Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier: i/m1uKx5O4oFYony7CWK7kXMJpevj5u/Lw7mOZpz7lU=
Subject key identifier: DE:D1:2C:91:D1:FD:0D:D8:4D:D9:83:A5:BF:09:04:29:69:66:31:21
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 0199FC58310E669BEA305B92DBD889B95402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (hash: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=)
2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: t5Gep7E/u02Qzu9kP9a4jQNXdyjkXkc8eI2FH7iQKQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:31:0e:66:9b:ea:30:5b:92:db:d8:89:b9:54:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=ded12c91d1fd0dd84dd983a5bf09042969663121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:e6:bf:8c:d4:c4:e9:b6:fc:09:ce:fd:22:
cb:c5:39:d6:93:88:01:74:00:c4:de:17:f7:a4:21:
52:a9:a9:52:cd:5e:ab:72:13:13:1c:5d:e1:d4:bf:
b8:51:90:71:7e:84:00:1a:18:06:b4:d8:9a:dc:90:
05:17:48:22:68:7a:4f:c6:20:ab:3f:6f:29:bd:71:
8f:56:f4:90:bd:bf:12:15:38:59:61:2c:7e:9e:17:
15:5c:4b:11:78:7a:c9:37:18:0a:5a:2c:3a:f6:cb:
c6:30:a2:f9:c7:eb:20:26:13:17:b2:8c:f5:dd:29:
ce:77:c1:6d:7c:0e:a2:a5:21:4e:80:b7:fc:12:4a:
52:f1:69:50:a1:e2:30:80:25:f0:a5:6c:93:ee:ae:
88:d5:01:8a:20:97:f9:1d:b0:f2:43:b2:ca:fc:c6:
b9:39:43:8b:fd:1e:e5:ac:99:68:71:3b:f2:e4:2e:
d2:95:eb:7c:6f:12:ed:fe:1e:fe:73:5b:60:6d:7f:
7f:fe:ec:df:85:e3:62:5b:a1:a7:f2:ac:b7:a2:80:
eb:b0:e4:0b:56:1b:e4:64:2f:56:14:a0:03:f9:98:
87:12:fd:f6:18:55:e3:a8:5d:76:9e:c4:2d:d6:e7:
15:77:df:0d:2e:1c:61:95:6d:04:a8:db:05:3a:64:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:2C:91:D1:FD:0D:D8:4D:D9:83:A5:BF:09:04:29:69:66:31:21
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:ed:0c:59:c4:06:3a:d8:49:96:1d:9b:99:d9:75:be:5f:
43:87:e9:a5:83:d6:65:a6:b9:5a:8e:04:c0:f2:76:b1:72:44:
fa:87:8e:49:57:50:08:7a:5a:a0:a0:c3:fa:96:5f:e4:15:91:
08:7e:a6:b3:45:65:a2:22:8f:ac:d2:2f:46:48:38:90:c9:64:
e2:25:4c:bc:eb:d3:3e:46:06:0d:67:90:32:3a:0f:d4:50:f8:
e6:39:20:73:ea:da:40:10:d0:35:65:e5:f0:1b:38:f2:c0:96:
bc:a0:04:38:b4:b0:04:a3:58:54:4d:38:ad:28:22:9c:4e:c9:
7c:0e:f2:6a:dc:0f:3c:58:fd:20:f7:d6:f4:44:3f:3b:e9:ff:
41:f1:db:99:b7:03:73:42:11:ca:44:8e:45:6b:e4:61:9f:60:
8d:66:70:8e:e1:58:9e:3f:b7:97:6a:be:0e:16:7d:24:e9:cd:
13:3b:a7:c5:43:d2:86:a2:69:52:d6:3c:94:f7:bf:f8:04:fa:
1c:f6:8c:92:06:2b:75:a2:4e:a3:79:33:e9:50:98:a3:d3:92:
1f:b1:63:ce:f9:a4:89:4f:9d:9d:10:04:8d:15:6b:a6:a2:87:
32:6a:6f:83:99:1d:8a:78:0d:ff:bc:8e:fd:5d:91:7a:23:cc:
2a:fe:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:43 2025 by rpki-client