Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: 3bDt4yxQUmsQIb9kk8qOVdGY0mBr5LbYoVJTkujL3rk=
Subject key identifier: BA:08:E5:B6:74:7B:D4:85:63:9C:2D:AB:5F:EA:3E:2B:8A:A5:97:03
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 0199FBB37664DB1905B8CBF6EDDAB75718B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: JhOM2pckb8nFdq5Y2DwyyvABDcw.roa (hash: /pw012qMM2N9wpV1EMngiWd9fhFOR9+5XLur4rjuVfs=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: fcOl24+8YHLSbD8XaEBsDGTDr3HrCnTeJHR/o6VSjkk=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:76:64:db:19:05:b8:cb:f6:ed:da:b7:57:18:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=ba08e5b6747bd485639c2dab5fea3e2b8aa59703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:12:19:17:e3:0f:8c:a4:7d:c6:94:f1:7e:20:
b0:83:07:52:04:b8:42:b9:ed:55:89:c9:45:c6:a0:
0d:f6:2b:80:fa:27:84:4a:14:cd:d5:cc:8e:61:b1:
40:ff:10:5d:82:02:14:33:50:16:20:3b:44:f8:21:
95:79:80:0b:c0:5f:a7:cf:60:62:59:73:2b:9f:ef:
b8:3e:cd:76:17:41:98:c4:c4:e5:d8:66:98:56:08:
d9:97:ae:cf:61:d7:8f:f3:e3:1f:46:f9:65:50:47:
67:e2:44:95:4a:15:26:cb:40:b0:d5:56:b8:1f:0a:
ff:80:89:4a:a1:b3:56:26:ee:1b:d5:2b:c2:82:ce:
91:9f:83:0c:ff:1f:02:46:62:30:5c:55:fd:a5:6d:
57:b0:ee:45:53:41:9a:93:48:19:c6:a1:14:b5:65:
87:7f:0b:e2:46:6b:16:5c:0d:2b:62:e5:8a:5a:f1:
4f:de:88:34:3c:e8:3d:80:01:61:f0:26:14:f6:b8:
65:d0:72:ef:9c:74:4d:ef:8d:a2:b5:a2:c0:fc:30:
22:07:68:00:68:73:d1:d6:9d:7c:ed:49:8c:c8:2d:
b1:4c:77:3e:f7:52:c7:f3:39:89:db:65:87:ad:3a:
72:dc:ec:85:7f:cc:65:e1:d2:07:c2:01:bd:e5:81:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:E5:B6:74:7B:D4:85:63:9C:2D:AB:5F:EA:3E:2B:8A:A5:97:03
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:24:15:30:ff:0c:ea:97:c4:b8:71:fc:33:58:6b:66:3a:77:
80:a2:2b:05:94:46:ae:da:f9:21:2e:25:14:a7:3a:13:86:01:
41:70:d1:5e:da:3b:e8:e0:7c:06:15:25:d8:01:73:0c:ac:6e:
a7:3d:17:47:7c:fe:a6:c3:78:89:09:16:02:ef:ff:89:6f:a7:
5e:e7:92:e2:b2:0b:84:9e:df:34:bf:88:3d:50:cf:4c:48:9d:
5f:4c:e7:99:8f:6c:e4:2b:14:ea:58:31:dc:80:ef:96:c5:57:
d6:1b:b3:3b:aa:ed:d7:89:61:5a:c1:05:5f:77:2b:26:35:0a:
45:69:65:8a:1c:18:1c:31:55:d8:15:7d:10:1a:a3:17:05:49:
d4:1a:ed:3a:8f:f3:80:79:1d:15:81:ee:71:62:42:5f:93:fe:
45:ca:eb:ad:5f:1c:d6:b2:3d:0b:54:43:85:5a:ef:87:b9:d9:
e1:30:b7:e4:7d:51:48:4e:2c:ad:af:64:0c:43:5c:80:d0:13:
38:ae:61:a3:99:bc:a5:a6:78:16:a1:d7:ad:d7:9a:78:a2:e1:
df:34:57:29:9c:2a:ee:e6:93:76:aa:fe:4a:b4:fb:2d:11:2f:
39:de:f2:fd:29:fe:ff:2a:2a:31:93:4d:b7:58:e1:74:f6:b9:
71:85:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:47 2025 by rpki-client