
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File: UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier: p4PoB5HwWKwRJVbLvg8NVU520z/P0BnB6PciJ2vXvEQ=
Subject key identifier: 9A:26:67:56:AA:5C:A3:5F:75:E0:90:B2:8E:03:5B:99:08:8E:73:D8
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 0199FB0EFD49B94C8033CF2B7754F69AF3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:27 +0000
Manifest this update: Sun 19 Oct 2025 06:01:27 +0000
Manifest next update: Mon 20 Oct 2025 06:01:27 +0000
Files and hashes: 1: 8lD2bueF4idx-D9rs-1sCmrE1bc.roa (hash: 5PFrVgW1FYuSvrdoSsMaHDsFf/dnBLjQrH9shdPQWYM=)
2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: 7IAfT8rbjDun3Q7IhYPC+k24hRMxwCU8T5IrJ/+zs9k=)
3: pobSRqB4Q1gZ4DXOZf4V9pVZrL4.roa (hash: jRPTi+5Lw+W7BzK3Rqd36iIkpmMkM0yVpsHfYrztv94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:fd:49:b9:4c:80:33:cf:2b:77:54:f6:9a:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Oct 19 06:01:27 2025 GMT
Not After : Oct 20 06:01:27 2025 GMT
Subject: CN=9a266756aa5ca35f75e090b28e035b99088e73d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:40:8a:79:c2:ae:27:87:b8:bb:b0:aa:d4:
89:2e:8b:61:a5:b9:14:bc:a0:96:82:38:d6:4a:79:
ae:d6:1a:e2:13:28:d2:73:a1:bd:58:39:8d:f5:9a:
99:00:1e:10:16:30:e2:8b:9b:f4:4b:7f:71:89:df:
cb:1f:7d:a7:88:2b:ba:53:88:35:a5:f3:93:86:b2:
7f:a8:6e:6d:aa:1f:8a:2a:ea:d4:bb:87:74:ce:d2:
fd:74:09:11:1f:de:0e:ef:a2:3a:f0:65:42:60:6e:
ec:fa:d2:32:58:6e:43:8a:cc:da:e8:b3:9b:2e:04:
bf:85:93:4f:c9:ad:9e:48:fb:eb:ee:29:45:be:98:
ea:ae:b6:4a:b3:4b:1e:32:6f:82:bb:9c:c6:4d:3c:
8d:f2:b9:81:31:03:29:2f:b8:9a:8a:e5:ac:2f:51:
ab:eb:e3:01:fe:76:55:1e:2e:9b:18:cc:19:9b:ff:
55:05:5d:ca:98:6c:74:bd:9c:97:f0:67:ec:f4:45:
71:28:f7:c3:5b:5a:2d:fc:dd:f3:b1:e4:78:70:71:
5d:cf:92:56:25:b3:1d:3a:33:06:c8:a9:f2:99:98:
61:17:da:6a:0a:73:b9:84:07:11:32:3a:df:02:5c:
e5:b5:aa:9f:9f:10:87:43:5f:87:a1:41:73:f1:41:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:67:56:AA:5C:A3:5F:75:E0:90:B2:8E:03:5B:99:08:8E:73:D8
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:67:b3:d2:b1:31:95:43:ba:31:03:43:a4:21:df:bd:4c:
d6:2d:bd:24:ba:82:41:f7:bb:32:d4:11:7a:44:97:bb:75:57:
5b:fd:0d:62:c5:4c:31:f3:85:29:e6:02:b3:5f:fb:0b:5a:6c:
16:20:a6:b6:59:af:73:9a:05:06:d8:3f:52:17:23:d6:81:61:
21:6d:ad:20:8c:11:7d:a4:2a:fb:a2:14:f0:7e:62:cf:27:6c:
ea:fe:2b:12:fa:26:66:40:5b:08:74:6a:e8:fd:5c:ba:5b:1a:
1a:37:cc:fc:c7:6d:63:35:00:8e:f1:dd:32:ef:94:a2:8e:99:
97:a2:95:7b:d9:43:fe:be:40:81:83:aa:92:e1:16:79:77:a3:
97:2b:e7:f6:22:f6:25:03:b6:c2:f6:f6:a2:fd:8f:88:59:aa:
7c:bb:4f:48:40:bc:4c:e6:e4:f5:06:15:4e:20:fe:08:4d:a2:
7e:9f:58:9c:fb:00:0b:d4:30:f0:7e:6b:40:e7:70:9d:67:78:
d9:d2:9a:9a:8d:3f:44:c2:c7:e3:8c:8b:83:e2:71:b0:5e:fc:
2f:10:2c:82:46:1a:4d:ff:f6:0e:f3:e0:45:15:6b:b9:a2:8d:
fc:08:ff:aa:0e:7f:33:08:06:36:a3:8b:b6:1f:09:b9:85:94:
fd:b7:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:05 2025 by rpki-client