Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: KhP1Ahv557iU6hBCuD9nGFZiDA9TMAGX9vdfmome9Jk=
Subject key identifier: 86:72:4B:25:E6:95:58:CB:D4:AF:64:03:3A:43:4B:01:91:AB:E2:EF
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 019A01EB8FD215D4EE1AB7A3A21EF05DE3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 16F1
Signing time: Mon 20 Oct 2025 14:00:06 +0000
Manifest this update: Mon 20 Oct 2025 14:00:06 +0000
Manifest next update: Tue 21 Oct 2025 14:00:06 +0000
Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=)
2: Q4WmwtX1-yGfMV_as6mRHe0HLuE.roa (hash: lXJnylFGx+vUF6zQkDGWs8PitK2htiJr+yqpDV9ObmE=)
3: pG1KZHc4pymXEXUvmeM4GHLYNlA.roa (hash: 5KHE9uzvNu4RIDxwOSdN7PmOQXacqTWtDjsMZfOaj8Y=)
4: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: JAzB4mDQotZZZEo2T/Fz07rI0xEQGPS6LNBPAJEviLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:8f:d2:15:d4:ee:1a:b7:a3:a2:1e:f0:5d:e3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Oct 20 14:00:06 2025 GMT
Not After : Oct 21 14:00:06 2025 GMT
Subject: CN=86724b25e69558cbd4af64033a434b0191abe2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:88:08:6c:44:c7:f4:00:ac:82:80:f7:93:
fe:95:cd:b1:17:ee:60:00:d5:d9:45:a8:7b:d9:64:
04:0e:9b:c1:0a:6f:32:a7:01:64:73:ce:b2:d0:20:
92:b0:80:cf:2b:1c:38:ad:77:da:f3:a1:3b:8c:35:
da:97:bb:c1:5d:30:1f:12:45:b5:47:4f:b5:44:0c:
2e:79:e6:2d:6a:8e:1b:89:4a:6c:7b:59:47:5e:81:
55:15:e3:4c:57:d0:63:86:4d:32:2e:bf:c2:c0:fb:
ee:3d:80:9b:8a:01:a0:7a:8b:0b:0d:98:01:1c:ec:
e1:f3:70:b9:58:c0:97:3f:07:1d:46:fa:98:f6:b9:
dd:31:92:ec:1f:50:0b:4d:45:5d:8c:e5:a0:66:ff:
cc:f0:d3:19:d7:91:0a:d1:d8:37:a2:6f:e7:0f:2f:
fb:82:30:7c:6b:f9:d6:0a:47:b9:42:77:b1:b9:b9:
4f:25:cc:a3:85:a1:7f:c5:3a:b7:31:d8:93:54:aa:
d8:4c:f7:5e:cb:e3:06:70:28:e5:82:a6:8a:77:ee:
1d:a3:75:18:a9:8a:4e:d8:97:52:78:d5:15:72:9a:
0f:1c:36:e3:31:26:39:42:73:cb:a8:75:38:15:51:
2b:3e:87:ee:ec:06:aa:28:08:98:5b:42:a6:7f:54:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:4B:25:E6:95:58:CB:D4:AF:64:03:3A:43:4B:01:91:AB:E2:EF
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:be:3c:d2:b5:33:94:bc:d1:18:26:21:bf:af:32:14:15:
07:39:99:77:d9:b6:f9:c5:a5:1c:98:c7:35:46:58:15:d7:69:
dc:19:d6:89:5a:1f:41:e2:1a:e3:ec:77:9d:4c:cc:a3:05:8a:
49:1d:43:82:50:76:92:88:5f:90:d2:56:15:75:87:78:68:72:
f8:28:bf:72:19:a7:e1:a9:37:d6:ad:e1:5a:5d:36:f7:84:d5:
4a:8f:0b:2a:f0:11:85:56:7a:12:5c:56:95:1c:39:53:f2:3a:
8d:84:17:8e:44:b4:64:c3:4b:ca:fe:1a:9d:06:98:6f:4b:72:
75:83:73:60:06:7f:a8:06:2b:bb:99:f5:7a:d0:82:8b:a5:8e:
f5:c1:8d:96:21:9d:11:23:66:e6:fb:93:b7:dc:77:ce:90:df:
6a:53:0b:b0:cb:ff:a0:cc:71:72:1a:af:c2:9a:b5:9a:29:bf:
83:ea:39:89:ff:a3:3b:ae:93:54:3b:2b:84:5d:b3:63:b8:bb:
89:1a:66:49:78:c7:fb:a9:97:85:3b:5d:8b:af:59:85:0b:c0:
bc:7e:63:a8:2d:ec:a0:c0:01:64:04:35:9c:f9:f4:ab:84:18:
0b:5b:12:89:04:9e:28:65:64:36:f5:a8:29:a0:50:fc:4c:16:
bc:0d:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:08:24 2025 by rpki-client