Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: MoVAUDpH416XTbDx5TgddYO/4GVmWkjPwkjJvq8Qwp0=
Subject key identifier: 2E:7F:C4:E1:42:76:43:8A:24:D5:62:64:46:60:DD:7A:C4:29:A2:D0
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019A71134FB2F754F1B563C653EFDDC7C65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 16E4
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: 6O0YboNFcCLK/OKnEq2J30iFyzlK2hb+/wzinn4RhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4f:b2:f7:54:f1:b5:63:c6:53:ef:dd:c7:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=2e7fc4e14276438a24d562644660dd7ac429a2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:2d:19:09:ab:41:81:30:5f:14:bb:25:c7:
93:9c:96:d8:27:86:4f:91:79:23:7d:e7:1a:38:5e:
d5:1d:e5:42:54:7c:09:12:a1:66:4d:5e:e5:da:3c:
58:2e:c6:0e:aa:81:c2:89:de:53:6c:51:b6:35:36:
cc:95:69:d5:81:a6:f0:bb:bf:88:30:a9:81:0b:11:
ba:a8:47:ee:f9:1f:c9:ba:e7:bc:bc:5c:69:c7:b3:
69:8c:e1:a2:4f:64:72:07:e9:8e:26:62:b8:14:92:
4f:32:e6:42:0d:3c:01:1c:a7:10:09:cb:b4:da:0c:
40:c8:c1:3e:ca:ab:46:77:00:81:1a:e9:44:02:f0:
70:25:1d:d2:5e:66:2a:a2:9f:7b:6f:fe:7e:f0:fc:
86:bf:9c:6b:f1:80:c1:55:9c:5a:16:91:da:0c:7f:
7c:2a:4a:61:8e:88:a1:44:80:c3:74:57:1d:87:b8:
59:08:20:60:88:cf:47:05:c0:cf:16:25:fe:15:7c:
36:27:a9:07:90:78:e1:bc:9f:75:9f:38:7b:ac:e6:
de:e7:7e:3b:33:51:ec:16:64:9c:47:22:99:90:02:
db:64:5b:6f:ea:7a:10:6e:b6:f5:88:31:42:70:05:
25:c2:5d:c4:90:9a:6d:61:b2:5b:77:ad:8c:5f:b0:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7F:C4:E1:42:76:43:8A:24:D5:62:64:46:60:DD:7A:C4:29:A2:D0
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:26:01:b7:b6:b6:d3:0b:16:17:11:15:d6:94:c4:07:60:1d:
37:52:1a:b0:a6:73:29:69:8d:de:fc:19:d4:30:ee:80:2c:e5:
26:e5:07:74:cf:ca:c9:01:8c:b2:c6:2a:31:17:bf:f0:8a:ac:
5d:c4:c0:51:c1:81:f5:d1:df:d3:1a:52:23:72:86:41:c1:d8:
b6:33:ee:31:56:c9:8b:7a:67:97:7e:c9:78:f6:12:e9:2b:77:
37:2e:30:31:a6:13:9a:14:78:84:6b:7a:a4:3f:71:2d:13:da:
92:bd:60:98:05:d3:7e:96:9a:82:86:83:37:87:3e:03:b2:64:
a4:e6:94:3f:2a:2a:fa:8b:4e:2a:87:11:92:ef:6b:27:05:11:
a6:54:df:fb:81:38:28:9f:e2:20:c4:bf:ad:b3:29:d7:6e:e1:
af:a1:48:03:b2:c0:56:ae:c3:8d:9e:b7:76:e1:7b:24:c4:56:
ce:d0:25:9d:30:89:36:f5:a3:ef:c3:25:77:de:b2:d9:17:72:
cb:31:be:90:7c:39:c4:94:f2:f3:60:7b:5a:bb:89:ac:c2:d8:
8c:36:b5:64:ad:46:38:7e:8c:c6:f9:1a:16:0a:52:e9:6d:8a:
2d:3d:98:c8:04:54:8a:46:09:e0:be:bb:6b:18:58:ca:6d:12:
98:ea:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:06 2025 by rpki-client