Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: lT9mU7SHPjhzsggKJInaEsp4dFk+Dnv/it8ok3hkt4U=
Subject key identifier: 72:28:A0:AF:A6:5A:90:C2:B3:81:9A:77:09:68:F7:26:8F:6B:E6:15
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 019A730179517FF30AD4843F8F47D1E407FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 1732
Signing time: Tue 11 Nov 2025 13:01:07 +0000
Manifest this update: Tue 11 Nov 2025 13:01:07 +0000
Manifest next update: Wed 12 Nov 2025 13:01:07 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: xcP3HVRM8DmiorUE8r3sxzEu+ZKKzTLMmcsk2iDrn9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:79:51:7f:f3:0a:d4:84:3f:8f:47:d1:e4:07:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Nov 11 13:01:07 2025 GMT
Not After : Nov 12 13:01:07 2025 GMT
Subject: CN=7228a0afa65a90c2b3819a770968f7268f6be615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:0c:20:22:7c:86:93:9e:cf:fc:92:bf:c1:
96:24:66:ea:c3:46:85:a9:20:6b:a4:78:00:b0:ab:
4a:56:65:a9:4f:a3:19:b9:cc:e1:50:46:a2:91:37:
27:bb:37:6c:18:39:45:37:51:6d:09:10:60:5f:0b:
16:0d:b6:bd:f3:b7:52:7e:51:ab:db:f5:36:a9:d6:
89:12:d3:3b:ce:65:f1:26:fa:a2:39:7f:98:1c:a7:
5f:a3:ee:a7:98:4a:a5:2a:d2:82:9a:79:e2:45:32:
d8:b3:ab:5d:57:fd:b0:27:d6:42:81:24:11:e2:e1:
f4:0c:49:71:80:9f:e2:ec:a8:8f:f9:6b:73:91:9f:
28:3c:01:18:37:f6:9a:56:73:b3:96:f2:9e:21:78:
51:16:3f:ef:91:67:93:e3:f4:d9:82:d8:6d:24:ec:
c8:42:cd:92:92:92:e3:db:51:92:30:6b:c1:36:0b:
9f:e7:92:be:fb:ac:5c:36:3a:12:41:39:b2:d6:b1:
c9:75:b4:cb:e1:21:68:ad:74:ad:cb:f9:8f:85:53:
4c:d7:44:37:6e:84:20:3b:45:9a:47:d4:7f:c9:d2:
fb:83:d8:e8:5b:e0:fc:7e:8e:01:31:0d:6a:8a:f2:
c1:3c:a2:2d:63:2e:66:65:2d:f2:13:13:7f:da:97:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:A0:AF:A6:5A:90:C2:B3:81:9A:77:09:68:F7:26:8F:6B:E6:15
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:2a:f5:fb:10:bf:05:9b:4d:06:07:f6:56:4d:63:89:9e:
f9:f9:7b:37:e1:ca:68:0c:e8:c6:4c:4f:15:e2:37:95:92:8c:
be:37:88:6e:9b:dd:2b:81:1d:68:be:b9:de:a2:09:10:6a:9f:
27:94:62:70:21:9b:31:36:bd:09:f7:fc:21:65:30:a9:35:1c:
15:c7:6f:c6:da:8b:89:b9:37:5a:2a:e9:71:93:29:ab:50:a9:
d3:a6:ee:01:af:50:0f:7d:d0:74:94:9b:2e:c3:f1:8e:76:a9:
03:e5:77:f5:25:ce:5c:b5:6d:55:f4:73:d8:44:b0:51:29:8d:
af:ba:26:ee:89:aa:ea:d6:09:57:5a:c4:de:bc:b4:86:2b:09:
20:99:4c:df:d3:9a:a7:f7:ce:b9:36:5f:e1:e4:fe:60:66:cc:
6f:7d:04:66:08:b0:7f:78:44:f5:28:67:7e:43:70:f7:6c:f0:
cc:1e:c4:bb:12:76:d9:eb:ab:08:f9:ba:cc:0d:78:81:3f:3f:
41:d0:02:bb:99:49:54:e4:ae:cb:8a:16:92:5f:8a:40:fc:22:
7c:4a:a8:2c:9a:91:74:73:dc:a2:22:d4:4c:41:3a:c2:5d:ab:
13:d5:83:73:c5:10:af:a7:99:60:25:df:75:33:bb:1a:c1:1b:
70:3c:96:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:49 2025 by rpki-client