Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
File: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json)
Hash identifier: 4hDiVR3Sm397yZ+njh2UrGgaDg1JwfDsD6ye1GP2yIw=
Subject key identifier: 56:C9:2C:93:9E:52:8B:86:F0:FD:5C:57:B6:C6:5C:7E:CA:E0:6A:A4
Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
Certificate issuer: /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Certificate serial: 0199FCFD28535E9D83E9220475712F25A4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: 9JadLiuorP5WBtAK4ahko9XzHjQ.roa (hash: qnkmqt5DjArPix3ByqvfUIsWSJTvM73SLxqKVoYiGls=)
2: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: CwX+EQjyKLkQ4Ze25qO4XchCIp7+2DkBCAKhJoQGwfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:28:53:5e:9d:83:e9:22:04:75:71:2f:25:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=56c92c939e528b86f0fd5c57b6c65c7ecae06aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:f4:99:a1:48:f8:46:e7:cb:ec:af:32:f5:
ab:31:50:b1:08:26:50:d9:2b:a3:7f:46:3a:a8:5b:
e8:9e:95:0d:07:3f:9c:82:66:89:6a:a7:eb:d2:a2:
46:72:91:fe:e8:6c:46:18:94:dc:c8:d5:af:f4:e0:
23:bd:6a:73:c4:11:b9:34:e8:19:7d:5c:37:33:a1:
f5:26:ce:49:5b:5c:91:b1:7e:2a:de:04:07:de:25:
c6:90:13:97:15:b1:15:af:bc:b2:95:9c:01:e1:2d:
5b:28:0b:da:b4:9d:90:f9:c1:ec:28:ff:ab:78:c2:
5e:09:29:8e:8b:15:4a:e9:30:da:e9:b3:86:ed:ad:
80:60:86:3b:a2:45:d3:24:b9:f6:e9:06:70:88:ab:
da:c8:24:4c:2f:1f:72:44:72:a0:9d:90:65:d5:f0:
1d:4c:4c:90:e9:75:ec:07:5d:4a:52:a4:c0:63:c2:
43:02:3e:2f:8f:6e:93:62:51:4d:3c:a3:0e:8e:05:
f1:75:0e:3e:c9:6a:44:a5:d1:ca:15:d7:24:23:c2:
35:45:d8:3e:97:c4:4d:65:16:95:03:6f:68:9f:bd:
95:7a:95:bc:43:06:33:37:6a:5d:54:fa:2d:75:c8:
27:cf:2a:09:6c:5b:d8:72:f2:3b:37:2a:8a:a0:af:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C9:2C:93:9E:52:8B:86:F0:FD:5C:57:B6:C6:5C:7E:CA:E0:6A:A4
X509v3 Authority Key Identifier:
keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b0:7d:a6:7b:41:79:b3:71:ac:15:89:62:5f:31:53:d7:59:
5d:64:9a:b0:57:e9:a0:b7:57:25:74:d5:d4:0c:ba:04:4c:47:
49:83:5b:ee:be:ee:f5:cd:1d:52:6a:0c:a1:ab:1b:96:de:25:
0a:12:b2:0a:7f:e3:4f:df:4c:a5:a1:32:7b:fc:fe:ea:44:e5:
0f:93:9a:ae:ed:e2:c1:cd:1c:72:9c:f7:4c:e6:e2:c1:6d:6c:
30:06:1b:47:6e:97:d8:0a:d1:07:7f:be:00:6d:ad:88:bc:2d:
4a:6c:35:90:ce:f6:dd:3c:18:ef:d4:67:4f:a3:39:86:e1:77:
19:92:62:df:72:37:1b:fd:7b:2a:ab:77:2a:f0:e2:e2:c0:88:
20:1a:17:89:e7:d2:0a:8d:bb:26:ba:cb:55:4d:54:2b:55:42:
3e:ee:f7:d2:49:65:5b:71:7c:35:e9:18:88:29:b7:7c:9e:8a:
fe:a5:c4:45:f1:bf:44:31:f4:9d:04:e6:f5:99:54:cb:64:e2:
d2:24:30:7c:cc:bf:d5:42:d7:18:e4:b3:bb:5b:70:13:88:8f:
b9:6e:40:fc:c7:4a:9f:d9:90:aa:15:32:71:be:24:62:95:96:
51:d0:99:6c:3b:51:cf:68:79:49:f9:3f:ff:22:3a:91:dd:96:
a9:3c:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:46 2025 by rpki-client