Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: kMHSn+Epdga5rVbioyHmCdV8VA8kJ1W1cIqEp9VGVGc=
Subject key identifier: 58:AE:85:8E:A3:39:D3:6E:FF:A0:14:36:3A:D1:28:10:21:A5:A2:1F
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0199FC59016684391359DEBFA2D614C786A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 16F2
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: HvGkzNX-LlaIXMSfIk5S1mOC0oY.roa (hash: cwXFNBAD/M2F0MUB/ov5M8039XefOPt3b2kagm/DMzw=)
2: ZqsDRLhiPpia2P-7RyyhANwTVV4.roa (hash: 0rsjP4AuQ2t0LszFPHOckD8EVFICht07+jDEBI6TOgQ=)
3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: F0HCZRQz41lm4RLFiWHtQQRiMzdSf/+sIwavzUGvx78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:01:66:84:39:13:59:de:bf:a2:d6:14:c7:86:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=58ae858ea339d36effa014363ad1281021a5a21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:3c:53:ed:9e:3a:09:17:c3:92:f2:33:9f:
b8:55:8d:b5:3a:80:3d:59:9b:a4:6c:0c:0c:bd:07:
bd:27:6b:b1:7b:59:9e:f2:1e:8e:21:1e:02:b0:52:
99:c7:62:3c:cf:c0:35:df:c7:c2:e6:d9:52:ea:50:
ad:6c:8b:f1:8d:30:d5:8a:e9:bb:bd:81:64:79:5e:
fa:07:2c:66:88:6c:38:93:36:e9:a8:01:99:2c:a1:
89:bf:22:5d:e1:a5:d6:bc:45:e9:ed:09:0b:2e:78:
4d:e9:15:91:4f:df:c0:df:f1:e4:75:40:d1:5a:91:
26:e4:06:4d:3c:fa:4b:d4:ef:06:f8:df:b8:51:62:
e0:a0:b0:2b:16:7f:bf:0c:39:8d:ef:4b:df:43:64:
b7:2e:81:1d:4e:27:28:63:4b:97:e6:68:77:91:48:
df:1e:a1:7f:e7:ad:61:26:99:0e:7b:a3:a2:f6:58:
f0:87:33:87:01:85:78:c9:79:c5:c1:89:b7:df:13:
aa:11:11:a7:7e:df:8c:ae:f6:4e:b3:cb:70:36:5a:
fc:3c:76:71:a5:9b:2e:6e:39:0c:13:a4:3a:b5:af:
04:69:d0:37:c2:1c:78:6d:e3:65:65:0d:cf:c7:2c:
72:a3:1e:36:61:97:cd:22:e3:6e:84:b5:cf:c8:c2:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AE:85:8E:A3:39:D3:6E:FF:A0:14:36:3A:D1:28:10:21:A5:A2:1F
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:23:cf:f1:99:65:68:37:f0:e2:5a:be:19:a1:06:81:ba:75:
c7:3f:54:35:4b:b6:2b:f1:2e:21:ab:2c:c6:75:67:ef:87:18:
af:94:af:d5:46:37:c9:7d:6c:f6:75:e0:40:c4:92:ca:88:59:
da:50:d8:bf:90:f7:f1:dc:e5:a6:8d:08:88:b6:25:63:3b:40:
3c:14:d8:ab:73:06:6f:0c:28:ab:6c:4b:a4:13:88:7c:e5:71:
12:85:a9:f7:d0:76:82:44:2c:36:b7:14:7c:1d:07:89:23:b4:
0c:f5:fa:f8:6d:7e:c0:21:32:6a:40:ba:3c:f0:88:87:9d:2b:
e1:78:2e:6f:49:5b:37:af:19:c0:42:d3:ee:fc:a4:8d:4f:8f:
54:ba:9a:4e:d6:41:d9:f3:a8:b8:85:d6:3c:a5:64:14:ab:36:
93:19:3e:6d:7e:d3:ab:60:7b:bc:6a:b1:00:54:63:d4:14:c0:
2a:fb:2b:2d:51:73:cc:33:03:94:04:e7:30:23:a3:23:2a:35:
5a:22:8c:92:af:34:2a:17:b0:7d:14:32:e5:b2:90:22:35:17:
0a:98:04:b3:68:d3:ac:2a:96:16:1a:d0:fb:ea:68:74:0a:92:
16:8d:b7:ae:1d:2e:ec:9f:d2:8c:fa:01:b4:c9:1d:1e:d0:92:
74:09:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:00 2025 by rpki-client