
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: LHueXhO2XznsMEPsUTjXfTkUgvhTc9aryr9VmULU/+A=
Subject key identifier: 0D:8E:23:30:7E:76:CF:AF:1A:AB:8B:37:32:67:0A:F5:20:73:F9:AE
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 0199FC8F6636F2B499B6A0A36B457871B8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: JTEfgbcrr8NRTkw-w0rbLDkwOBo.roa (hash: pDGrFl+zPntVOdC+wAqPCIkri5GYwFIWXTpGxCwXD/o=)
2: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: qeJmekxGZxGBd/41QGlPVYB0N6V7o5dOed3uPdYkqcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:66:36:f2:b4:99:b6:a0:a3:6b:45:78:71:b8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=0d8e23307e76cfaf1aab8b3732670af52073f9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:2c:0a:70:2d:bb:b0:8b:c0:f0:5d:ce:3b:
4c:38:75:9f:78:7f:aa:5b:65:f4:12:46:45:2c:cd:
f2:e1:bf:52:b3:85:43:69:16:af:f5:3e:66:a9:af:
2c:1f:0c:56:5f:30:d0:45:f1:2f:5f:74:d8:90:c2:
90:32:fd:09:17:4a:41:45:e0:4b:74:1a:df:75:69:
93:c7:15:b6:85:50:64:d7:63:d4:73:ef:90:6c:9e:
7e:f0:48:55:ab:1c:46:85:0b:0f:64:dc:02:bc:f5:
d7:fc:44:cb:f4:c7:8f:c4:fc:ae:30:e4:8d:ec:c0:
0f:c6:6f:1e:96:ba:ff:8c:3c:6e:15:c5:43:0f:88:
ba:b1:12:55:94:2e:c3:4b:22:a1:63:35:89:e9:f5:
ea:d3:b5:e3:66:3d:71:a4:18:39:7b:e3:38:d2:57:
05:9e:78:3f:6b:0b:66:55:31:b9:bc:80:89:46:69:
08:7e:7d:e0:26:9a:b9:04:0f:ed:11:37:f9:e2:6f:
b2:2e:93:de:21:00:06:54:f1:60:37:52:e5:aa:f5:
84:f8:f4:6e:2f:91:29:38:52:69:c9:c6:ae:4b:ee:
a7:c0:46:6b:19:03:28:73:0d:33:00:ab:ff:51:11:
84:2c:b1:e7:7b:2c:e3:b9:13:97:42:9f:4d:e5:ed:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:23:30:7E:76:CF:AF:1A:AB:8B:37:32:67:0A:F5:20:73:F9:AE
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:07:ea:cc:59:a8:86:80:c9:28:1d:10:a9:c1:fd:47:9e:5d:
97:3a:21:0a:e6:28:dd:3e:89:f7:a4:8c:c9:48:d2:ee:24:5e:
ec:39:fe:cb:a4:84:2d:89:ed:0f:cd:ae:c5:36:99:d9:9c:4e:
66:aa:e8:58:ec:7b:9f:96:21:ce:cb:2c:a4:ef:c6:b4:23:25:
05:31:ba:d9:64:c2:a7:cc:78:4c:3a:66:c7:88:fb:28:0e:3e:
f2:9d:a3:bd:84:7e:2c:a6:de:44:94:a2:7a:cc:27:21:93:6c:
3e:e5:7e:bb:4a:5c:b3:9b:67:7a:64:de:8a:5e:ef:8e:5f:26:
00:dc:5d:34:aa:ed:78:16:fb:34:ed:d1:fe:62:8d:31:e7:cc:
aa:91:2d:98:8a:6a:d2:68:be:db:76:d5:c2:03:8a:11:e9:2d:
42:46:ff:36:2d:58:c9:11:76:17:a1:c9:a5:13:4c:d2:3b:cf:
df:ee:7a:4c:a7:10:4f:92:33:ca:50:b9:a5:93:92:ed:8f:59:
09:f7:78:6c:af:d9:ce:db:a5:57:6f:9b:e5:6b:c7:6b:31:73:
d6:40:32:de:ad:95:7d:fa:8d:a7:4e:c0:99:6c:01:0a:88:a0:
b6:4e:58:af:1d:e8:4d:8a:c6:48:d6:c8:99:b6:ad:39:05:d8:
33:15:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:39 2025 by rpki-client