Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json)
Hash identifier: qGI/TKvO6kiW6AS+vgAQntq9hndCMS6OMD/did7O4gE=
Subject key identifier: F0:E3:28:52:14:19:8F:F3:6C:F6:C8:73:08:F8:DD:30:F6:56:84:07
Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
Certificate issuer: /CN=b90907cee4fac50f3753622ad21a989ae7741c47
Certificate serial: 019A00350C8C50075AB0E0AFC41F5E83392F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
Manifest number: 13E6
Signing time: Mon 20 Oct 2025 06:01:07 +0000
Manifest this update: Mon 20 Oct 2025 06:01:07 +0000
Manifest next update: Tue 21 Oct 2025 06:01:07 +0000
Files and hashes: 1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: 4CUXOGGmsR1Dp07gglUXgaStA3q1U2SxDj4OkGHnFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:0c:8c:50:07:5a:b0:e0:af:c4:1f:5e:83:39:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47
Validity
Not Before: Oct 20 06:01:07 2025 GMT
Not After : Oct 21 06:01:07 2025 GMT
Subject: CN=f0e3285214198ff36cf6c87308f8dd30f6568407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:74:2c:b6:43:ff:3a:e9:cb:21:d7:f1:7c:
67:e7:53:9f:ac:5e:21:49:8c:31:d4:35:97:c2:60:
0c:e9:e9:50:46:83:4f:44:bd:af:9d:dd:25:83:7e:
16:45:1b:67:30:a9:69:d7:09:16:e7:ce:a8:32:a5:
6f:f0:2a:e8:ba:29:31:2d:ce:75:94:0a:07:97:14:
f5:20:85:f7:41:25:90:b6:04:1a:43:37:50:94:f3:
36:d8:f0:0d:7f:c4:c5:ee:dd:c2:4c:7a:bd:a0:1f:
89:af:5c:55:5f:91:56:d6:ff:22:7a:bc:85:62:04:
13:5d:33:81:aa:a6:9c:c6:a1:d3:68:33:05:4a:fc:
45:0d:b3:e2:a2:14:33:e0:67:8a:cf:91:2a:ec:ea:
aa:de:5a:34:11:28:52:61:8b:ed:21:bc:a6:03:06:
b7:06:00:d5:14:c9:c8:d5:b5:e5:53:b4:80:6f:64:
75:be:1b:22:d4:68:38:93:80:d3:94:1f:2c:06:f7:
cc:0a:3d:0e:36:a5:64:16:87:04:c0:e3:47:bc:b9:
6b:9c:a9:6e:70:83:e7:c4:1e:5d:aa:8c:56:60:20:
dc:ec:70:c4:f0:c5:4c:64:a2:a4:04:df:7d:f6:2c:
fc:8a:48:ac:28:1c:23:a2:6a:c2:ca:4a:49:bc:1e:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E3:28:52:14:19:8F:F3:6C:F6:C8:73:08:F8:DD:30:F6:56:84:07
X509v3 Authority Key Identifier:
keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:91:79:a2:ce:3a:a4:01:95:a1:37:71:a4:e1:96:bd:a6:
15:73:b0:af:89:49:4d:82:d0:cd:bf:bd:30:df:31:d3:f7:15:
39:6f:5f:37:c7:01:5c:5e:a9:12:cb:71:c0:ed:50:64:1e:b5:
71:c7:f3:48:76:2b:70:86:e9:dd:ee:46:5b:25:1c:eb:b8:56:
6d:b9:ee:29:2d:9b:0b:ce:52:1b:f8:ec:bd:e8:83:22:78:71:
2c:b7:0d:10:7d:74:2a:27:d2:c8:f0:2f:e9:e2:f1:6a:63:b1:
96:de:3e:0c:30:96:a1:75:10:22:f6:09:fe:55:6a:ef:e1:17:
77:01:09:0c:16:09:b1:d2:a4:f2:1f:30:df:79:04:c6:94:9b:
c4:23:ed:f6:9c:11:e7:6c:f0:00:14:4c:5a:a5:11:0f:f5:50:
2d:cc:20:55:3a:6d:69:99:10:dc:6d:d1:a8:48:f7:4a:0b:8c:
e9:3c:ca:30:8a:f5:69:97:76:ce:6f:cf:35:0c:05:24:1a:a9:
7b:bf:65:cb:35:1e:1e:34:d7:72:d6:b0:9e:f0:fa:f2:77:d9:
50:e2:bb:eb:dd:b3:2e:aa:02:99:6a:e5:b6:d6:23:40:18:ae:
87:3b:a7:ab:63:ab:54:92:06:94:5a:2f:55:97:bf:2f:83:c9:
64:51:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:42 2025 by rpki-client