Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File: uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier: Q4F4MJdfK6S6f6rfMZRFxj9M3gTA1wRjGmTPGD7IzIc=
Subject key identifier: 2C:7B:81:B7:36:17:BA:18:FF:1D:D0:E5:CD:0C:7B:2E:A2:37:0D:99
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 0199FCC69ED3FF57F61F612B644536061E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number: 0818
Signing time: Sun 19 Oct 2025 14:01:39 +0000
Manifest this update: Sun 19 Oct 2025 14:01:39 +0000
Manifest next update: Mon 20 Oct 2025 14:01:39 +0000
Files and hashes: 1: 2t371AmA6am_gT2DygfV8oUEot0.roa (hash: jKlYnyLUgDsZbjU8rac27z9vNrX7VaKOYzCWe3mGEeg=)
2: 4h30bA-3Y1NPkPR74l_37u6rDuA.roa (hash: 15ZRW34VHGvAg6aqavimaSzixrDnJDwBfZWzEHDaSjs=)
3: L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa (hash: /qnDyDKLdI8C1LuTXc4GUnjm3lOo1qcuwAVpaz4euq4=)
4: Q-ERh4C_fIreU1kJHqIbiCU1JV4.roa (hash: CvofurTY3xCBBIW91EGU3e0F4XVRnYSMNX8fSyDcopY=)
5: QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa (hash: IJMqi4E1bL4ZCNifjMhzbX4wFKnUH7rkpqt5Br3QiXA=)
6: buytX97WbFAYb_5j2H0YkO5IIjk.roa (hash: MQWcPEUZU7ucZLw/8SXvYxRLcudDsOAUxVnmSK3CJVo=)
7: c5sucgcQquIpGWGiQSZMt4GnWOs.roa (hash: 9es2orL5F+D6U+9tt9UKG+ntn0HPD0je5/rgMX4Np+Y=)
8: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: zyTtVe3ZPbRF2gidHB0829k89ghBe2CiuUTimpyk4NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9e:d3:ff:57:f6:1f:61:2b:64:45:36:06:1e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Oct 19 14:01:39 2025 GMT
Not After : Oct 20 14:01:39 2025 GMT
Subject: CN=2c7b81b73617ba18ff1dd0e5cd0c7b2ea2370d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:95:18:12:ea:8e:b6:c9:42:ff:15:fe:7f:
9d:0d:56:bc:f1:84:7d:89:45:82:de:06:c3:95:1a:
21:97:bb:62:fb:5f:f6:75:d1:9c:01:7f:da:f2:75:
ce:32:e7:6a:11:30:58:ce:84:22:5f:7e:82:5e:79:
d2:c4:26:41:08:40:b1:14:ad:38:f5:97:34:04:01:
86:c8:9c:52:eb:5b:9d:69:71:0d:9b:92:94:93:e5:
aa:89:66:5c:2e:9b:cd:79:6c:6e:f6:56:71:b8:a6:
cb:05:96:84:48:10:34:d7:76:de:3b:f3:f0:cc:68:
b2:4f:f2:6b:0b:3f:08:e8:af:e3:23:80:57:d9:ae:
c6:5e:2f:9b:51:45:4d:b6:b3:50:39:05:10:7e:87:
73:af:9d:bd:7b:04:74:38:8d:a8:0b:60:1f:04:b7:
d1:a0:1b:f6:48:0f:da:97:0d:3d:da:e0:95:77:58:
f8:c3:f7:72:d8:a7:d7:e3:e1:ba:b1:ad:ff:9f:7b:
1c:3e:a0:07:97:e9:06:c2:d3:c4:c7:dd:13:5a:37:
ce:2d:a0:8a:95:23:e9:31:cc:dc:0e:e6:0e:c3:84:
fe:68:a1:ca:92:2b:a9:f8:af:c7:50:69:49:3e:be:
d3:df:d3:af:08:24:0c:ae:80:4f:f6:cc:28:cc:88:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:81:B7:36:17:BA:18:FF:1D:D0:E5:CD:0C:7B:2E:A2:37:0D:99
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d3:0d:6a:6e:8a:2c:f9:a2:a3:29:08:43:64:f2:b7:60:15:
08:ff:de:86:70:26:1c:24:02:95:69:4e:cf:7f:66:b0:63:0b:
cc:90:c5:29:3b:cf:cf:96:e5:a1:7c:b5:07:fa:54:0e:53:31:
f6:0e:ea:27:4e:77:40:59:d6:cb:f8:74:25:fa:72:a8:b6:2d:
7d:ac:5a:c7:83:4d:6a:79:6c:d2:19:de:b9:36:6f:ab:be:e0:
d1:62:f8:9c:0e:f2:28:27:14:fc:d3:b7:14:9d:c1:b5:e0:ed:
b7:d2:72:20:10:74:f0:af:c6:79:21:21:d6:ca:63:1c:d6:ca:
8b:9e:78:b5:d9:de:fc:84:bd:14:e7:0e:ed:28:f8:79:ed:e9:
c9:5d:41:64:5b:c6:ee:5a:a4:56:37:d7:57:34:85:80:71:c8:
2d:30:c0:39:cc:6c:90:3d:05:e8:73:35:b6:94:84:92:0a:b6:
dd:37:6d:44:28:e3:b5:af:2e:91:1e:3b:43:49:0c:00:92:df:
db:b1:7c:b1:04:71:c6:93:cb:63:dc:a7:3a:80:fd:99:87:06:
08:7e:4c:22:7a:9a:3d:14:38:d0:e0:5f:86:40:f8:8e:13:ca:
f3:b7:c0:df:33:20:24:2c:bc:46:30:b7:83:2f:0b:ee:5a:ca:
24:23:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:00 2025 by rpki-client