Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier: 6Pa0Na+2vaGYQVGre/8GLSAHR8B7BMIb+X6Jl5IxoT4=
Subject key identifier: 25:F2:2C:97:D3:66:E3:49:68:78:60:CD:55:6B:1D:58:35:9F:9D:ED
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 0199FC8FA4A4F4993E89FF78779D56F7044E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=)
2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=)
3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=)
4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: 7NhhjYaWdi6UK/E8AVYd/B2RQOoRaPrdkiu5DUtvdOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a4:a4:f4:99:3e:89:ff:78:77:9d:56:f7:04:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=25f22c97d366e349687860cd556b1d58359f9ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9e:43:b8:02:3d:73:a3:dd:aa:85:f5:6e:b6:
09:ad:4e:a8:94:04:0f:40:ad:bc:d8:d8:2c:e7:2a:
5e:df:04:25:d0:1d:39:19:3d:de:96:f3:97:c2:36:
bf:29:97:80:8d:41:66:05:20:ed:d7:fe:f2:a5:b2:
34:e6:8a:ff:77:06:37:33:a5:d4:84:77:79:c3:e9:
5a:97:42:9a:1d:e5:cf:53:b8:33:0f:b4:c9:3d:6f:
52:1b:5f:f5:ba:8e:ac:ad:cc:b0:5c:16:b6:c3:b2:
54:8d:69:d4:54:1c:fe:3f:9b:fb:38:96:00:c7:33:
af:67:85:e9:8d:88:ac:19:05:ed:e4:90:9a:dd:2f:
a0:36:01:f8:a1:c5:5a:f2:77:39:fb:73:d3:a1:2e:
f1:ee:5d:8a:90:49:a5:45:61:93:ce:02:c1:c0:d4:
98:cf:24:5a:80:b8:9d:1e:de:9a:c7:05:14:dd:0d:
69:49:2b:69:02:64:2d:f5:d5:0e:ef:69:9f:cf:c5:
eb:0c:4e:db:58:bc:88:61:cc:f6:c4:06:bd:d6:bd:
1f:3e:a5:e1:40:5c:d5:24:10:1e:90:fe:df:bc:8f:
e3:4b:2f:f6:8d:2e:f3:70:e2:e2:42:5c:35:b5:ab:
bc:48:90:3a:f9:aa:fa:ab:4b:16:75:e0:75:2b:4c:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F2:2C:97:D3:66:E3:49:68:78:60:CD:55:6B:1D:58:35:9F:9D:ED
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b0:c4:d5:bf:9e:8c:93:15:01:cb:f2:15:52:7e:27:2b:6c:
99:bb:6c:ac:4c:d3:c8:e3:43:b8:40:f6:c4:a8:f6:c2:bc:fc:
61:a2:ae:a5:b3:04:aa:2a:3f:e2:26:8b:e0:5f:6c:05:b1:4a:
7f:28:93:52:c3:c8:e3:87:2d:50:26:e9:bc:d3:19:e8:53:77:
21:90:c5:f3:17:6d:11:94:83:aa:4a:31:6f:24:c5:df:e8:43:
56:86:eb:3e:55:c4:24:8f:34:57:9f:be:2e:a4:15:c5:bf:88:
45:54:5e:eb:eb:36:cc:a0:dc:d2:b5:7e:cf:8a:88:f1:a8:8c:
60:ba:37:0c:fd:41:25:9f:65:44:8d:9a:d3:e0:58:ba:9b:27:
01:97:4c:19:72:73:dd:f2:66:9e:a3:1b:dd:45:3d:68:eb:15:
fe:6d:ec:3d:42:45:c7:26:b7:d8:5d:38:8c:b5:a1:41:d5:cc:
8e:21:d8:5c:3a:39:0e:6c:e0:58:2f:e0:7c:87:02:49:83:90:
41:9e:d1:62:aa:20:74:7a:97:df:c1:26:df:25:6c:cb:08:80:
a0:82:e7:4b:c4:7c:c4:d5:dd:f5:55:d4:7a:9b:50:d9:75:21:
8f:c2:c2:97:0a:6f:50:0d:ac:13:c7:13:3f:10:5c:af:5c:a6:
76:33:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:12 2025 by rpki-client