Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: YGBSpkoDYZhFAs5qGO+WTsAUPGeItdVLJ+HXOcjOYH4=
Subject key identifier: 66:18:32:BD:6B:3C:C1:05:32:DD:2E:48:56:32:5D:09:29:1E:1B:60
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 0199FB458821B79EE9426D8A1C249A4D7F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 16F4
Signing time: Sun 19 Oct 2025 07:01:01 +0000
Manifest this update: Sun 19 Oct 2025 07:01:01 +0000
Manifest next update: Mon 20 Oct 2025 07:01:01 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: ewUNWQJQNklqk8Ud5+I8W4TNLC4P//+YMk3oT9R7jwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:88:21:b7:9e:e9:42:6d:8a:1c:24:9a:4d:7f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Oct 19 07:01:01 2025 GMT
Not After : Oct 20 07:01:01 2025 GMT
Subject: CN=661832bd6b3cc10532dd2e4856325d09291e1b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:99:44:ae:a1:10:66:11:c4:80:b0:e5:4d:ca:
e8:d4:e1:58:a3:10:42:6f:d7:ec:7b:9c:4f:3e:60:
69:f5:43:82:92:c7:f8:ec:73:b2:4e:5a:3b:40:f3:
ca:e2:d0:8b:3c:87:cd:6d:d3:b6:c7:f0:bb:3a:a0:
16:5f:64:c5:8d:85:9d:69:91:c0:3c:76:b3:84:18:
a1:54:bf:13:6a:0c:0b:19:b9:31:a5:0f:21:da:a7:
c3:6c:97:ea:75:b6:cc:6a:f5:5a:1b:4f:52:9f:fb:
1e:c6:48:7d:62:03:06:15:3d:14:73:df:49:3c:11:
bb:19:5d:0d:39:89:4a:2c:b3:22:03:cf:49:a0:58:
50:e1:06:54:55:dc:96:e0:64:15:89:be:b2:00:e2:
81:e3:24:d0:aa:25:79:04:5c:4d:6f:84:7d:df:b1:
6e:61:b9:74:55:63:ae:aa:f0:77:83:7c:e6:a6:43:
d8:71:dc:39:4d:40:48:2c:28:a3:1c:1d:5c:14:97:
6d:10:52:e1:7a:93:4e:11:ef:14:b8:bf:ce:e7:fe:
2f:27:70:a8:0e:fc:c1:2a:f0:87:9a:8c:41:3a:d0:
d6:4e:50:a7:a0:e4:8f:f5:a9:d8:60:0d:9f:41:9d:
a7:1b:fe:a1:5c:e7:1f:a6:f1:68:70:de:d3:d5:8b:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:18:32:BD:6B:3C:C1:05:32:DD:2E:48:56:32:5D:09:29:1E:1B:60
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:77:a2:1a:1c:46:51:3a:5b:c7:e4:35:68:6f:4b:9b:c1:72:
ab:d0:5d:dc:32:a7:04:d5:f1:0e:ac:a4:d6:be:c3:12:9c:46:
16:36:cd:f8:c6:83:0c:f3:d1:17:36:af:bb:b9:e8:3e:05:fa:
9b:4e:92:09:5a:68:a8:e9:47:09:7d:30:31:0a:83:14:6f:1b:
b2:b0:a7:8d:03:c0:cc:a8:f3:9f:e8:9a:14:55:f9:73:c2:5a:
f4:d8:36:83:3b:1b:b9:2d:3f:43:60:5c:cb:a3:45:ab:48:d0:
ee:02:7a:1e:e6:fa:9d:f6:e0:bd:2d:17:0a:7a:40:db:cd:74:
2f:2f:d9:b1:0a:ae:e8:14:6e:6a:53:7b:a2:d9:ba:c5:a8:65:
10:b6:68:c7:4e:2a:a5:d1:e5:eb:6b:83:ce:75:c6:dc:4e:69:
15:e0:d2:59:53:97:16:bc:79:81:04:1f:58:62:93:74:d4:10:
a8:e8:bd:57:f3:80:d0:2c:af:aa:1b:4a:a5:98:a0:be:5d:42:
db:d0:b5:01:1c:57:4b:ad:65:de:19:9b:ad:7e:0f:0f:99:42:
c3:c2:be:b8:6e:f7:28:12:d6:5a:35:9a:31:15:e0:74:8e:a4:
f0:fd:f3:b8:0a:a9:6e:f8:71:71:d6:9e:c5:b6:e1:03:8e:0a:
60:3e:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:39 2025 by rpki-client