Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: yPyCq6d2+NpO1Vo3DAXKK10ZzptjDdNp8Mrp2j9LmLw=
Subject key identifier: A7:E6:8A:88:15:ED:C0:8A:B9:2B:48:A6:42:65:51:D9:65:99:66:AE
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 0199FAD835CC708B0D599C0891B56691DC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:37 +0000
Manifest this update: Sun 19 Oct 2025 05:01:37 +0000
Manifest next update: Mon 20 Oct 2025 05:01:37 +0000
Files and hashes: 1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: U2OyZ1ChdDbek9ChSCTakLsdT7+eN5hXehSkjDLbin4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:35:cc:70:8b:0d:59:9c:08:91:b5:66:91:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Oct 19 05:01:37 2025 GMT
Not After : Oct 20 05:01:37 2025 GMT
Subject: CN=a7e68a8815edc08ab92b48a6426551d9659966ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:cb:a3:ca:84:ac:e2:d9:cd:b5:95:31:8c:
e0:ae:b1:4e:77:94:66:07:a0:3f:55:9c:ac:f7:f0:
e4:ea:1b:64:22:85:4b:dc:3c:f4:7d:44:56:88:7f:
3a:a5:55:8d:a0:0c:5e:71:01:a7:4e:8d:17:bc:f5:
ff:56:67:e3:13:e5:f3:46:e3:5f:9f:d9:9a:12:7b:
f1:62:a4:93:22:a9:40:c7:98:f6:d7:c6:30:42:7a:
c4:c9:ae:25:75:2d:23:0e:b2:db:32:1b:94:e3:c9:
bf:59:c6:5a:a4:98:15:cb:e6:ac:b6:ac:ed:5f:22:
90:0e:46:c2:0c:02:35:dc:4f:5f:9e:2b:24:63:d8:
cf:fe:b1:76:2f:78:cb:65:61:60:f5:df:f0:9b:a7:
72:ec:37:07:de:3b:2b:07:b8:13:3b:a1:4b:0c:3b:
21:63:bb:d4:68:86:1b:d4:2a:ab:10:ae:de:64:d7:
64:dd:95:39:47:0f:8b:26:62:6e:05:e7:10:af:19:
a9:ae:4f:df:69:09:3c:6f:6c:e6:65:62:46:d1:e1:
ec:fb:7c:6c:94:a8:8a:34:5a:ff:c1:d3:19:a7:a1:
05:c3:39:09:b1:4f:8a:6d:ac:58:95:d1:31:bf:85:
e5:9a:b9:98:17:67:99:8e:44:2d:86:81:7e:51:0b:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:8A:88:15:ED:C0:8A:B9:2B:48:A6:42:65:51:D9:65:99:66:AE
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c4:e2:0c:44:51:de:5f:f2:31:b4:f4:be:7a:4b:ec:14:e3:
8e:b2:a1:56:3b:65:d8:6e:14:92:1e:0e:59:93:66:ea:94:4e:
da:8a:06:1c:24:d7:27:83:2f:87:aa:b4:5b:19:60:77:da:e0:
8a:c4:96:b6:4b:2b:49:c7:b4:bc:5e:4c:52:0b:78:ad:d7:9e:
86:1d:fd:6e:da:33:bf:94:34:f7:bd:7a:72:f0:d1:1e:f0:14:
12:0a:56:85:99:67:7b:91:4f:03:92:12:23:87:a5:52:e8:d3:
7a:ff:1a:05:cb:7f:2e:7e:0e:4a:2c:65:22:68:48:ea:7e:a2:
6a:13:1d:61:9e:df:0d:21:96:a5:8d:fd:09:58:cd:f7:8f:cb:
d1:51:8b:24:1f:e2:1f:8c:9a:f6:21:af:1f:dc:3f:1e:dd:fc:
44:a8:c9:7f:7e:c6:df:4a:c6:91:33:02:e5:64:3a:2e:6a:20:
c8:43:16:e8:13:1c:ce:bb:cc:a2:32:02:6f:96:5d:26:5f:6d:
f8:d8:63:f0:17:0f:2a:8f:f8:45:1e:3b:dc:c3:f9:07:e6:7a:
7f:32:ed:4b:5b:71:68:34:8e:c1:62:0a:8d:15:8f:6c:84:e3:
ac:50:ce:fd:2b:c8:5f:f7:8c:08:40:db:b9:15:c5:d3:44:ce:
14:dd:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:52 2025 by rpki-client