Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier: kCF9+fJVvD91DTIO+tXc2FqCdOPIBg/Vfq/RzZSZbEY=
Subject key identifier: B3:38:F5:CF:A7:95:E4:18:FE:72:1B:CF:8F:10:9B:50:CD:02:09:14
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019A7112B441E503F2F225722D790FCF48CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: fLRx3Io7VJ3anRl9xU1zMXYGX8qD8xhaA0tDuXWv0vY=)
2: ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa (hash: eMuwrfWnfxM1wbDxkNrz13AdocnFAytqpqdxZyIl058=)
3: ne7qsdOlLQR8_nG6p7MVEAshtxk.roa (hash: b2CjvPaYoVbJ4qHUSs8bzU5L8lkSjdW1w+FExaBaHqU=)
4: owuwWzW3ptzbUlMGr01FLYIGSSY.roa (hash: E0V5+KOpIdqo+plR/JmJS5ifpH340RwXyldBs+uj1oQ=)
5: z1ERBgPc796EUpstpTm_KKosGxs.roa (hash: 1uUH+Aes6TW/J4OIjEYgjpDXA6d37PjKx+xzTglktTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b4:41:e5:03:f2:f2:25:72:2d:79:0f:cf:48:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=b338f5cfa795e418fe721bcf8f109b50cd020914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:2d:0e:97:bb:5a:c7:37:0c:41:0a:3f:e9:
7b:b6:46:49:16:01:92:b1:76:df:7e:45:f5:7e:ee:
2f:44:a2:8d:39:96:b9:87:94:5c:26:16:22:88:99:
63:c2:52:61:88:52:16:c1:e7:e0:d7:af:eb:2f:7f:
d4:e9:ac:3b:fb:0a:4f:6a:8c:99:2d:62:72:27:d0:
11:07:96:70:fd:09:80:97:45:09:01:b8:76:99:3a:
25:fb:52:81:5e:02:ef:30:29:a3:83:14:b5:9b:bf:
b6:ed:dd:f3:d5:cf:b1:fc:4e:8c:59:e5:d0:9e:f8:
fc:67:c0:9d:7e:a1:06:5d:00:e6:ad:62:53:69:c1:
d0:bb:d2:4d:5e:93:8a:81:e0:6d:6a:eb:47:c3:83:
e1:9a:7e:a6:9a:9a:40:93:45:00:a4:16:d6:18:bf:
aa:44:d9:0b:f3:16:29:90:a7:6f:1a:b4:ee:93:df:
b0:0e:f5:95:66:6d:ef:da:3e:c8:ee:6b:4c:b8:67:
fa:a7:2b:bc:71:0f:0c:49:6c:50:60:71:47:3c:48:
96:f0:61:d4:8d:14:e9:8f:3f:b9:f8:84:c7:eb:f7:
6f:f5:2d:3a:a3:3b:5c:a6:bb:27:34:24:b1:32:e7:
51:40:77:cb:e8:3e:00:6d:82:a0:f1:1d:ce:80:77:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:F5:CF:A7:95:E4:18:FE:72:1B:CF:8F:10:9B:50:CD:02:09:14
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:be:1d:9e:9e:74:7a:ac:9c:bf:18:80:e9:a6:5b:ba:e3:e1:
b3:92:a2:73:67:2f:42:d4:fe:67:d1:06:15:b9:8c:ac:a6:93:
6c:73:d0:3c:d0:d2:4e:ff:c8:fb:2d:66:ec:63:53:c3:61:73:
b8:85:39:2a:d0:4d:ad:24:3e:fb:05:d7:9d:36:ed:af:62:28:
a0:98:48:b7:30:ed:63:69:78:b6:90:8e:e4:ef:d7:96:d6:a3:
ba:41:70:ae:13:cc:65:94:33:f2:6e:ad:e2:70:c4:fe:a8:e0:
8d:dc:12:d0:ae:59:a8:ee:2d:9e:a0:29:4d:0c:40:a8:fe:fa:
fc:17:25:93:f2:9e:cc:87:76:4c:c7:31:bc:a0:5b:c5:dd:98:
42:75:ae:b5:16:b4:71:5b:38:e7:ca:96:02:9c:23:ab:01:eb:
25:1f:ce:ae:80:2e:4d:c0:50:5c:35:76:6f:6a:20:64:4c:ca:
ee:62:04:52:f5:5f:6a:20:23:3d:30:77:0e:68:bb:a8:7c:bb:
67:8c:e8:3b:de:df:4c:21:84:7b:a6:38:d6:b9:eb:ae:b6:10:
39:59:3d:1b:f9:85:08:08:5a:38:f9:2d:58:88:54:06:da:32:
1c:ad:f1:18:d6:c7:6f:fa:92:f0:f9:3b:97:9a:0d:bf:98:44:
22:90:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:36 2025 by rpki-client