Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier: ba+KN28mgj9tISur/fGt6FwvEszVqLQOLntkbEbRWzs=
Subject key identifier: CA:88:0D:BF:11:9C:02:89:BB:48:8F:91:AE:EA:3F:5C:26:88:3C:DD
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0199FF59BDF343D187F7DDC2D8FB44149B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number: 16FB
Signing time: Mon 20 Oct 2025 02:01:35 +0000
Manifest this update: Mon 20 Oct 2025 02:01:35 +0000
Manifest next update: Tue 21 Oct 2025 02:01:35 +0000
Files and hashes: 1: 0zLOEB5vy5c-8Tq5A0mIyET-fGs.roa (hash: Mehc6ene1llyetFafCLYX+ACHG4HbBNKN0BRvACi9As=)
2: BqfNJSeObGNlQj88_XyFrsF7j3w.roa (hash: OppxpreSqVLsgprd5haTS+WILFbzIRXmBS6DD295XtE=)
3: S1ui4XpVCTm1Vm2OpLHGmY_ZuN0.roa (hash: 3qwiok+pffK8+ko0f890CJV54WEIRSPAcVGZFhekYsc=)
4: TQyjECyEBDxHd5gx-OyJlZ_34yY.roa (hash: M5RNaPyCpCIK/N3qNnK5z9iSP22MQyKR8Rdy90hwwOM=)
5: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: yMKqlz8MKq2wlWIQb92NWCwrQT5CqYdc9G4d618owjk=)
6: k9a98NqHjelrZVUWhKMb68LgxUE.roa (hash: 6VyAIEvjXORry2KtmNbj+FoMHc5b899/tsCBJkg8fEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:bd:f3:43:d1:87:f7:dd:c2:d8:fb:44:14:9b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Oct 20 02:01:35 2025 GMT
Not After : Oct 21 02:01:35 2025 GMT
Subject: CN=ca880dbf119c0289bb488f91aeea3f5c26883cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:6e:02:0a:5d:ea:39:a0:b0:01:83:69:1f:
8c:78:0e:90:da:2a:db:85:f5:66:e8:84:61:98:02:
d8:a6:a5:4c:a1:c1:71:2d:8e:ab:5a:cb:6b:a3:d9:
5b:57:8a:d6:ad:6d:42:01:87:e5:69:95:c2:a7:06:
ab:ed:35:c0:82:12:29:1f:41:c7:7a:27:ea:93:03:
9d:d4:cc:73:e7:af:c5:4c:c1:b2:b0:ca:27:00:b9:
dd:3e:e6:96:be:19:4d:d4:33:ca:f1:41:d3:18:76:
99:ed:2b:4d:b3:0e:fa:23:44:35:d2:08:8d:7b:7a:
47:0d:2d:e0:fc:eb:f8:ca:92:a3:f8:ff:db:cd:d0:
f2:6d:79:1f:7c:18:cb:ce:61:d7:62:aa:bc:b7:a7:
a5:01:87:e0:3c:74:08:7e:93:99:a7:64:ee:31:1a:
04:59:24:96:82:5b:6b:a1:06:b1:42:e8:96:d3:93:
1f:c2:2c:ae:7b:50:91:cd:d1:90:14:7b:75:4f:ca:
4b:63:79:b6:f7:bb:c3:6e:08:0b:40:b2:8e:d3:81:
04:6d:57:0f:d0:fb:0d:60:f0:d3:45:24:59:fd:d9:
f7:3a:05:11:03:58:c7:3c:79:88:70:83:95:d6:df:
4d:4a:1c:82:e4:8c:8e:50:dc:4f:cc:92:33:4f:05:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:0D:BF:11:9C:02:89:BB:48:8F:91:AE:EA:3F:5C:26:88:3C:DD
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3f:02:d2:a3:ed:0e:10:6f:de:61:26:e2:f6:01:d0:94:69:
26:88:6e:54:31:5e:1c:1c:12:db:0f:11:6e:23:f4:8d:26:4a:
34:bf:ae:fd:e0:d4:93:de:ea:db:a3:ad:3d:7f:23:d0:37:47:
d4:95:e6:5c:c3:c6:73:e7:4c:a3:f3:fe:6a:91:67:92:ba:ce:
4e:ea:7d:e1:a8:dc:3a:e6:4a:d1:14:d6:46:c6:67:40:55:93:
85:11:15:c7:c2:8d:a7:3a:f7:e1:a1:a9:69:f2:9f:ad:71:09:
47:49:ee:c9:dd:f7:23:5f:60:ad:0c:9c:09:92:09:98:28:0e:
b6:ed:da:48:5a:ea:8a:69:69:49:da:6d:c3:c6:77:18:c2:41:
99:f6:3a:bc:d0:89:26:06:99:6a:03:d2:55:3a:39:e6:33:d3:
ff:dd:b8:f0:09:64:47:0a:48:e1:1b:6c:04:29:62:5b:18:7c:
9a:a6:1f:cb:d1:dd:88:17:5b:46:ac:68:3b:a7:b8:80:e4:17:
8a:67:29:b8:ae:a8:6f:13:9b:2e:5d:28:f0:f1:2b:78:68:27:
37:e7:8a:c0:95:2a:4e:82:95:fa:fa:47:e1:5e:64:9a:83:c0:
48:64:c2:de:b1:8d:b8:79:48:a3:bc:50:ed:ac:c5:5c:da:b2:
2a:82:96:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:49:49 2025 by rpki-client