Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: yCT2/l/JHTC8reSBD230C7K7qMTPEfqz/GvPsmYFMkk=
Subject key identifier: 72:F7:05:D3:B3:9C:E4:3E:BA:A0:89:A1:0E:C5:46:A8:67:81:23:AC
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 0199FD34250C0E711C19F8A11101B34C7653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 16A8
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: aFowrS9L9OlRbWsYXvbdDUpwjkoYHuPvgD+190VfBfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:25:0c:0e:71:1c:19:f8:a1:11:01:b3:4c:76:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=72f705d3b39ce43ebaa089a10ec546a8678123ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:8d:91:ca:ed:ec:72:9f:94:39:33:a6:42:
99:50:16:f8:b9:3a:42:2f:6b:09:12:03:a6:b3:b0:
29:51:92:e0:fe:af:3c:7e:30:d9:cf:75:66:48:8e:
bb:59:e8:02:3a:05:9c:55:40:80:3f:05:e8:d7:81:
35:ec:14:4c:9f:91:12:ea:b3:7f:83:b4:69:63:6f:
18:b3:72:b3:fe:01:29:a2:12:fd:42:37:79:05:97:
78:af:09:12:81:8e:71:bd:ed:31:88:39:6e:bd:cb:
8a:00:97:cf:0a:8a:02:6c:86:7e:d4:b4:40:f8:aa:
3e:65:34:85:d8:33:f3:ae:3f:c9:d6:91:84:c9:33:
89:d2:b3:08:d9:8e:a7:b9:45:09:c8:74:e8:36:95:
10:12:7f:0c:bd:b1:a9:8f:e6:49:81:0f:58:fc:b5:
1c:26:6d:dc:59:56:93:70:d1:f8:13:0c:0b:4c:d3:
cf:c9:d4:5e:63:42:9d:01:31:cb:54:59:e6:25:51:
dd:36:cf:fe:1b:e8:4b:25:e7:60:49:76:86:85:45:
c5:7e:5d:6c:a6:28:6b:72:13:a0:ee:13:4d:f7:3f:
60:94:71:d8:86:d1:2a:25:17:62:55:1e:19:d8:91:
5c:23:35:6b:91:76:5b:dc:d2:37:05:91:42:49:1f:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F7:05:D3:B3:9C:E4:3E:BA:A0:89:A1:0E:C5:46:A8:67:81:23:AC
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b5:36:d5:5f:57:62:33:8b:5d:b5:b3:82:c8:7d:d8:5c:9a:
1f:0a:ea:16:e5:1e:e1:43:d5:96:52:d8:64:b3:e2:d0:a5:ea:
4c:41:31:5c:95:66:51:66:d5:c9:ef:2c:8b:46:d0:1d:36:62:
02:f8:13:8c:a0:03:65:3d:d7:cc:a7:04:54:c3:b7:c4:65:61:
e3:dd:d1:d6:1f:d5:08:6b:71:41:0b:56:77:1d:b7:cd:e7:01:
81:e1:61:70:3e:e2:1c:de:30:b6:c6:a1:86:03:c4:32:89:de:
0a:e2:51:ad:18:69:6f:b9:87:44:30:d8:f6:1d:df:be:e0:aa:
af:3a:62:8c:57:7e:cb:f3:97:6b:76:3d:34:20:81:9a:e1:e7:
14:40:31:46:db:82:a5:85:70:a2:34:46:d7:28:ac:36:8c:d5:
2e:e4:35:b7:78:78:e9:54:ba:0e:53:93:46:5a:4c:d0:7b:2e:
83:be:86:bd:b7:b0:14:13:b3:e3:17:d9:a6:19:cd:05:fb:86:
c2:69:eb:1f:3a:f0:8d:3c:0a:88:20:2c:8d:e3:bd:bb:04:ab:
04:4f:3c:e4:f3:c9:82:02:ba:33:43:ce:7a:63:f6:cf:c2:19:
0b:cc:e2:75:60:53:8f:fa:ff:04:06:61:45:a7:82:94:79:0f:
cf:14:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:22 2025 by rpki-client