Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: 4ApDaJ/E0ObJ8nGKgIVdByVi0m/xGYKW/GTWx9iMzB8=
Subject key identifier: D0:16:88:AD:85:DB:16:89:29:CC:D9:34:83:6E:28:F6:45:C8:16:8F
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 0199FBEBC9D48DDB42DD1EE5C70C78D688F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: ZW5Tm5AmCvLlzT6pQ6JOxUsIWvyXgoAYtZSLF9YnOR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c9:d4:8d:db:42:dd:1e:e5:c7:0c:78:d6:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=d01688ad85db168929ccd934836e28f645c8168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:c1:c7:39:3e:34:eb:87:3c:bb:cf:4a:28:
92:56:9d:6b:df:7d:21:b6:9d:5c:43:f7:69:37:28:
3d:ad:c8:0f:08:c7:85:65:f9:c5:7f:3f:29:8d:23:
31:5c:1c:f7:17:a4:5c:66:5e:d8:43:80:ad:ba:f6:
52:bf:08:da:30:08:ea:e4:d2:86:95:95:ad:08:d7:
16:97:dd:27:28:87:7d:3d:c7:93:20:b8:b2:20:c4:
d1:c3:cd:bb:be:69:65:d6:d5:44:bb:58:f3:97:aa:
8d:80:f8:e5:60:0e:ba:8f:58:88:46:f7:f2:95:ad:
24:da:c2:3a:4a:cd:67:f5:79:0f:61:48:83:be:6b:
a5:91:2b:07:c6:9a:d0:82:fe:50:64:50:15:52:fb:
4a:90:07:2a:90:79:e5:f5:3a:21:ca:7f:fc:9d:a2:
11:33:c4:f8:7c:6c:f7:91:11:13:d1:f8:24:81:b5:
a3:97:d7:75:66:49:89:8c:e9:a4:85:1c:82:5b:27:
c2:b1:fc:61:0d:c2:d6:50:05:12:7a:60:1a:56:79:
fe:e9:49:f7:c9:fb:b5:83:e9:4c:d1:c7:06:3f:d3:
9d:6e:dc:23:29:93:9e:9f:0c:f0:47:8d:f1:1d:16:
56:c5:13:ba:f3:b1:a7:4f:82:0d:3b:16:ac:de:3b:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:88:AD:85:DB:16:89:29:CC:D9:34:83:6E:28:F6:45:C8:16:8F
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4d:f0:9a:81:27:9b:4c:01:43:3d:80:ca:b3:f3:50:6c:15:
3d:bd:a1:5d:fe:76:cc:5d:ff:41:79:5d:5f:55:b2:b3:67:2e:
ae:9c:f7:52:23:70:70:6b:23:72:e8:e7:43:c7:09:e9:19:39:
51:90:41:ea:43:47:55:5c:cd:1e:32:d5:ed:41:42:bb:11:52:
ad:92:9e:22:61:79:3c:f7:c6:f8:7d:55:67:5a:4c:40:29:9b:
cb:69:87:1e:06:32:e7:14:39:d0:e9:95:9c:a3:dc:4e:a9:0e:
d7:89:47:85:55:8e:3a:ae:b6:63:91:ed:b6:5f:0d:af:99:7c:
29:5d:65:76:f8:db:16:18:6f:f7:01:cb:0a:4f:36:98:bb:da:
2f:50:60:2f:75:e7:17:e7:bb:37:09:16:b5:8d:75:24:74:99:
d7:19:35:e4:bb:c2:92:c2:80:88:c3:32:7e:04:21:ef:e4:fb:
a7:05:1f:90:e9:01:10:d5:0a:65:7d:e9:d9:71:91:82:ce:db:
2e:12:5d:57:d4:01:2f:8b:74:89:1c:02:70:a4:af:9a:c4:92:
52:9c:01:39:fa:de:92:44:27:4c:fd:8d:41:86:ac:93:69:c5:
4c:cf:0a:b4:e3:80:0b:12:f0:b5:9d:13:cc:cf:69:2f:79:5a:
27:7e:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:46 2025 by rpki-client