Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File: uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier: ThFylEfCULQT3808gg25eL0KkfL1dUCd+GK+bJwDe8E=
Subject key identifier: 11:5B:32:87:AB:11:C9:9A:0A:54:C8:1E:33:D2:18:CD:C5:78:8C:6D
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer: /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial: 0199FCC653436FAB20249715E36B7634B100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=)
2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: Z3homH6w2N33uMdA3WN4Yt3omcTzBPy7ocVi/uIPwl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:53:43:6f:ab:20:24:97:15:e3:6b:76:34:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=115b3287ab11c99a0a54c81e33d218cdc5788c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:61:c8:ab:e2:e9:d2:9c:f3:85:95:76:b0:
59:0f:0c:3a:29:2c:5d:97:86:14:20:9b:08:5b:12:
a3:9c:a9:59:4a:1f:52:f0:a8:49:53:d3:80:6b:49:
0b:89:70:83:ed:ac:31:c4:0e:59:1a:39:0b:d8:23:
5d:03:60:dd:4c:05:45:19:0f:fa:6a:39:f4:3e:55:
99:52:59:8f:62:68:d4:43:a6:4b:9a:3d:bc:00:02:
1a:c5:60:8a:42:e1:f0:56:82:28:28:3e:de:8f:2c:
25:aa:9e:0e:f8:47:b9:d9:12:cc:5e:a6:3a:11:e8:
5d:76:e6:77:7b:69:97:71:13:62:f7:ae:9b:e2:e8:
3b:c9:db:a5:2b:6f:fc:af:6a:a5:e8:b5:34:d3:73:
2e:aa:8f:6e:6e:07:0b:7c:c2:41:7f:fa:fd:1a:ea:
c4:ac:b1:d9:39:b4:82:51:3d:62:01:02:c3:df:e5:
81:81:d0:47:45:d3:e9:d7:48:79:c7:08:25:0a:97:
aa:b9:c6:65:4d:5a:8c:f4:bc:bf:e1:1d:80:2d:c0:
08:e6:2c:27:d9:2a:45:91:c2:dd:cc:f0:85:a4:13:
92:12:a4:54:07:1c:82:95:9d:87:50:50:dd:c6:ca:
0f:ce:9c:a5:bb:1f:cc:cf:8c:0e:77:2b:88:e8:b8:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5B:32:87:AB:11:C9:9A:0A:54:C8:1E:33:D2:18:CD:C5:78:8C:6D
X509v3 Authority Key Identifier:
keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:88:d4:fe:b5:77:ea:11:19:37:a2:39:5d:e7:71:9d:2e:f3:
16:44:69:70:d2:93:8c:c9:c5:3f:e5:00:77:a6:db:b4:8e:8e:
b1:2a:d0:47:18:09:a4:3c:d1:9b:36:48:fd:fe:38:db:c6:93:
c4:50:c3:3c:bf:73:66:5f:62:bc:87:76:cd:29:0d:2d:97:9e:
83:21:81:85:fa:ee:33:7f:ff:80:cc:fd:5c:87:f8:c2:02:48:
92:80:33:5f:b9:b3:71:0e:a9:72:de:a5:d8:4c:a3:42:16:76:
f1:54:90:c5:f4:38:fe:8d:2d:0b:c9:77:1d:c5:87:33:09:15:
bc:05:e1:40:99:b5:60:2d:f5:f1:19:e8:38:ce:bf:f6:94:81:
05:19:6c:68:2f:68:b9:be:89:ce:da:b2:f3:92:1f:06:e9:82:
8f:6e:35:41:2d:6b:e6:36:fc:d8:e3:12:1e:f3:1b:f2:54:f8:
f9:15:ea:1f:73:47:37:86:60:2c:1d:6c:59:48:b2:48:57:6f:
63:2c:a7:0b:a3:ed:d8:e8:c1:e5:b4:31:81:2d:49:57:64:4d:
e5:03:df:1f:25:93:1a:b4:48:54:bf:50:3b:e8:88:ce:16:c3:
3c:0e:13:45:e4:1b:e1:66:d4:15:73:aa:a6:13:69:be:8c:ad:
8d:28:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:42 2025 by rpki-client