Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File: sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier: waQK+Rrh53YJhYN02uL3XMACHp/V+nocVu+gWFF3CF4=
Subject key identifier: 85:77:FD:06:22:A1:65:67:0B:3D:A6:E2:B6:4B:15:58:76:C5:68:A2
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer: /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial: 0199FCFD9F39421C19C86A1B02987BC4C8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: VTdOF6vt4DJ2gAE9-rspP9YAtwY.roa (hash: 1siesNie5rYzgdzSW4S1a0o9vqGP6HXUGewmb9Xhzlk=)
2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: AYylPsn0WPIhf60ec84FqWTPOK0SJjpcgWVmiiiWi5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9f:39:42:1c:19:c8:6a:1b:02:98:7b:c4:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=8577fd0622a165670b3da6e2b64b155876c568a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:1c:6a:30:16:3f:c9:8e:22:81:ad:aa:a5:
8b:b2:3b:d0:61:2a:a6:e7:7f:c6:68:fd:68:35:9a:
54:0e:06:63:53:da:88:fb:56:ec:0d:16:a6:e0:5a:
4c:57:dd:e6:57:50:62:aa:86:f6:4b:05:50:a3:ed:
5e:fa:14:4c:d5:93:c5:97:e2:18:d4:b4:1f:22:01:
0f:ad:b9:5d:4e:70:1d:04:59:da:15:55:64:9b:17:
ba:b1:88:48:d8:f8:f1:95:d9:b5:73:b5:d1:58:69:
94:dc:21:51:ae:8b:c6:cc:e5:db:80:63:f9:ca:40:
23:9c:34:4d:f8:27:0f:13:b9:68:a5:75:58:f3:6d:
cc:7e:d6:d0:c7:8b:54:f1:8a:df:16:f1:05:0b:71:
6e:07:46:dd:c1:92:15:5d:ab:14:01:bf:29:72:31:
44:ff:38:e2:be:75:09:62:ec:6f:7f:ba:8e:34:67:
30:cd:f2:df:54:f1:05:98:14:83:0b:ca:90:cb:54:
75:63:f8:1a:ad:2f:86:8b:e4:a6:d5:d3:13:79:03:
7a:c3:e6:c1:2b:8f:7c:72:62:69:cc:71:b4:2e:64:
42:aa:68:54:5b:88:9a:83:ad:67:3d:f1:df:61:31:
1a:dd:d3:d5:56:2b:e3:79:0f:f4:6d:d2:3a:e2:18:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:FD:06:22:A1:65:67:0B:3D:A6:E2:B6:4B:15:58:76:C5:68:A2
X509v3 Authority Key Identifier:
keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5e:2e:d4:b4:16:c0:03:ed:6a:6f:7c:0e:1b:0c:4d:f4:c0:
4a:62:b6:ed:99:65:a4:f7:42:92:cd:4a:e0:c2:8a:49:85:fd:
09:ac:2f:90:8c:73:07:32:15:5a:a5:48:f3:17:93:f2:7c:03:
c7:a1:a2:d7:e8:dc:19:34:43:b6:29:be:c2:05:e7:d0:c5:59:
1f:55:ac:44:03:77:74:cf:7d:bc:7c:67:20:ef:cb:2d:8e:35:
69:53:f3:a4:68:fa:38:7b:b2:15:f7:b5:cf:f6:2f:f2:ab:bb:
4b:5b:55:4f:37:df:15:4d:fc:34:ff:2b:80:23:d5:3d:30:2d:
be:03:4a:94:3e:35:72:18:d0:38:06:1c:a5:06:a7:08:df:cc:
6c:7b:fe:a3:a5:42:73:b7:83:04:9e:bb:0e:c7:cc:c4:16:7b:
b6:58:10:3a:33:95:e2:25:bc:7f:4d:1c:43:b8:b1:6d:1b:23:
b3:f5:20:ff:0a:84:2f:6a:ab:6d:e6:29:e9:b4:73:7d:38:d6:
04:0a:4c:4a:59:7b:43:8b:2e:d9:58:5f:f5:1d:68:f7:ea:44:
a0:64:10:03:25:27:0f:5a:77:e4:d1:bd:e0:58:27:7c:d9:2e:
de:ef:7d:43:39:0e:ac:63:00:6b:6a:0f:b9:ba:c9:ce:a3:cf:
c2:b5:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:57 2025 by rpki-client