Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: 6iCsZI4T+B/KVMLRmmfcaP8Ara9M69Vs4r6gxC4xOYk=
Subject key identifier: 4C:7B:19:59:CB:44:87:98:AA:44:00:BE:3F:73:FA:3B:CA:40:60:5E
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 0199FB7CAAB8B8B24F6994565224567796A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 08ED
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: SmRhFIpAXz646X1xodWijwv8351I+5jVHutxodDlZFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:aa:b8:b8:b2:4f:69:94:56:52:24:56:77:96:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=4c7b1959cb448798aa4400be3f73fa3bca40605e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:08:cd:82:c9:26:ed:16:51:b3:50:b7:db:
3a:0e:75:e2:bc:a4:92:c8:81:75:d6:64:8c:15:f7:
1c:20:24:49:eb:d0:0a:e0:d6:04:8c:9a:d2:90:7c:
c9:2f:32:08:01:fc:c7:d0:f8:5a:ed:95:95:74:40:
03:1b:2a:f4:c9:02:53:23:86:b8:35:67:d2:c4:39:
1c:be:67:60:52:ec:bc:8b:44:18:03:30:0c:7b:09:
4c:51:11:3d:4c:6b:5a:0a:52:0e:cd:2b:fe:54:63:
af:52:8e:94:2f:ab:f3:43:f3:a7:1f:eb:cb:49:db:
64:1c:4e:54:69:07:e8:f9:2e:d6:2f:2e:f0:16:9a:
a1:9c:fe:65:2d:c5:12:e4:58:67:81:14:47:0a:80:
dc:51:83:26:a8:61:93:fa:a3:40:e1:02:0b:d3:25:
2f:68:8d:b0:42:a4:c5:ae:fb:7e:a2:fd:7c:30:7e:
df:0d:3e:e7:a8:15:7e:1b:ac:9e:c5:2a:0c:2f:3f:
4e:aa:3a:e5:7b:80:5f:88:e7:93:33:32:fc:b4:19:
a9:5a:99:eb:96:da:d2:46:a6:96:87:f1:77:91:22:
85:80:b9:41:4a:50:6e:b1:f4:b2:3f:25:66:3b:4a:
23:9d:a8:c5:7d:4e:97:7b:d5:aa:10:c4:b0:75:91:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:19:59:CB:44:87:98:AA:44:00:BE:3F:73:FA:3B:CA:40:60:5E
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d8:68:4e:6b:1a:91:35:38:97:9c:b4:83:71:51:a3:12:3c:
17:6f:23:06:81:78:52:f9:f6:95:99:a8:90:a4:4f:a0:f2:a8:
e5:45:1c:12:8e:23:67:03:45:99:ea:05:d4:79:74:d7:06:32:
54:61:ed:bd:b2:5b:e9:a9:27:c2:f9:23:54:d2:d3:e9:fb:7d:
f4:0b:bf:cc:a4:70:52:d5:bd:c9:fc:52:b9:59:8a:7c:2f:65:
c1:dc:6e:16:09:41:46:59:0a:cd:34:89:66:90:fe:80:f0:13:
8a:db:0f:0d:55:0c:ce:ed:f3:cc:0e:87:fd:90:99:9d:2b:2e:
ba:7b:6d:ee:c6:f2:5f:39:81:a4:32:f8:c2:43:24:30:f5:45:
a9:c4:db:50:43:a6:be:65:f3:1f:d0:e3:b7:b1:f7:03:08:08:
77:28:bc:d4:c7:bd:a5:08:16:d0:1f:76:55:4d:67:4d:8f:bf:
9a:1e:68:c4:c9:e5:82:1c:f8:28:53:14:29:0c:ac:a6:cc:b9:
f2:ef:14:2d:78:a4:5b:2e:7e:ff:ad:7b:60:83:e4:fa:53:27:
04:a7:c2:37:c5:3a:b2:78:d5:50:94:5b:f7:ed:f9:09:a1:94:
c9:b5:b1:0c:4e:ff:14:fe:12:1a:02:05:bf:1f:a0:cc:00:45:
4a:2a:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:37 2025 by rpki-client