Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
File: uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json)
Hash identifier: qBYDhM8GMPXz2IF/sBoe5bWwnVDfY52mabBZDgllgrw=
Subject key identifier: 41:B9:D4:84:C6:5E:82:88:74:4C:89:FC:AF:5E:D4:0B:8C:23:C4:A7
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Certificate issuer: /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial: 019A71B7F51327BB39195F191B98D99D892A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (hash: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=)
2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: BimiH/N587fBmLwSqkZyAdkK/8QzuPjHclyieQqaHCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f5:13:27:bb:39:19:5f:19:1b:98:d9:9d:89:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=41b9d484c65e8288744c89fcaf5ed40b8c23c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:72:5d:44:79:f3:87:a9:80:80:fd:1e:94:
1e:da:e4:dd:a2:a0:24:0e:bd:be:c7:75:fd:69:96:
41:0a:7a:e6:fb:10:7e:0d:26:69:0e:7e:ab:0e:c2:
29:4c:2f:9f:64:14:c7:49:d0:6e:a5:1c:59:42:8f:
cb:3c:ec:ac:01:bb:bd:ac:a9:96:de:7b:a8:ee:03:
74:98:10:4f:fb:1a:6d:76:99:7b:ea:0b:b5:bf:42:
80:75:77:4d:03:24:e8:32:02:d3:4c:45:40:2e:c9:
10:fd:29:d8:e7:22:9d:04:ca:bf:a3:06:1e:62:a0:
00:18:5c:fe:e7:16:eb:67:26:24:fb:1f:87:60:33:
4d:ac:d0:c5:20:43:af:d0:c1:1e:43:a6:8b:ed:b4:
1d:ec:c9:69:e8:00:88:a5:71:74:68:58:cd:82:b3:
60:c9:16:b9:cd:ed:7d:bb:40:47:43:ca:2b:b7:9f:
f7:4a:6d:dc:89:a0:33:67:58:1a:23:94:1f:ea:6a:
10:ef:97:30:f8:e7:c5:43:52:69:fb:7c:e7:7a:3d:
32:86:38:1d:ae:78:03:cf:ff:2e:55:00:44:0e:91:
a9:ad:48:2b:58:e7:d7:7c:9f:4a:4a:20:81:c1:73:
c7:45:93:bd:9f:27:66:0a:f5:fe:be:68:07:d6:4e:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B9:D4:84:C6:5E:82:88:74:4C:89:FC:AF:5E:D4:0B:8C:23:C4:A7
X509v3 Authority Key Identifier:
keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4a:09:8b:e4:dd:d7:0f:c1:6d:24:84:7f:ac:6c:fc:20:93:
95:e1:11:38:bf:24:5d:c6:eb:01:68:98:31:96:38:ce:d6:4e:
0d:a1:f9:fe:58:39:92:e7:f4:eb:28:0b:e2:5f:75:e1:b4:16:
11:fc:17:4f:47:c6:a0:21:78:7c:14:05:50:de:70:bf:c9:8f:
4a:e7:18:71:40:63:77:93:00:bb:fb:04:ea:be:ba:9f:64:df:
88:92:5f:51:6e:c6:92:ca:dd:e6:c7:30:f2:db:bd:fe:46:da:
d9:22:00:b0:fb:13:72:be:ac:a0:87:ee:82:f5:17:06:f7:4b:
0c:8f:e3:f2:fa:b5:08:25:1f:ef:5e:14:de:17:df:2e:50:df:
e5:78:fa:4b:4f:36:d6:7a:5f:8b:e0:90:a6:81:90:4c:c8:bf:
cd:ab:ed:bb:a3:37:fe:3c:36:d1:52:00:9b:53:23:58:fc:b1:
a7:06:74:22:e8:1c:33:30:a7:fb:85:73:65:56:4a:db:f0:fb:
21:cf:3d:cd:1a:14:51:50:e5:de:c4:70:8d:5d:76:8a:c8:fc:
0a:a3:e6:3d:56:62:b8:00:d0:93:a7:12:fb:eb:9e:36:9c:ad:
5b:73:2d:17:7b:eb:ee:a5:fa:c3:fe:e3:00:86:33:d4:15:86:
f9:5e:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:18 2025 by rpki-client