Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: 1w+9liwGIXGqe7VRdcAGWlnF2sgBiAnVBThPZ+xAnSs=
Subject key identifier: 95:53:18:E7:78:AA:AC:E0:D1:CF:F0:04:BB:72:12:B1:DD:C3:60:B7
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 0199FDD8F2E0CAC9E318BB8B46DE0C06E952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0B5B
Signing time: Sun 19 Oct 2025 19:01:17 +0000
Manifest this update: Sun 19 Oct 2025 19:01:17 +0000
Manifest next update: Mon 20 Oct 2025 19:01:17 +0000
Files and hashes: 1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: Zmb2Pxg/OdqJwbSjjHcdSnKhW9C8r48evs0vmiBLWNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f2:e0:ca:c9:e3:18:bb:8b:46:de:0c:06:e9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Oct 19 19:01:17 2025 GMT
Not After : Oct 20 19:01:17 2025 GMT
Subject: CN=955318e778aaace0d1cff004bb7212b1ddc360b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:ab:e1:04:d1:57:1e:b8:85:00:cc:a7:d3:
c4:36:e3:f6:de:d9:7f:82:8f:71:18:02:02:15:46:
42:eb:ba:18:13:76:37:4a:5b:2f:47:ed:cd:81:94:
02:b6:78:a1:1b:39:46:d0:de:09:41:d4:dc:d6:df:
3e:f2:f5:6b:b7:dc:49:70:97:ca:03:4d:4c:c9:34:
31:2d:46:6f:db:19:ee:80:55:1e:b6:9f:48:d9:3f:
f4:28:a7:2e:41:a0:7f:28:9b:1f:3e:b1:96:dc:58:
bc:d3:be:34:a7:08:37:f8:de:67:29:84:e5:d7:2e:
82:2a:c7:b5:6d:a4:e5:b0:54:30:31:90:3e:fd:2c:
cd:4e:e2:31:46:87:00:ed:da:4f:7c:66:f4:27:a8:
28:10:82:c1:33:1e:88:5b:0b:26:02:29:a5:81:4b:
53:4f:16:52:14:a6:06:8e:b0:7f:b4:47:10:7d:ec:
ad:11:97:ac:ff:d1:5b:79:6d:43:02:7f:6f:67:3f:
ea:de:04:6b:07:24:f8:dc:79:d2:47:3f:7c:8d:2d:
fd:23:48:da:19:62:f7:6a:c9:52:a9:fa:d6:e6:f6:
65:cb:99:65:a6:a9:9a:d7:ac:49:38:59:32:61:00:
f4:f2:c7:7a:45:97:07:17:f3:c6:5f:87:7e:23:a3:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:53:18:E7:78:AA:AC:E0:D1:CF:F0:04:BB:72:12:B1:DD:C3:60:B7
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7b:bb:1d:dc:ad:fe:2a:2f:c0:51:98:16:60:a5:c1:81:41:
c4:87:ac:8b:9a:e3:a1:c0:12:28:37:bb:38:7a:a4:9c:ba:b0:
f3:ed:fd:cb:0f:29:11:17:a5:b1:82:bc:ff:e0:33:7b:ff:a6:
77:9c:21:44:21:59:19:58:ab:b9:f9:6a:76:ed:b6:71:90:d4:
d3:06:da:d4:e9:fb:00:11:24:fc:be:86:e3:db:3b:04:37:48:
32:90:0f:a6:ef:c2:a6:64:b3:2a:6b:2a:4f:54:3b:1f:e0:b9:
52:33:6f:72:63:29:f8:d2:01:ba:e9:8b:53:7a:65:5f:ed:23:
d1:91:10:b5:22:4f:88:dc:63:d5:cb:39:fe:04:a8:a3:0a:c3:
24:01:ff:d9:eb:e7:f5:c9:ce:87:70:71:cc:9f:e5:92:17:0b:
f1:8a:9e:af:af:ff:5c:34:aa:c6:1c:a0:bc:b5:50:10:83:c8:
2a:39:54:8e:19:3f:33:85:13:2b:aa:e6:c7:93:24:90:79:a1:
13:72:0d:66:28:3c:4e:df:c5:81:fc:4e:6a:ce:23:43:49:f3:
2e:95:e9:1c:b9:b7:1e:94:f1:06:99:30:29:f1:0c:ca:1a:cc:
45:f8:59:80:72:02:a3:2f:6b:4c:97:0b:08:ee:4f:82:3e:99:
3d:56:db:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:29 2025 by rpki-client