Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier: vprDTGBSpuil1xCQUKDOu5gkuGnqArYuh8FaifI1P4s=
Subject key identifier: 5F:59:86:30:F7:84:E0:6F:5C:EC:95:1A:28:AC:3F:30:7A:2A:0E:5B
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial: 0199FD6B42A041714CAF5DBDCDC3107F0573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number: 040D
Signing time: Sun 19 Oct 2025 17:01:28 +0000
Manifest this update: Sun 19 Oct 2025 17:01:28 +0000
Manifest next update: Mon 20 Oct 2025 17:01:28 +0000
Files and hashes: 1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=)
2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=)
3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=)
4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=)
5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: TNUfAVzFKqONyOujfbNWBQcX8flQFzsoY/MI5wQqBMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:42:a0:41:71:4c:af:5d:bd:cd:c3:10:7f:05:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Validity
Not Before: Oct 19 17:01:28 2025 GMT
Not After : Oct 20 17:01:28 2025 GMT
Subject: CN=5f598630f784e06f5cec951a28ac3f307a2a0e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:79:b9:ab:0d:73:61:b2:cb:ec:9f:a4:43:
38:be:a2:9c:73:48:04:2a:33:47:9c:5f:f7:01:ef:
0f:86:bc:cf:49:94:49:a5:97:79:1c:85:c2:60:9e:
69:97:07:ae:f1:24:78:89:a8:5f:2d:ed:07:02:c6:
08:9a:50:8c:14:b1:e3:14:a1:ab:05:08:cb:41:95:
c9:67:06:fe:d0:a7:88:54:b4:6e:66:d3:9b:2e:2e:
ed:3c:94:a1:64:34:1c:a0:51:5e:f4:1f:c2:4e:2c:
77:cf:fd:f9:7d:cb:9f:56:73:26:38:79:83:af:05:
20:ec:0e:ca:00:89:a1:e2:7b:cd:33:0a:c9:7b:b0:
df:4a:fb:2d:c2:09:51:20:a0:4e:85:e1:e9:fd:75:
7a:cc:35:9e:1e:ed:86:b0:4a:67:fd:5f:3f:be:5b:
04:dd:8f:10:64:6b:02:ff:a7:1f:56:75:2c:7e:b2:
00:b6:56:4c:e8:27:39:47:41:2f:ab:b4:61:e1:49:
18:b9:a5:a1:47:b8:11:47:0e:e7:72:23:9f:92:0c:
7c:b0:19:8d:52:a7:8d:7c:07:d5:25:8f:f2:17:63:
b4:a5:9c:ba:b5:a3:57:5a:d5:c8:48:3b:b6:7c:78:
50:97:42:34:c7:52:89:d9:37:db:cf:8b:04:80:68:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:59:86:30:F7:84:E0:6F:5C:EC:95:1A:28:AC:3F:30:7A:2A:0E:5B
X509v3 Authority Key Identifier:
keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:63:52:ba:24:48:95:34:11:4c:43:a4:aa:88:27:e1:f9:75:
43:af:54:d7:e1:12:e9:65:a1:df:6f:9a:20:30:68:26:74:f5:
f7:16:1e:5d:89:03:33:87:0d:41:b3:a8:50:2c:5d:31:44:a1:
89:ca:4c:46:f1:74:d2:75:df:9e:53:36:49:25:7c:d9:2f:ee:
32:d4:69:7d:12:c4:7b:e3:55:df:6b:ae:ad:e8:58:1b:a1:ff:
7a:4e:a3:60:4b:e7:91:eb:dc:59:ac:da:91:f7:9b:9c:12:40:
c2:29:f4:4a:89:be:48:fb:4c:37:e1:b0:61:08:ad:26:75:4f:
04:39:32:05:b7:13:32:c3:64:67:95:50:10:b1:ea:5a:18:3a:
a5:2c:70:91:e1:87:e7:50:c7:31:b0:86:09:99:b9:a0:9b:6a:
cb:aa:29:ca:63:89:f2:4d:ca:a4:2a:47:92:b2:2c:f2:43:6a:
62:81:5f:61:be:39:c0:df:16:57:33:59:28:e1:36:40:d8:99:
7e:17:91:5e:4a:fc:0f:85:1b:87:04:a3:d7:62:54:e3:c3:25:
38:5a:9c:67:a8:36:01:60:41:76:52:be:6a:2c:ce:dd:63:62:
17:ed:c5:9e:24:7d:ac:03:2d:e8:a9:56:56:e4:2a:aa:1b:e1:
5d:74:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:13 2025 by rpki-client