Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: kAQqq6+J2TXuEbxjh6gmFNSJtbTFxJFsaT45Yy7QEmU=
Subject key identifier: D9:02:09:9F:F4:42:EC:F7:A0:71:73:6C:56:5F:DB:43:5C:EF:61:93
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 0199FB7CD0F244B5620C405E5C7018E89D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: hJj6NCiqjlxVKbDSgEg3Q/4Cjpj25YgcvsGBDViGaOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d0:f2:44:b5:62:0c:40:5e:5c:70:18:e8:9d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=d902099ff442ecf7a071736c565fdb435cef6193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:11:78:51:9e:65:c1:2a:a2:eb:13:7c:91:
75:8b:c6:b8:2f:91:7d:26:4e:4e:d0:32:65:59:27:
b4:b7:fc:53:20:86:8e:7c:7b:fb:0a:66:e5:bb:68:
ba:7e:23:29:8b:3e:c8:6e:36:a8:5b:60:71:59:1c:
e6:41:8c:3f:35:7a:c3:b3:6d:a1:e9:c9:c9:ab:92:
49:85:01:fe:d7:c6:34:09:13:2f:4a:2b:5c:2a:fa:
89:8b:63:d6:c5:23:0c:b7:4e:3b:aa:86:91:de:b7:
09:4b:16:58:02:91:07:e4:f5:f9:bf:27:0c:8c:87:
4b:70:ae:f5:6b:20:d9:22:46:9d:ca:d7:fc:9e:99:
7d:3e:2a:27:53:26:90:4c:12:11:4d:06:3d:09:8b:
ab:22:5d:17:69:c9:b0:f3:1f:86:65:6a:68:f3:f7:
3d:4f:d4:83:2a:db:8c:53:c0:2e:38:9e:ff:59:34:
25:b5:ee:90:6c:99:b9:14:12:ed:2c:28:fb:cf:ef:
15:f6:94:81:d3:4b:12:a6:b1:70:bf:57:86:00:5a:
84:40:db:93:35:79:b8:d5:a4:2a:72:04:bf:50:5a:
ee:cc:b6:15:d6:5d:24:c9:e2:62:3e:a5:8d:90:53:
42:38:41:9e:29:b7:76:17:fa:b2:51:42:65:9b:99:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:09:9F:F4:42:EC:F7:A0:71:73:6C:56:5F:DB:43:5C:EF:61:93
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4a:97:95:e5:73:38:77:03:f2:36:83:44:38:19:44:e8:fc:
fe:19:02:03:bf:12:93:91:31:1b:e7:72:f1:a1:cb:e2:52:84:
b7:dc:88:db:b2:68:a2:db:18:ff:9f:8a:2f:5d:61:f0:a0:8f:
75:c7:f6:29:a4:b5:35:e7:37:e7:57:26:9c:ea:26:fd:89:fc:
a2:01:c3:ae:dd:62:14:6f:bd:78:22:31:24:2b:d7:dd:c8:2b:
57:5c:67:58:c1:8a:72:5e:35:b6:6f:40:80:fc:df:68:e7:d6:
ac:54:53:c2:9d:1c:c4:e5:f5:51:fe:91:28:f4:b6:3e:8d:ac:
df:72:85:a9:ea:cc:89:60:80:73:5e:dd:a4:01:7c:de:bb:1a:
f4:62:51:ab:38:be:ef:e9:19:40:f2:94:23:58:53:76:38:ff:
50:b3:0d:5a:9a:ed:f2:9f:4b:da:56:1f:66:a6:17:09:bc:e1:
55:af:62:39:fb:bb:44:76:7e:98:e1:f4:6e:4b:38:05:81:f3:
d8:f8:8c:ba:1e:ef:d9:f0:0c:0b:55:fb:ff:dd:b6:8e:fa:d5:
3a:0b:31:96:ea:84:80:4c:43:6e:26:72:23:e5:50:21:a2:ea:
3d:db:29:bf:82:c5:28:3a:86:fd:1f:b3:54:da:10:14:bb:a3:
77:c0:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:07 2025 by rpki-client