Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier: F/CMQiAofwc/KeszntP2KXionMpM0yxbZHMA2im8ji4=
Subject key identifier: 15:67:7E:F0:E1:72:56:B7:A5:E9:A2:6A:AB:02:EB:2A:BE:F3:6E:9B
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial: 019A7293E189A6586ED1647FC2C1CEC2BC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number: 16CA
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=)
2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: oUBk/YVRML6TiiQhH5Mk0sTR8WubzfVWD0PSU6w5bJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e1:89:a6:58:6e:d1:64:7f:c2:c1:ce:c2:bc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=15677ef0e17256b7a5e9a26aab02eb2abef36e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:4c:38:65:03:8f:f9:fa:5f:09:3f:28:35:
a5:53:cd:ad:fc:b8:3e:db:97:6b:6f:8c:10:89:bc:
ba:2d:fa:a1:4a:f9:6e:f5:96:8f:9f:ca:03:8e:33:
c2:1a:18:6f:52:60:5f:13:0b:80:ec:77:e3:e1:69:
22:0a:bd:ec:9c:ea:8f:7c:1e:3d:f3:f7:fb:43:16:
fa:f3:81:90:90:d2:49:76:79:b3:ea:e6:0a:6d:d5:
8f:97:f1:25:26:84:58:c3:1e:06:f2:e2:36:41:c3:
0c:b7:bb:fe:87:c3:dd:9e:6c:c4:6a:4c:c3:0a:3f:
92:d3:83:c5:9a:f5:22:19:49:91:bf:67:bf:eb:3f:
1d:a9:98:fd:3d:05:6c:98:71:f9:eb:9c:c1:57:93:
9f:4f:df:c2:34:fa:c5:d8:4c:3e:48:c6:fe:3b:21:
41:70:36:62:54:b1:37:bd:21:7d:59:ec:0a:1e:b4:
a9:b7:31:d8:6d:07:d6:62:3f:44:9f:34:5c:58:15:
3e:3a:a3:dc:66:d0:91:55:fd:7f:0e:3c:54:3e:c2:
b6:22:2c:83:c0:38:1b:9c:dd:f8:3a:b2:f6:f4:07:
74:85:62:cc:46:c4:b9:68:29:29:68:79:9b:6b:6e:
0c:91:3d:23:05:14:d3:87:d1:4f:2d:48:42:43:a8:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:7E:F0:E1:72:56:B7:A5:E9:A2:6A:AB:02:EB:2A:BE:F3:6E:9B
X509v3 Authority Key Identifier:
keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:62:5f:21:b0:8a:d9:99:79:24:66:3f:9f:db:59:ba:d1:8f:
c3:13:ea:ce:09:fc:13:cd:9c:d5:ca:dc:b5:dd:9e:3d:f3:72:
5d:23:7a:fc:cc:20:13:ea:1e:a8:ac:23:2b:c5:80:b1:87:91:
8e:f0:a1:da:55:ee:9a:fe:8d:0d:6c:fc:aa:36:31:b1:c0:e7:
99:69:82:72:05:aa:bb:03:75:4f:56:4d:58:de:da:b7:10:1a:
ba:1b:ba:36:57:e0:f2:53:9f:53:13:93:89:39:83:4e:77:b8:
f6:05:b2:7c:c6:e0:9e:95:96:eb:c5:3f:cf:c3:19:57:c0:c8:
ae:1d:6c:82:11:1a:3c:3b:7d:0d:25:d7:b1:1c:48:77:2b:4f:
a3:db:51:db:2e:79:3a:a1:03:49:31:8d:32:9e:14:d8:a9:ce:
1f:0e:03:6e:02:a9:da:62:00:ea:54:92:ad:d7:a9:98:37:ae:
8c:8a:5f:bb:cf:bb:d0:ec:76:8f:ef:84:89:7e:68:87:88:bf:
2a:92:2e:e8:e4:5f:9a:9a:00:f7:bb:5a:63:a2:08:29:92:e4:
c8:fc:9f:20:10:fc:9b:2f:67:4d:fa:b4:18:ee:45:52:26:3a:
fd:c8:65:e4:23:17:4b:3e:0b:3d:ab:fe:9e:be:4e:cf:b4:9d:
4a:1a:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:33:03 2025 by rpki-client