Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File: ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier: +ONyHGgdaqYTGVu5oPyPrR0i0et3x7uWG/RiYkiXw0E=
Subject key identifier: 78:86:CA:64:A4:6E:2E:22:BC:7C:A1:75:00:0A:4D:AE:12:9D:C6:EA
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer: /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial: 0199FCFD75DF2356883C37B711AAFF5463A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: OhaoKMaOP/3fnOQDRfdjnSiL6nvSesxK9IwRrFlYMDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:75:df:23:56:88:3c:37:b7:11:aa:ff:54:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=7886ca64a46e2e22bc7ca175000a4dae129dc6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:57:b9:66:32:66:2d:fc:a3:a3:8d:ca:f6:
a0:61:54:3b:8f:ba:09:6e:7b:a9:e9:3e:a4:67:e3:
54:85:64:ae:12:84:81:06:b4:b1:af:c9:af:64:fd:
cc:da:4d:8a:6c:ba:12:35:d2:21:e5:be:51:4d:4c:
19:81:6e:fa:1f:a7:71:8f:51:37:06:03:d6:d3:af:
50:5d:63:80:3d:cb:80:82:a8:d4:2f:18:f5:b6:16:
94:0b:79:85:56:8a:0e:9e:1d:9a:65:50:54:36:c7:
d1:02:e4:68:71:82:ae:36:58:20:a5:4c:c0:42:21:
f8:7d:f0:83:33:61:51:c8:64:96:09:da:62:05:37:
1c:e6:d7:d9:e0:14:71:67:10:f9:27:c3:89:55:1a:
bc:48:08:6f:a0:e0:33:10:56:a0:54:00:b4:38:41:
ba:88:cf:06:7e:29:b2:b5:a4:67:d9:90:cd:34:4c:
3e:7a:a0:cc:cd:ad:02:79:6f:00:d2:d6:c5:0a:6b:
4c:6a:e5:c3:46:f5:63:bb:ba:7f:7f:ac:81:3d:e2:
c6:cf:aa:03:a3:d0:0d:d5:a6:dd:76:cb:a2:36:7d:
86:24:c8:4a:60:b3:24:c9:67:f4:87:4b:90:33:a3:
63:ac:6b:87:7c:b4:ea:9e:bd:38:e2:a5:0c:ff:8a:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:CA:64:A4:6E:2E:22:BC:7C:A1:75:00:0A:4D:AE:12:9D:C6:EA
X509v3 Authority Key Identifier:
keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4a:ec:58:46:9e:da:83:d8:02:d8:de:77:ec:92:a7:39:69:
04:22:fe:be:df:d7:78:1d:fa:b5:be:63:8d:b2:d7:e8:21:b2:
c2:0b:c7:62:30:2f:1b:33:8a:03:3f:1e:d6:1a:91:d0:f6:4e:
94:f1:47:21:c8:bc:05:d7:40:11:f6:2f:a5:4b:67:fc:27:95:
6a:ca:3c:91:bf:86:b5:3e:44:22:d0:8b:e9:96:a2:51:c8:fe:
c2:6f:b4:f4:3c:95:d8:8b:82:01:32:30:ff:ef:bf:fa:b6:f9:
69:61:ab:48:2a:0f:16:1f:6f:d2:e0:ba:2c:e7:03:29:23:38:
b1:d5:a5:0e:05:27:ec:bc:1f:4a:ce:16:2e:83:51:68:07:72:
b1:86:d6:88:25:00:f4:15:a3:19:c7:f7:eb:18:3d:16:ec:87:
2b:3a:23:a3:d3:c6:dd:c7:66:a4:1d:0c:6e:70:17:7b:6f:d0:
63:de:57:df:7c:27:0c:f6:4b:e8:20:73:b3:8a:3a:f2:46:34:
72:69:e9:c7:27:91:85:1d:fc:60:c4:4c:06:0f:47:4c:cb:a6:
80:1b:64:ab:24:a3:44:67:58:c9:11:2c:5c:ff:49:42:19:3a:
49:3b:73:46:d9:aa:f7:51:e5:cb:4d:6d:33:bb:f1:54:3f:06:
8c:2a:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:03 2025 by rpki-client