Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File: sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier: Ix4MB5VgR+/Sd/nJs06dEbYnn+wXz5hToIHB1OKgC14=
Subject key identifier: 42:23:A4:7C:AA:3D:96:FF:1E:3B:47:5D:F5:89:74:2B:7C:5C:0C:45
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 0199FBEAC0B85DDE74B56A8BB7D7C62A725B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: DNhIHCVoBglUmAVlCkJ5G-L36yg.roa (hash: 31245JAwO/UkCcpQa4UanpWYM+ItoRpnBX/McoOb5tQ=)
2: FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa (hash: DYs9L8yM8et51Ym0pIsTXdtN2ADOJkVDLkBPalnCV9A=)
3: fIN0CuyWjIdLGQA-5hoaOxgsCEU.roa (hash: NyCjKtY4yfk/Nsn/Ck5PkA1Ia9CEltJSbyJgOPEbXmk=)
4: iipSuvIjR47VudmgbPEDa9JY9oY.roa (hash: UNIVy+xZ2R8yR9G0m1INDMtIUCeoWGaMGRk0QvHxxTQ=)
5: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: dkSk62FOISj246EFZlQ8OcWnP2b9pAbwnNrOmbtLo+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c0:b8:5d:de:74:b5:6a:8b:b7:d7:c6:2a:72:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=4223a47caa3d96ff1e3b475df589742b7c5c0c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:05:47:4b:25:4b:72:ad:d2:57:87:fb:a2:
79:1a:87:4b:e8:33:a2:d6:5e:56:c6:5c:6b:b0:0a:
4f:e5:6f:f8:ca:75:2a:b8:b5:92:18:af:ab:6d:78:
3e:ea:f9:31:2b:a0:bd:49:ec:38:81:2a:12:58:f0:
85:cf:13:e2:c0:7a:b0:44:78:3d:41:39:bc:98:a2:
27:8c:e1:1e:9e:fb:d5:1d:d0:92:56:75:d4:d0:3c:
08:ff:42:71:8f:82:33:0c:9e:d8:ad:db:c8:79:bc:
57:90:6f:be:d2:24:18:89:a4:d9:78:cc:e7:37:66:
2e:96:7c:c0:58:97:62:a4:66:b6:18:e4:e6:85:8d:
69:97:51:a7:1d:74:e4:d5:7b:f0:9a:ed:67:3e:f1:
21:8d:68:c6:90:e8:58:8b:46:79:19:39:39:c9:d3:
ca:67:ce:06:8d:6a:db:39:19:8c:f7:86:b0:b8:24:
39:4a:a4:a5:3b:de:ae:eb:e6:72:e3:62:2e:e0:5a:
5e:99:a7:6d:de:be:4d:01:a2:b3:93:8c:98:94:27:
a5:15:56:95:07:f0:fb:26:09:d6:08:37:4d:15:63:
38:ed:98:8c:a6:f1:d4:40:ea:da:b4:1c:b4:39:7b:
fa:9f:0e:64:a1:23:1a:0c:ff:04:52:94:2f:b5:9b:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:23:A4:7C:AA:3D:96:FF:1E:3B:47:5D:F5:89:74:2B:7C:5C:0C:45
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:60:7f:98:2e:c7:67:aa:eb:19:9c:ab:4d:eb:9d:e6:d3:06:
7d:fd:f9:d7:fc:bb:46:54:6e:b0:1d:f3:98:9f:39:d6:7f:18:
14:fa:62:31:aa:6c:f7:7f:44:bb:3f:9b:28:e0:12:47:50:24:
7e:b6:a8:81:83:df:91:0f:cc:e6:82:c7:42:e2:53:b5:f2:62:
bd:0f:29:56:38:d7:54:f9:ac:18:bd:93:50:6b:eb:73:26:1a:
61:d9:48:21:9c:eb:bc:eb:c0:34:40:7d:e4:bd:a2:f7:0f:55:
a5:f8:56:07:51:8c:57:1c:a6:32:e2:07:c5:61:1e:95:2a:dd:
e0:f9:89:42:a2:f4:75:89:35:ef:fd:1f:a0:c9:48:07:3a:e7:
36:dd:a9:c5:d6:9b:e4:af:a0:cf:dd:d4:8d:45:2e:0e:ff:5c:
35:e2:98:4a:07:15:3a:3b:53:d2:2b:17:d2:f8:2f:bc:a8:ff:
72:6c:ef:c5:cb:e6:d0:77:3d:32:aa:1b:09:1c:f1:7a:1c:74:
0a:88:21:5a:b2:55:f8:3c:52:5b:f4:79:ea:6d:a2:80:27:13:
0e:81:9b:46:f2:b5:c4:6b:06:a1:4c:11:2c:70:73:05:e6:e2:
21:61:ec:2f:77:9f:5e:a4:18:b5:d7:6d:c3:59:89:c3:46:1e:
df:6c:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:50 2025 by rpki-client