Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: 9NxJ+WZTCn2qkwDs+QaJwJJnPaQM/yw9UtEorkYxc+Q=
Subject key identifier: 93:B4:AE:99:F6:9E:92:9D:4B:2C:79:D5:ED:F5:E9:2D:59:E4:6E:D6
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 019A7149CDA01EF48C9DBA76A825ED9B5D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 15F9
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: KOY956O0ZjGYECFFFDbPr__HT1k.roa (hash: PSHRUyvb1HDzLSIQ11VKvNrKXl5fv+dVEb1Xq/ei9D8=)
2: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: 0OIFkRZ2RDyTrE9ZMPxaIOBFOv9WI/EA2hVyZPgeRyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cd:a0:1e:f4:8c:9d:ba:76:a8:25:ed:9b:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=93b4ae99f69e929d4b2c79d5edf5e92d59e46ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:60:3c:30:e7:ec:37:7a:b3:d9:63:24:35:
ea:8f:50:bf:27:41:ce:8b:b1:33:03:91:c4:7e:74:
04:fb:78:53:0f:c3:30:ea:9c:9e:fa:f4:c2:0e:f7:
a8:99:c5:b1:85:e0:fb:1f:e7:03:85:ca:b2:b3:c5:
74:4b:ef:9f:92:26:10:42:9d:a5:34:57:a4:df:fb:
a1:cb:b8:92:cd:de:d6:d8:ea:e6:f4:72:f4:09:e1:
12:e0:56:a1:3f:df:ee:1c:d8:30:8e:e4:5a:dd:1b:
9d:de:5b:12:69:03:ab:e2:2a:b9:cf:49:c0:3d:05:
a6:42:d8:30:b9:b6:4c:bf:3e:f5:4d:ff:29:bf:a3:
d9:3f:3d:5b:e9:ca:d3:f5:de:b5:58:e8:c8:00:c3:
57:95:4e:ee:d9:00:53:66:f7:7c:cc:8c:89:05:54:
fd:ad:fd:14:58:0d:1a:7f:1a:3a:18:99:8f:48:48:
10:e4:03:2c:89:89:41:c4:68:8e:c9:b8:87:53:1e:
70:66:4f:92:cf:29:3b:1d:44:b4:26:44:07:13:08:
8f:c0:49:8a:b0:ca:d5:3b:35:51:09:54:2f:98:f7:
0e:6f:f6:b1:7a:a9:cc:46:2d:fe:ad:51:21:50:96:
52:a4:1d:de:1b:d8:75:6f:ba:53:2f:69:98:0d:45:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:AE:99:F6:9E:92:9D:4B:2C:79:D5:ED:F5:E9:2D:59:E4:6E:D6
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:47:86:f2:07:6c:fa:d7:7f:1f:87:e0:bf:c3:e1:69:29:f9:
1d:b1:c7:2b:c9:2f:a9:2e:5d:8f:a6:d3:fe:a7:40:2d:04:cb:
17:f7:ed:38:01:1e:54:78:67:72:21:4d:09:93:17:02:4d:50:
44:08:2c:72:51:12:4b:ff:ce:9d:af:f5:ac:30:a7:8e:41:46:
c2:b1:38:14:0c:a5:f3:9d:fb:67:37:9c:89:28:4d:67:d2:b4:
ed:41:16:84:50:4c:66:f6:e7:59:7b:e1:73:1a:29:61:dc:e1:
78:5b:0c:12:b8:d8:de:8c:9a:c9:aa:63:86:82:82:5d:9f:22:
a1:06:84:5d:0d:2f:ee:66:62:d7:f6:a9:d2:be:9c:f3:de:67:
fe:ac:16:2a:71:53:7f:27:08:03:54:e1:e4:c6:d0:ae:dd:0b:
5e:f5:e4:46:c2:35:0a:a1:e7:a9:89:d5:cf:20:7a:af:a3:c3:
53:86:f2:50:5f:8f:f8:e0:59:19:f5:2a:33:57:6a:ea:ae:f4:
37:33:98:c4:be:57:e6:7e:de:6f:8d:9c:22:f3:22:29:8e:12:
48:5b:35:86:07:b0:76:34:d7:9f:fb:12:f7:69:52:00:f2:aa:
43:5d:f1:44:e2:4b:0a:71:4e:11:e1:10:06:9f:23:cf:93:5e:
8a:86:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:16 2025 by rpki-client