Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
File: uBVaw0tuwV8iaumRPWrs_KenhNQ.mft (raw, json)
Hash identifier: yrDDuj63K2UpHMG0aG8ONzmV7xo0KAhG5D0S/yUTSoM=
Subject key identifier: 65:AA:B0:4C:26:F2:AF:05:87:E9:AA:91:25:A6:AF:26:DC:6E:0C:F7
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial: 0199FAD854D5B45925BBABFB66E3FE7B48EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:45 +0000
Manifest this update: Sun 19 Oct 2025 05:01:45 +0000
Manifest next update: Mon 20 Oct 2025 05:01:45 +0000
Files and hashes: 1: Bd62smJ1C-edCl13IR0Hb5ZPh3I.roa (hash: D8e7F2pk9nxCBOMnmY0ESYCk1Qvc2+eZhlAJre7/lXk=)
2: glpdHMRUe--_MG3TqcToADTZm2g.roa (hash: nYyFnTdPiSLG8Bu+HPTjJb4kOHlPj2DnjVnWwqRkp6Y=)
3: uBVaw0tuwV8iaumRPWrs_KenhNQ.crl (hash: MbrnDPd5qa8uRkJ0OOWOOLdANAIpAIEtR4DZl/FCSl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:54:d5:b4:59:25:bb:ab:fb:66:e3:fe:7b:48:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Validity
Not Before: Oct 19 05:01:45 2025 GMT
Not After : Oct 20 05:01:45 2025 GMT
Subject: CN=65aab04c26f2af0587e9aa9125a6af26dc6e0cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:60:5f:07:8c:4b:5c:b6:85:06:d5:2d:2f:
a8:c9:9d:74:d2:af:e5:18:5c:49:a9:82:14:36:6c:
05:c0:49:c9:24:cb:c6:eb:fa:55:f9:f1:4f:4f:27:
d7:5d:98:d9:d3:c0:2c:c7:c8:38:a3:67:1c:ca:6e:
83:69:c0:92:63:2f:26:7f:f8:18:54:07:0d:8d:37:
76:2b:c2:61:3f:a8:18:13:04:5f:34:b5:9f:e2:9f:
7e:5e:72:a2:5e:1f:a4:df:89:8a:fd:fe:6b:36:64:
7c:1c:f4:b1:38:a2:7a:2f:0d:60:24:04:0d:d3:d2:
9e:14:8f:35:e2:fb:78:77:b4:d1:52:e5:b2:26:63:
38:e1:d8:72:b1:68:e0:6a:a4:cf:a1:4a:92:23:17:
83:73:02:37:fe:94:cf:63:2c:79:88:25:ed:12:35:
13:b0:65:49:c1:f3:69:91:ee:7d:b2:ee:41:14:ce:
79:8a:7e:e4:51:b4:05:5b:53:0e:8d:35:eb:af:b3:
89:1a:81:2e:d1:c0:fa:36:5a:2b:fc:6a:e0:93:e9:
e1:ae:14:3a:54:f3:8f:c0:7a:6a:44:28:f9:fa:6f:
6a:a9:30:85:53:6b:d6:95:00:8d:ea:3a:db:fe:d6:
61:b5:6f:e0:75:a6:9d:38:06:30:d9:02:c8:cc:87:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:B0:4C:26:F2:AF:05:87:E9:AA:91:25:A6:AF:26:DC:6E:0C:F7
X509v3 Authority Key Identifier:
keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:56:41:67:5f:c9:fe:e2:96:0a:29:a1:b7:8f:19:06:3f:2b:
55:3e:4b:94:99:a0:67:e2:f4:23:4a:0b:5c:6d:d0:f2:53:c3:
9e:01:b2:b8:f2:91:2a:eb:6d:7f:54:f1:94:66:f8:cd:8e:d6:
2a:c8:66:f1:3c:7b:3c:d6:e4:d3:01:17:d3:db:8d:4a:e2:8b:
b3:b7:63:07:7b:d7:17:a7:45:60:fa:63:39:bd:1c:92:b2:f6:
02:8a:5c:3d:a4:d8:d3:96:ac:af:e4:15:fc:93:46:e6:39:8e:
f0:0c:27:2d:31:74:b3:f0:80:ec:44:ab:c0:38:6e:51:de:cd:
56:16:af:77:02:d9:7a:f0:4c:22:a4:01:e9:b9:0f:34:e4:50:
ff:8b:f6:d9:99:42:81:a1:ff:b8:21:57:a9:2f:fe:7b:34:4d:
cd:75:52:b8:e4:71:36:be:4a:3c:9a:bc:1f:13:75:d8:05:83:
9b:31:2a:44:64:5a:8c:1d:88:30:7c:e8:d1:48:fd:8c:6d:92:
31:25:e9:f7:27:b9:60:22:9f:66:bf:c6:9b:b7:73:27:c9:59:
7c:57:17:82:f7:4c:de:a0:7d:71:b3:6c:cf:f7:ad:57:3e:10:
02:0b:b6:4a:46:e5:68:77:e8:f6:97:b8:ef:ad:73:f9:d6:f8:
4b:d7:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:38 2025 by rpki-client