Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: rHIyvVkGM6/GqUmiV9s/gv+DM9IzfFoVul7ovIVbVCc=
Subject key identifier: 71:87:2F:7B:AB:F8:F7:F6:ED:0A:49:40:B0:FD:22:EC:D3:D5:9E:AE
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 0199FDD9558C2203D5C145E9C75B633437BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:42 +0000
Manifest this update: Sun 19 Oct 2025 19:01:42 +0000
Manifest next update: Mon 20 Oct 2025 19:01:42 +0000
Files and hashes: 1: Fih80Nlgmx3m_whvZZHZZjIiang.roa (hash: VaQgFDqa2oxdRNRXm5kYRO6eCGdj59ZMDn/K3AC/eNc=)
2: RbrpoNIXXajBUk8qJ4MBqJWZufY.roa (hash: nmur79J+mSsD2EymOR4FrGYKf9dZed60SfRTgagedsI=)
3: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: cr5K8HJMXzjDi+ipeeVNUn6kl1ugx2RIUEmeoo17Kl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:55:8c:22:03:d5:c1:45:e9:c7:5b:63:34:37:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Oct 19 19:01:42 2025 GMT
Not After : Oct 20 19:01:42 2025 GMT
Subject: CN=71872f7babf8f7f6ed0a4940b0fd22ecd3d59eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:74:34:bb:4a:25:3c:fa:08:4f:ef:56:d0:
5f:99:ef:c1:1e:3a:5d:a9:ef:7e:e1:6e:be:ba:2a:
98:9a:91:69:43:f4:12:c0:a5:df:59:80:ca:11:1a:
f8:5d:78:81:85:f6:2a:f9:c2:45:e6:64:cb:3d:be:
bd:d5:75:23:bb:fd:76:35:4f:05:13:f1:5c:57:e0:
bb:7a:f4:69:86:11:a1:24:ad:bb:55:cf:4e:ea:ef:
ae:d3:73:36:54:15:aa:d7:8e:cb:b6:27:6c:a0:81:
18:3f:36:6e:67:57:c3:9a:dd:04:7f:f8:70:36:46:
f0:4f:a2:13:7e:91:b6:25:1c:c9:90:a3:d5:27:71:
0c:a2:68:45:12:75:33:7d:49:43:58:29:6d:3c:e5:
0d:96:42:3e:37:89:62:55:cd:14:56:8a:83:af:f7:
cc:1b:52:34:bb:a5:67:1e:ba:02:d4:84:1d:e8:6b:
24:33:9b:9e:b3:6c:26:ad:28:79:e4:c4:7e:06:13:
d5:65:e4:76:63:f5:58:2d:4e:4a:bb:55:13:ea:06:
70:92:fa:c9:49:0e:86:c5:b1:1f:12:a5:eb:1b:8a:
85:6d:7e:8e:86:d0:a4:c8:74:39:d4:ae:97:d0:75:
51:ab:df:ee:90:e4:94:c5:f7:a2:bd:e2:c0:69:05:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:87:2F:7B:AB:F8:F7:F6:ED:0A:49:40:B0:FD:22:EC:D3:D5:9E:AE
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:14:92:3e:c0:51:e3:db:b7:18:7b:df:4d:02:d4:ca:44:b5:
2c:53:fd:9d:92:7c:21:8e:ad:84:27:f9:f9:fe:17:54:98:f9:
36:af:a1:76:37:94:42:af:32:da:ab:91:26:54:f9:6f:8e:34:
81:6f:0c:08:df:c6:68:61:ee:f6:79:dd:c6:57:51:a6:5d:bb:
72:be:c5:1a:fd:db:e6:e4:5b:73:b7:22:c7:b9:2c:2f:16:d2:
9b:20:d7:70:ea:3c:d3:de:f6:2a:82:5d:5f:44:4f:86:98:4d:
4d:17:e9:4f:a4:a2:d3:b8:96:85:24:14:cf:85:31:3c:83:c3:
2a:89:b8:8c:18:0b:3c:ec:93:e8:3c:9e:42:6a:cd:4b:ff:7b:
4a:e1:10:cd:e0:4f:8e:27:19:da:4b:42:95:0f:70:70:20:38:
0c:9b:2a:34:54:c1:0f:42:63:af:ef:1e:59:d7:ed:c9:51:01:
31:b2:90:bc:a3:8d:3d:28:bf:14:6c:37:34:3d:b9:02:a0:77:
da:1a:24:59:64:c3:34:f3:2f:0a:75:cb:ba:13:05:8b:fc:19:
9f:a4:b5:32:84:80:41:02:21:69:55:8d:76:50:17:81:13:e8:
98:26:b9:b1:52:41:ad:14:ca:fc:d5:66:de:2b:6c:c1:6a:05:
ce:38:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:00 2025 by rpki-client