Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File: uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier: XweVUATLhMNFmdjg9OdXDFLUuYmgfGqwyB6gF0bTOXo=
Subject key identifier: 29:92:EB:DF:8F:FB:B0:AD:D2:B7:78:A9:81:FA:44:CA:A9:9B:E3:9A
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer: /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial: 0199FAD8145656534114F9D7B09EC8DDC4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 05:01:28 +0000
Manifest this update: Sun 19 Oct 2025 05:01:28 +0000
Manifest next update: Mon 20 Oct 2025 05:01:28 +0000
Files and hashes: 1: oimw25gLGrg8VoA88DA5Qz6cbTs.roa (hash: pg4JhqGSyuBLyWQkEY6EPIiPycbtpRjAMWZIyZYwiWM=)
2: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: L6hwDO2q+Y5neiPJM/Pb9m3I42ZVg5rgl6JCF1tfJjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:14:56:56:53:41:14:f9:d7:b0:9e:c8:dd:c4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Validity
Not Before: Oct 19 05:01:28 2025 GMT
Not After : Oct 20 05:01:28 2025 GMT
Subject: CN=2992ebdf8ffbb0add2b778a981fa44caa99be39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:5d:57:62:d4:e7:fc:b2:6a:0e:ac:29:90:
0e:51:8d:d3:ae:31:50:99:6a:70:5c:5d:9f:f7:1a:
1e:50:33:f6:e1:13:ba:fa:29:4c:ec:da:59:14:cf:
da:ab:86:b6:17:38:b8:7d:5a:a1:74:69:11:f0:eb:
c5:29:77:28:2b:a6:1c:cc:0a:8d:46:e2:fa:58:19:
dc:84:db:8f:df:1d:a4:c1:04:cd:c9:3d:cb:0e:58:
16:43:fb:41:ab:41:4d:f4:d8:b4:42:23:d9:b7:69:
93:5e:b6:cd:2e:64:90:ce:46:6b:9c:e3:08:37:50:
47:65:e8:a0:38:ee:22:79:b2:88:34:52:c8:67:c2:
96:b5:52:10:85:66:c1:3f:25:a5:cd:82:5a:b6:0e:
73:f1:f5:b4:a2:97:f7:fb:7a:d9:71:77:31:a7:58:
96:d8:03:c2:ea:4d:17:ff:40:a9:a5:45:8a:b8:69:
37:66:93:df:88:5e:f6:e5:e1:58:37:a6:2a:b9:97:
9e:23:86:80:ed:ea:ba:22:1a:1b:5b:f3:54:e2:99:
55:e4:c0:4b:99:8e:5a:96:05:8c:84:28:60:80:b9:
b6:78:ec:73:94:df:85:95:00:5b:2a:48:1f:db:20:
c1:6d:22:f9:74:a8:06:c2:7f:71:e0:2e:87:7c:1c:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:92:EB:DF:8F:FB:B0:AD:D2:B7:78:A9:81:FA:44:CA:A9:9B:E3:9A
X509v3 Authority Key Identifier:
keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:da:00:68:11:25:a6:cf:45:f9:72:08:d6:df:d1:c1:a3:24:
ca:aa:a0:00:f6:b7:51:4d:9b:57:79:2d:8f:b5:e5:df:4e:7b:
71:1f:42:74:c4:95:2f:06:24:e2:2f:14:ac:e0:8c:78:76:00:
3c:7a:3e:4c:18:81:8d:4f:33:49:ea:29:03:83:6a:77:11:9c:
66:fa:86:37:cc:eb:86:0a:d1:3e:42:36:d1:82:0a:21:83:81:
2e:9a:94:3f:95:a0:36:e9:9c:be:16:d0:4e:b8:30:f6:0b:ec:
71:0d:de:15:04:82:7a:24:d0:75:3d:55:10:43:19:d1:51:dd:
6a:b5:65:73:ac:96:de:91:ef:45:f2:58:d5:9e:24:58:0f:ad:
53:a3:ee:ee:4e:92:70:19:1a:7e:a8:a0:29:e9:06:70:96:c2:
db:c2:27:24:8d:c8:14:d5:e9:95:d8:e4:e9:da:03:8b:51:c3:
de:75:b6:68:a5:12:cd:1b:d3:56:32:3b:cb:11:52:df:74:7f:
d0:47:be:fa:2e:6e:02:76:08:5e:91:b6:a1:8f:22:2e:ce:79:
3e:2a:7a:c9:2c:23:f3:b9:2c:94:0d:a2:0e:39:2e:0f:76:d3:
be:7b:e8:8b:ad:2b:7c:b3:84:73:47:62:70:35:6e:27:a5:40:
72:58:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:40 2025 by rpki-client