Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: yI2imbJ3FvfR31fNyaozGI32IGxihcwFoycDfB/MS4Q=
Subject key identifier: 60:36:1B:2C:3A:E0:F4:A6:E3:84:82:E1:A3:C3:2B:29:9A:8C:7C:15
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 0199FB0F10F36A1CD7510B2D4E5661FBD094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 073A
Signing time: Sun 19 Oct 2025 06:01:32 +0000
Manifest this update: Sun 19 Oct 2025 06:01:32 +0000
Manifest next update: Mon 20 Oct 2025 06:01:32 +0000
Files and hashes: 1: SS2CXlahSk9By0fRlVm-SmedwzE.roa (hash: aUQz3cYQAl8T2KPX+MNKNABDFzPqs6nBTTE1ZfNC7QE=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: UTmyQWQLzw5VzsriXfe+K9RTsGVfYdLV3DpB760hDxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:10:f3:6a:1c:d7:51:0b:2d:4e:56:61:fb:d0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Oct 19 06:01:32 2025 GMT
Not After : Oct 20 06:01:32 2025 GMT
Subject: CN=60361b2c3ae0f4a6e38482e1a3c32b299a8c7c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:18:97:53:f8:48:1e:f2:35:3b:60:9d:7f:
f7:64:5b:97:7c:25:44:4f:e8:34:f5:d3:ff:ca:24:
ef:89:6a:17:c4:b4:45:cb:b7:cf:87:20:c0:f2:b0:
54:9b:25:f6:7c:ff:bb:7e:89:35:67:05:d0:19:03:
3f:00:57:45:4c:8f:99:aa:29:62:5d:99:d4:c3:6f:
49:b7:09:ac:2a:3c:4c:da:ed:08:65:f6:34:b9:c6:
bc:7e:98:a9:e4:ea:ef:fd:79:62:74:5f:fc:df:01:
32:e7:87:16:49:09:82:bc:e1:b9:55:3e:d3:ad:ff:
82:60:dc:78:50:2f:0e:75:ed:a9:7a:d3:3a:b5:d9:
bb:71:24:21:3e:c6:54:ee:04:a3:f1:f1:6f:37:2d:
6c:20:c4:24:d7:eb:ab:c2:bf:1d:a2:b8:0a:48:d1:
04:dd:64:80:08:9f:2a:b6:49:f9:f3:f7:2c:58:53:
62:67:bf:04:54:fa:9e:4a:5c:f8:3d:28:cc:d2:5f:
8d:8c:68:87:9c:f9:88:95:72:a0:8b:ce:50:44:cf:
8b:e5:73:f6:22:95:09:5b:e9:c7:ce:17:c1:f1:92:
10:bf:24:16:98:c4:24:aa:75:94:41:10:6e:f6:f3:
9c:4a:0a:52:0c:7b:9b:ef:53:84:95:14:7e:4e:8b:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:36:1B:2C:3A:E0:F4:A6:E3:84:82:E1:A3:C3:2B:29:9A:8C:7C:15
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8f:d0:72:42:c8:36:66:88:22:b5:c8:fb:94:c9:91:00:2b:
05:0d:b8:c1:a6:00:ad:8d:42:dc:0d:43:f1:35:60:7e:98:28:
7a:8a:39:60:dd:51:56:93:ba:43:81:0e:e0:31:dc:78:51:43:
38:ff:b3:29:5a:c0:1d:72:b4:81:bd:24:a9:c0:c1:6c:56:ae:
6d:64:01:b1:34:c1:f4:e9:db:1d:5d:39:dd:a0:e9:0c:ae:0b:
f4:9d:0a:ae:3c:52:55:73:96:2d:b1:33:60:97:a8:77:d3:13:
d6:b2:7b:ec:ad:c9:e8:c8:b9:67:ae:54:8d:af:24:84:58:9b:
2c:eb:e3:15:8e:f3:41:52:0e:df:cd:86:98:f1:a2:ae:6c:2e:
05:17:1e:cd:bd:e1:cc:2c:ed:86:1a:0f:5f:b5:e1:ed:41:93:
c7:58:da:22:e3:22:38:4d:fb:e4:6f:76:ea:87:e1:15:05:24:
f1:5e:21:0a:56:a9:0e:b8:b5:aa:b6:52:34:15:af:cb:c1:e9:
ad:5e:a8:cd:28:c3:60:68:10:23:81:da:51:e1:5b:fa:d7:23:
5d:eb:6c:68:98:f0:1b:38:77:af:34:e5:03:9d:cc:3c:2f:3d:
54:1d:2b:54:72:7a:e7:23:4b:f9:c9:60:68:ef:b5:ee:2e:36:
e4:c2:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:29 2025 by rpki-client