Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
File: uef3G89S7W0Ft-s7dB7HkG533Mo.mft (raw, json)
Hash identifier: qb/kbz2dneMCpuiWpVx6H5JvyLFGgmvISlxFdSyJ5mE=
Subject key identifier: 3F:9F:BB:E1:3A:A5:30:93:B8:D2:FC:5B:D5:E2:EF:7F:8E:0F:BE:D9
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Certificate issuer: /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial: 019A01B54F5DE585EC4DADE8E0E48C976AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 13:00:50 +0000
Manifest this update: Mon 20 Oct 2025 13:00:50 +0000
Manifest next update: Tue 21 Oct 2025 13:00:50 +0000
Files and hashes: 1: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (hash: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=)
2: uef3G89S7W0Ft-s7dB7HkG533Mo.crl (hash: danYY8AFONI+ar74rDlnljDWjjFUQBc4EgdL7JIdLEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:4f:5d:e5:85:ec:4d:ad:e8:e0:e4:8c:97:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Validity
Not Before: Oct 20 13:00:50 2025 GMT
Not After : Oct 21 13:00:50 2025 GMT
Subject: CN=3f9fbbe13aa53093b8d2fc5bd5e2ef7f8e0fbed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:68:eb:28:b0:f3:1b:a6:50:78:02:e1:91:
f6:f7:13:17:46:86:58:32:e9:41:99:a6:16:5c:38:
01:14:06:56:ad:f1:89:06:32:5c:0e:34:3f:4e:f8:
cf:90:c0:eb:25:65:f4:94:74:87:8b:bf:4a:ff:38:
79:cd:af:a9:6e:2a:46:0e:76:38:47:f4:77:7e:ed:
8a:dd:3b:85:53:d5:85:82:30:57:45:73:d7:8b:ee:
fd:0a:62:1f:e8:39:2e:7f:01:0d:41:c9:d9:ed:9c:
a4:3c:7c:ca:68:a9:e5:58:de:47:3e:f5:ea:e0:69:
61:ba:37:60:b6:ca:39:30:f1:c4:34:7d:ea:f5:f8:
57:ca:da:d7:60:f3:91:49:84:ae:68:d2:7c:21:b6:
b3:df:95:f9:d2:11:7d:7d:3d:b4:ff:1d:27:94:00:
24:6b:37:12:3b:16:3e:df:35:b5:42:dc:c1:f2:70:
34:18:2d:e0:b5:8b:b2:20:c0:e0:07:2d:38:fc:33:
e0:72:7e:3d:b9:45:00:54:e5:78:59:ed:22:e5:8d:
1b:c0:25:04:78:10:77:77:cb:c3:a7:d9:46:2d:61:
ea:6e:0b:c0:aa:63:02:b0:4c:38:dd:d6:14:bf:c8:
57:65:a2:c4:27:86:84:b0:9d:7e:6e:61:a6:41:6f:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:BB:E1:3A:A5:30:93:B8:D2:FC:5B:D5:E2:EF:7F:8E:0F:BE:D9
X509v3 Authority Key Identifier:
keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d8:9e:6a:35:2e:81:63:13:0a:66:57:d1:90:d3:0f:05:1b:
08:c3:98:59:74:eb:59:95:43:98:76:f4:1d:4d:6f:e3:85:5e:
9f:5c:5b:44:71:19:eb:6c:a4:86:cb:ee:1c:97:2f:f5:3c:6f:
e8:9d:9a:f8:45:57:11:4b:80:38:21:77:05:0e:2d:50:84:c0:
e7:f4:23:5d:a1:16:07:c8:8d:ca:ec:1d:e4:2e:20:2c:66:99:
d7:a1:3b:d0:2d:dd:ce:14:17:84:92:99:76:8a:2a:14:e5:a1:
50:34:eb:2e:a8:8f:6b:fa:4b:c0:c8:d2:e4:aa:a4:56:69:62:
3c:d2:ae:ff:ee:b0:d4:28:72:75:6e:40:6a:01:ec:6a:96:ea:
af:eb:57:a7:20:f3:06:87:41:e6:04:96:7d:c2:1c:6c:9c:c3:
bf:b5:0d:1f:48:10:2e:c6:e4:ac:a6:c6:0a:3f:0c:c2:c4:57:
52:43:6a:ef:c2:c0:d0:47:07:ba:fa:dd:c6:35:13:a7:86:f4:
6f:72:44:c0:e3:a1:e3:c1:4e:4b:ae:49:33:5c:be:a1:91:a9:
07:ae:32:41:a5:1e:0d:7c:50:06:6e:42:95:c9:0d:a4:96:f9:
42:7f:8e:bb:55:64:63:b6:45:71:f8:11:7d:2a:d1:88:e3:9f:
88:dc:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:07:55 2025 by rpki-client