Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: PhwZo6/oBGsuXkqz1HwIOQyIdlvGnI+LYS472+oltkA=
Subject key identifier: F3:12:22:49:E5:13:4D:73:82:9E:BA:5E:DB:B2:A9:C0:2D:A4:6B:91
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 019A006C90F6237A64AC140E688992BCA9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 07:01:46 +0000
Manifest this update: Mon 20 Oct 2025 07:01:46 +0000
Manifest next update: Tue 21 Oct 2025 07:01:46 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: BtCYM+lL4Z2+28bRJHh4Qk5AcKjXQbwM8sd86FfsMNs=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:90:f6:23:7a:64:ac:14:0e:68:89:92:bc:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Oct 20 07:01:46 2025 GMT
Not After : Oct 21 07:01:46 2025 GMT
Subject: CN=f3122249e5134d73829eba5edbb2a9c02da46b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:ac:0f:47:75:bc:66:9c:67:c8:1f:fb:31:
12:59:40:9d:b8:2f:4d:c6:8f:08:12:e3:bc:99:04:
01:44:87:ce:cf:90:eb:b6:3a:5d:fb:5a:b0:a9:da:
d5:2b:52:5c:5c:26:f0:c8:25:aa:93:6f:f9:a6:ac:
53:39:e1:bb:ca:65:98:07:39:d9:ad:f1:5f:aa:64:
54:df:16:ac:f6:fe:3e:6f:a1:53:e5:9f:19:48:02:
39:04:b8:30:50:a6:8e:f7:f4:a8:aa:a7:b8:fd:94:
ff:ac:4f:a8:06:9f:a8:28:ae:d0:ab:3f:ab:d1:be:
6a:bd:49:ae:c4:c4:38:1b:d2:f8:63:b7:8e:23:d8:
7d:4b:0d:23:fc:3e:1f:a8:59:52:fb:63:4f:56:da:
47:71:e4:52:65:e8:4c:33:bf:9c:63:ad:fe:a7:80:
9b:94:c7:11:56:e6:7e:b5:c3:1f:7c:04:0a:35:ec:
c3:e6:21:f2:29:93:b6:c3:e8:84:3e:e3:59:43:71:
e4:d5:cd:51:07:72:f6:a6:91:b2:56:c6:55:ce:2b:
9a:b1:32:fc:c8:ea:2f:97:3b:d4:57:fe:93:c6:5a:
72:80:d8:68:6b:39:c9:66:5f:ce:34:52:23:df:6f:
a3:4b:25:7c:48:33:c3:59:fc:50:e9:22:d3:55:26:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:22:49:E5:13:4D:73:82:9E:BA:5E:DB:B2:A9:C0:2D:A4:6B:91
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2d:3e:11:f4:04:5e:d0:5f:aa:7d:53:be:58:35:c9:f8:1d:
e9:2f:76:a7:58:41:97:f4:ad:d5:c2:95:ae:4a:92:dc:66:30:
23:43:73:d7:e1:ad:e1:2f:88:75:86:5e:28:b6:ce:63:d6:b8:
61:a2:b3:7d:60:ee:77:a3:49:47:32:69:4d:51:e1:b9:1a:e6:
43:36:16:6e:d0:94:d6:40:2f:0e:cc:eb:1a:2f:28:8f:d2:ab:
3a:96:48:af:0f:3b:27:3c:bd:9f:1b:2b:a3:e3:b6:16:23:12:
1d:93:b4:05:6c:87:5d:23:e6:db:9c:d7:e1:e3:d3:f4:73:01:
ee:66:64:7a:29:f4:8d:2c:0f:75:3e:54:e2:43:18:f2:86:7a:
13:03:7e:04:23:56:57:2e:a0:67:c8:67:9a:ce:9a:83:ba:e1:
1a:cc:21:fe:fa:b0:02:d6:c2:a0:a6:86:c7:a6:d0:34:6a:1c:
8f:65:e7:9d:54:24:c7:6c:67:b5:22:f1:3c:5d:f0:fc:70:b4:
c4:dc:d8:92:0e:f5:41:72:bf:0d:7c:f4:e2:2e:25:c9:18:4d:
b7:31:68:44:1a:04:0a:9b:6f:fc:ad:06:58:b3:9b:18:32:6e:
39:73:9b:84:a3:e5:84:01:27:9e:fb:92:51:cf:a3:b9:13:2d:
05:7a:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:03 2025 by rpki-client