Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier: n0/VGap5VydY+pSnaKbT6x0a96DyN01KxhO2V0bbQnU=
Subject key identifier: 17:6D:77:F6:19:79:5C:EF:BB:2B:BF:27:51:60:EE:F0:2D:38:DC:2B
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 0199FEEBDBBC6952684C9CDE0A2AAF603423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:34 +0000
Manifest this update: Mon 20 Oct 2025 00:01:34 +0000
Manifest next update: Tue 21 Oct 2025 00:01:34 +0000
Files and hashes: 1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: 1Kag6kE7VK/+Ae+Wl7Xy2R8Qm3b1uFO6RwupShNGcok=)
2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:db:bc:69:52:68:4c:9c:de:0a:2a:af:60:34:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Oct 20 00:01:34 2025 GMT
Not After : Oct 21 00:01:34 2025 GMT
Subject: CN=176d77f619795cefbb2bbf275160eef02d38dc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6c:40:ae:be:7d:d0:ed:30:e0:5b:4b:27:4b:
29:60:ff:f2:65:9d:ea:d5:75:8d:d7:aa:fc:86:1d:
f9:32:32:39:d0:e9:a2:7b:32:00:52:a1:f0:ca:9e:
7d:92:fa:a4:17:82:b7:2c:6b:6d:f1:2b:0d:e4:33:
b3:0d:12:37:0e:53:4f:9b:1c:41:d3:ef:b3:56:47:
c0:d9:21:22:71:71:c0:ad:e2:2a:fc:b9:42:82:77:
34:37:cd:5a:78:2c:d9:69:f2:05:48:65:c3:4e:e7:
f8:5d:97:9a:31:a9:10:8e:fd:b2:f0:4d:49:c5:f0:
b8:4a:0b:6b:fd:47:16:c3:cc:a4:27:a4:dd:3c:c7:
38:3b:de:bf:86:f8:7c:ce:a8:bb:a4:f8:7f:10:80:
cf:b3:36:1c:cf:0f:73:75:71:4f:3d:88:5f:7b:f7:
64:59:b1:d3:9f:c0:e0:a1:71:21:a8:9e:93:91:3e:
61:58:c2:9b:85:68:3f:c1:14:28:26:9a:9d:42:73:
5c:a3:81:23:f2:21:34:1d:5e:cc:7e:79:b0:b0:31:
fd:96:0e:28:88:84:2f:62:00:24:eb:e8:c8:0f:f7:
06:c5:a3:c8:88:34:dd:91:8f:41:e0:75:13:c2:09:
4b:24:ee:ab:fa:95:8b:26:b9:b8:7b:2c:1a:d1:31:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:77:F6:19:79:5C:EF:BB:2B:BF:27:51:60:EE:F0:2D:38:DC:2B
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f5:10:d6:83:8f:8c:52:be:d1:e3:d3:75:ea:0c:db:76:49:
13:48:8a:0f:ad:6e:5e:f0:85:a9:85:95:ac:6b:29:18:65:b2:
6b:51:a0:1b:c4:96:e0:b6:24:50:3d:61:d9:7a:f5:ac:c5:11:
42:f2:f9:f3:95:78:37:1c:b8:02:52:4a:9d:9d:cd:c5:57:f5:
29:76:2f:30:f2:4d:9d:b1:b6:db:e8:c3:a5:dd:11:e5:e6:38:
5f:96:cb:66:85:f7:75:59:ac:45:84:4a:86:50:86:b1:48:6e:
a4:be:6a:79:c1:76:f3:78:f2:14:c4:df:44:a2:20:87:72:30:
18:14:cd:82:76:89:aa:92:a5:cb:79:ee:90:f6:1f:dc:c0:8c:
2e:90:ae:b3:4f:32:78:d6:2c:58:2b:41:bf:2e:5a:4a:93:ad:
cb:d3:99:e4:4e:3a:c3:eb:eb:75:0d:a8:3d:7d:99:b4:75:a3:
76:1f:e2:ed:29:ef:34:8c:9f:78:1e:ab:18:27:16:b3:3e:d4:
79:fb:37:a6:52:98:b2:85:93:39:f6:f8:14:d9:c3:9c:d8:25:
f8:2a:a6:fc:cb:3d:af:99:e6:c3:f2:53:ff:bc:7a:8d:cc:52:
6d:c7:eb:69:b6:9c:38:1b:be:36:c4:11:c5:98:58:e6:e4:db:
ee:84:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:56 2025 by rpki-client