Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: d2n4gcCpmtuMKCrCKaTBulUiE3a7QWElS3zAyobz/U4=
Subject key identifier: D1:4A:32:F4:2C:FF:0C:80:D0:6E:09:E7:50:8F:64:C0:6D:4A:2D:62
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0199FBEC440B042CF16DF4A8B481536D7C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 03F9
Signing time: Sun 19 Oct 2025 10:03:09 +0000
Manifest this update: Sun 19 Oct 2025 10:03:09 +0000
Manifest next update: Mon 20 Oct 2025 10:03:09 +0000
Files and hashes: 1: eKxKng3YrXa1al_k_FMxk62FFXk.roa (hash: qjVORuy1yxJ7dvxNyktASCo2Y9i5FPpM1t2EcBY82MM=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: V7dPdZflvT/IvGB2cWLWCQCRJG2FDZ4BdOgjjOcxMlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:44:0b:04:2c:f1:6d:f4:a8:b4:81:53:6d:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Oct 19 10:03:09 2025 GMT
Not After : Oct 20 10:03:09 2025 GMT
Subject: CN=d14a32f42cff0c80d06e09e7508f64c06d4a2d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:15:45:50:42:fa:d9:a3:6f:59:d5:46:4d:
50:9e:87:7a:0c:fd:79:1c:49:8d:c7:c8:2f:b0:41:
77:ee:8d:1c:40:68:e5:0d:52:69:4b:22:7b:fb:e6:
8e:be:59:b5:85:76:f3:3c:fe:61:06:f3:a0:b1:d5:
4b:31:9c:d8:2e:ef:4a:d8:5c:5f:b0:68:07:59:13:
cf:2d:e5:d1:b5:ff:5f:4b:fa:f4:ed:dc:f1:1c:d5:
06:42:e0:aa:82:eb:96:8d:70:b7:85:3e:0e:ab:a8:
dd:1e:a7:43:f9:42:fd:7d:95:13:f5:4a:6f:4b:ba:
e9:62:be:1b:5e:75:69:9b:a5:35:1e:90:e6:4b:82:
45:a4:0f:37:44:86:ce:c2:c0:13:a3:7d:9c:f3:d2:
ff:27:9a:c1:3d:70:54:97:8d:7f:53:c3:e3:33:27:
f7:52:e9:17:f8:07:11:57:93:d2:37:aa:ad:17:3b:
1c:91:55:6b:77:b7:ec:70:db:26:fb:b1:f4:81:56:
1c:e2:7a:3e:88:76:79:d2:b9:85:4f:9b:da:00:4c:
72:fc:5d:5f:1f:4f:18:3c:c7:b6:a2:2f:b1:6c:34:
90:c5:e1:ab:4d:2d:2b:8b:d1:8e:3e:a1:9d:ce:90:
25:78:17:c9:fe:32:03:3a:ef:bc:e7:7f:12:c9:7f:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:32:F4:2C:FF:0C:80:D0:6E:09:E7:50:8F:64:C0:6D:4A:2D:62
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b7:f7:3f:46:28:0c:cd:6a:1e:cc:78:89:48:bf:c0:f1:92:
48:bb:3a:c3:3b:78:12:53:74:1c:7e:be:ee:d8:84:9d:22:bc:
86:11:81:a4:b4:91:ab:e5:c1:8a:99:fd:9a:f5:cd:63:31:ba:
5e:ca:4c:94:4e:9d:be:4b:b0:1f:53:34:f9:44:ae:87:34:ba:
33:b7:35:3e:68:7a:db:45:e3:40:9c:36:36:b3:0a:3f:bc:44:
ac:5c:38:00:a1:ea:77:7f:c0:88:c3:6c:01:b2:5d:d9:7a:be:
44:89:75:cb:77:31:b1:d5:0e:37:81:67:31:8c:64:1d:53:1b:
8d:c7:e4:97:65:ee:6d:ec:c1:4f:97:14:9d:5e:1e:af:6b:a5:
4c:08:25:e3:be:87:99:5b:7b:35:02:1d:3e:70:7a:43:59:db:
98:b6:b7:83:b6:21:9e:11:dd:7e:fd:e3:52:f3:18:c8:c1:0b:
b6:71:a7:29:cc:67:d8:d6:3f:fc:0e:b6:7d:14:e4:e1:db:8e:
3b:a8:33:40:ca:33:4c:01:21:01:6b:bf:ae:f0:68:79:d9:f4:
47:66:d4:2b:8e:39:7e:63:a8:ac:39:ec:c6:c6:ec:9d:39:a0:
88:51:15:96:56:a8:3e:60:66:ce:d2:07:4d:8e:22:10:71:73:
fc:c7:71:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:37 2025 by rpki-client