Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: +GEN42Uwqvx5ta8kia7DmbA2bkHUmrpOiYlsJ/vQSZs=
Subject key identifier: DA:D8:F0:40:44:71:DC:76:A0:E7:FA:B3:5E:CE:59:8F:30:5C:31:DB
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019A00A372127C871682B1342D2A8991477E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 0EEF
Signing time: Mon 20 Oct 2025 08:01:42 +0000
Manifest this update: Mon 20 Oct 2025 08:01:42 +0000
Manifest next update: Tue 21 Oct 2025 08:01:42 +0000
Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: IWhFOiqhCUvQIaOxLKEfy4QUI7VjmHVGtPMNjRMi0hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:72:12:7c:87:16:82:b1:34:2d:2a:89:91:47:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Oct 20 08:01:42 2025 GMT
Not After : Oct 21 08:01:42 2025 GMT
Subject: CN=dad8f0404471dc76a0e7fab35ece598f305c31db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:8b:e7:83:25:40:e3:0a:af:b9:aa:f8:48:
e0:36:bb:be:9c:4e:18:95:ca:9b:f3:fc:f3:66:f5:
00:dd:7b:9f:72:20:be:c8:53:d3:ae:12:b6:fa:9c:
df:2e:6d:31:d1:17:09:e1:cc:ff:fc:79:09:43:34:
9b:b0:03:3b:2a:77:1e:24:61:88:f5:5b:0a:c4:83:
9c:2f:4e:9e:a3:6d:f3:6e:13:8c:99:cd:d5:9c:03:
e8:9c:42:da:6f:db:f6:a3:fa:69:2f:9a:29:2b:b5:
a1:0b:45:4b:ea:90:cd:f8:24:0c:44:42:eb:ae:a4:
6e:e3:83:f8:df:8e:f6:7a:8c:95:81:d7:16:11:78:
4b:a7:1f:50:29:b7:fc:0a:c9:65:32:f9:3b:5b:a1:
c1:f0:53:4e:f8:df:c0:18:d3:60:aa:8e:6a:81:81:
3e:fe:91:fc:70:e3:75:4a:a4:15:d4:4a:20:81:e3:
54:d0:0f:15:2f:34:a9:70:da:1d:ba:e7:63:24:0c:
1a:5a:b6:31:1c:e9:b7:2d:57:72:cd:a1:40:06:bc:
56:23:4f:ba:5a:97:96:de:32:be:96:13:e3:d2:81:
19:85:42:9f:d2:87:46:78:02:74:b9:b0:af:cf:f9:
3f:ee:be:66:f2:a2:67:6f:9e:0b:f6:eb:c2:cf:f3:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:F0:40:44:71:DC:76:A0:E7:FA:B3:5E:CE:59:8F:30:5C:31:DB
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a7:31:4e:74:1a:8a:46:0b:8a:1d:8d:5c:51:8d:f1:e0:30:
ff:3b:c5:07:46:14:a5:c2:22:2d:08:a7:40:33:d6:c6:81:3b:
6e:67:a3:ce:e2:51:f3:85:85:e8:92:f8:25:44:1b:6a:91:6c:
38:59:60:62:c4:7b:be:57:d5:76:99:a1:30:96:7a:b4:2c:66:
96:72:07:c5:31:ec:0f:c2:a4:37:dd:43:43:d4:2c:33:9b:07:
d0:4e:ec:d8:94:ba:e6:42:84:49:83:40:bc:3a:78:f4:30:66:
fb:3f:69:ed:28:c5:7d:f0:f2:b9:14:81:1e:11:d4:56:80:dd:
43:6a:72:25:f6:fe:d6:48:b9:e6:6b:75:e9:a9:17:5f:6c:8f:
b7:01:08:0b:5e:82:3a:d1:49:92:e4:d3:ef:ba:a8:6b:a5:c2:
bb:49:0f:79:59:86:d1:a9:63:2f:82:e8:ee:11:33:70:3b:6a:
70:47:7f:46:e3:31:0c:a5:9f:d8:d2:21:92:37:82:4b:4b:dc:
d4:38:1a:24:0e:44:98:eb:68:f2:9b:6c:3b:01:ff:7a:02:14:
3a:7c:03:9f:bf:d1:a6:2f:0b:93:11:81:44:81:03:2e:09:81:
6e:9c:ad:ad:72:1f:7a:d8:24:22:89:be:8d:aa:5b:56:b4:f7:
b7:89:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:28 2025 by rpki-client