMT
Subject: CN=8e69f0f41217e234c67ff33db9a39ab0b138219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:c0:0b:da:9f:ea:c9:bc:58:17:82:4a:8d:
02:ba:42:d6:ef:02:79:74:96:47:ff:bf:c8:dc:b1:
fd:44:cc:4f:82:fb:4c:75:a0:ad:ce:5c:b9:9f:8b:
e7:4a:a8:df:52:11:d7:e1:8a:76:da:28:08:c7:84:
d3:2d:c1:8a:0f:ec:13:2c:32:7d:ec:f1:64:d1:8f:
9e:f3:d0:61:f1:db:c0:c5:58:e3:c9:89:3d:57:45:
bb:e4:6a:cd:a1:84:d5:c6:ba:3a:a1:49:10:73:de:
17:59:2c:0b:db:6e:15:33:41:b0:bb:df:a5:b9:09:
70:df:97:4b:59:d7:d4:e7:67:c9:af:24:d1:57:91:
6d:56:31:99:91:f5:65:fe:b5:a4:95:b6:ff:4f:f8:
5d:8c:22:a7:df:e4:ed:cb:80:a0:e0:f2:e4:94:72:
7d:17:cc:64:58:a1:04:02:a3:8b:71:f3:02:84:0b:
ec:d4:ff:30:ca:01:bf:db:7d:42:a2:8e:5a:db:c4:
8c:24:64:6b:32:6d:a8:11:55:8d:55:db:b5:e2:87:
57:6a:47:fb:a0:02:b4:1e:01:27:0c:63:e1:59:9f:
c6:af:b0:67:2e:c9:45:cd:03:97:c9:de:21:88:57:
42:cc:60:0b:c3:64:7b:b4:d0:b8:5d:98:98:d1:f5:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:69:F0:F4:12:17:E2:34:C6:7F:F3:3D:B9:A3:9A:B0:B1:38:21:9D
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f4:8c:a2:8a:fc:dc:24:14:91:07:92:7c:bb:a0:ac:2a:e0:
39:63:4b:e6:0c:ea:83:61:fc:26:89:f2:65:cf:59:a4:63:81:
28:d5:97:4a:aa:2c:8b:a9:a0:82:b1:51:86:90:73:c1:82:5f:
b5:48:1e:7a:05:e2:c5:aa:c5:61:da:7d:e8:4b:82:46:a9:8d:
44:c5:03:0d:ff:53:3b:d0:e7:e4:a8:10:1a:25:f0:50:07:c7:
36:9c:fb:e2:49:af:c4:6d:a5:d3:b1:62:03:e2:fa:9b:6e:df:
9d:45:bb:ce:8a:3e:74:a5:f2:52:a1:de:47:d3:b6:8f:e7:81:
92:99:81:f5:8d:f0:40:29:35:a6:d0:01:2a:47:1b:17:33:94:
16:2f:25:4f:0b:a6:04:ee:b9:b4:17:b0:1e:31:4d:af:42:4c:
72:f1:3f:33:b6:5a:43:aa:a0:25:4b:0c:71:fb:9c:04:0b:da:
5c:55:db:2e:07:c8:6f:b8:a4:7c:c5:70:2e:c7:5f:53:4c:fe:
18:35:f0:43:7c:80:dc:81:58:0f:99:0a:16:59:e7:8f:2b:8c:
0b:d9:e4:e3:98:5b:d3:f1:7c:3a:25:e7:9b:28:ec:51:17:a7:
45:65:fe:4b:5b:47:34:b3:58:3e:e7:f4:ef:98:76:70:ff:2d:
ef:b9:d3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:23 2025 by rpki-client