Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
File: uqWupvGAqaitmEU17S5kvPyz_ho.mft (raw, json)
Hash identifier: 9wotw57I8yuU6rBrt/4Lh3gMlc7LurTuj0nO96HO9OM=
Subject key identifier: 22:A8:7C:5A:65:55:C3:F9:07:1E:65:A4:7C:0B:D0:64:97:1E:18:07
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Certificate issuer: /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial: 0199FC8F49DD5DBBED515F0E4B450D0E0B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
Manifest number: 0ED6
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa (hash: KNjghiY6hSTnyBcRx4J/plbhEv6EisGMOlJT9AxkWNs=)
2: uqWupvGAqaitmEU17S5kvPyz_ho.crl (hash: iqoW8hamzmUDazhLNtPLxDmhCP03ZoF9iTvo4DYgQj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:49:dd:5d:bb:ed:51:5f:0e:4b:45:0d:0e:0b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=22a87c5a6555c3f9071e65a47c0bd064971e1807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:1e:90:96:a7:f5:8f:7a:0b:0d:e0:ef:3c:
ad:af:52:af:94:58:ea:68:b1:2e:de:54:f4:6c:f1:
42:e6:3b:53:78:a3:8b:a8:0c:4f:97:25:ec:fc:cd:
d8:a1:d1:20:9f:8d:f3:97:cf:b2:55:60:ee:e5:96:
a8:03:f2:17:55:d1:fd:ba:1b:43:e3:fb:85:5c:99:
a2:f1:6b:88:95:c3:2b:a1:b4:13:4e:ac:99:ac:91:
53:21:6c:26:7a:71:97:74:03:5c:1b:40:be:46:ee:
14:f4:ab:a4:8c:ca:37:e4:c3:75:2f:8b:1b:cc:1a:
7b:7a:cd:7e:ca:ca:78:8b:22:ef:2b:7c:c5:1e:ff:
4f:90:b7:61:8b:ad:7a:35:46:08:49:3d:44:de:02:
db:c0:8c:ca:85:f0:e2:8b:e7:fb:19:03:b8:a7:c4:
ca:59:9f:c6:97:d2:11:f1:23:b1:12:a0:84:99:98:
3b:0f:ed:65:6d:42:1d:08:5f:80:d8:a0:c5:df:1d:
28:8d:54:92:0e:65:8d:b6:60:49:45:eb:a0:e8:f0:
2e:ac:07:be:19:23:6b:00:ed:09:a0:dc:2d:e9:87:
0f:79:d2:b8:ef:09:cd:d7:03:00:2b:22:9f:62:93:
76:a9:02:99:45:79:3f:fa:e2:e9:6b:d0:94:0f:4a:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:7C:5A:65:55:C3:F9:07:1E:65:A4:7C:0B:D0:64:97:1E:18:07
X509v3 Authority Key Identifier:
keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:df:9c:c5:99:9b:d7:d4:23:8f:e9:9e:1b:28:51:98:08:a9:
b3:3b:31:e1:2b:a6:9b:9f:42:dc:24:f9:55:5d:10:3f:07:cd:
e6:b7:7c:a8:a2:e9:76:2a:db:12:17:5a:12:12:b0:fd:19:63:
6e:aa:41:ff:46:e6:21:c5:38:7e:02:cc:bf:a7:7a:78:94:b7:
93:36:43:d9:af:5e:9f:b3:ec:b2:54:9c:c6:3e:6f:a2:32:98:
ad:4f:f9:13:98:a4:ec:ed:01:92:7b:dd:bd:49:88:9b:dc:9a:
c0:ad:ac:b9:f8:73:5b:c5:f2:11:fb:f3:c7:cb:46:6f:6e:9c:
a7:25:76:4d:d8:f2:87:27:49:70:4c:50:2c:ee:ba:00:33:0f:
b3:b5:14:15:d4:0c:86:49:cf:64:23:15:db:66:91:8a:35:e9:
af:6f:2e:7e:4c:d8:32:4b:6f:83:e0:41:00:9f:82:e3:a9:fd:
fb:48:f0:83:79:25:12:40:e2:6c:76:94:26:85:94:90:06:c9:
13:36:fb:62:ea:af:79:9c:ed:1d:d0:de:d9:ca:b5:cc:b3:a3:
d5:b5:f2:e6:f9:a0:af:9f:12:a0:ef:2c:7c:69:2b:3e:5b:c0:
51:ff:a7:03:e7:ba:67:8e:2f:3d:de:b7:76:27:20:22:d3:dd:
2a:c0:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:57 2025 by rpki-client