Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: YnFb9/E+Ck7hljV7h7wgYpgaaTr1xzJExhNy26dL42M=
Subject key identifier: 75:BE:8F:C6:97:6D:F1:3D:22:34:2A:80:14:A0:5A:63:AF:56:C2:98
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 0199FFFE4F99B488677DF8F13D701DB2163A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 121F
Signing time: Mon 20 Oct 2025 05:01:20 +0000
Manifest this update: Mon 20 Oct 2025 05:01:20 +0000
Manifest next update: Tue 21 Oct 2025 05:01:20 +0000
Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: ejjrkksopzQc/P6xVFiTBObt/dvP79rD9Fuv8TBG1Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:4f:99:b4:88:67:7d:f8:f1:3d:70:1d:b2:16:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Oct 20 05:01:20 2025 GMT
Not After : Oct 21 05:01:20 2025 GMT
Subject: CN=75be8fc6976df13d22342a8014a05a63af56c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:e2:e9:ce:7c:0f:5d:3c:97:29:3c:37:80:
21:26:e2:db:39:de:53:ec:a9:82:bf:a9:9b:03:1a:
8e:d6:be:9f:f7:e7:92:33:d7:8d:64:4d:50:91:fc:
7d:d0:e1:01:ce:b5:d7:d0:d6:90:39:bb:df:06:f9:
7a:c4:5c:48:cf:7b:1b:af:6a:a4:a9:a8:3d:d4:be:
9b:ba:59:86:9f:66:2f:53:09:f7:fa:1b:5f:de:8e:
0e:5c:bc:4e:25:95:0e:45:5e:9b:d4:14:3b:de:69:
29:3b:70:ce:fe:2e:57:00:56:c9:46:8e:99:e0:60:
29:cd:95:b3:3e:e9:3f:e0:f2:96:d4:b6:88:1e:89:
61:6b:c7:f1:db:d3:32:59:63:2c:86:be:df:f4:37:
bc:69:22:79:ed:45:41:69:e8:ee:f0:f7:86:60:f7:
dc:3b:a6:7c:ef:1b:3c:38:34:85:7b:87:84:97:af:
af:6a:fe:4b:e1:20:dd:e6:bf:1c:da:af:d9:38:c3:
7f:25:31:af:29:cf:77:f3:ab:56:17:80:00:f0:4b:
aa:e6:6f:60:46:9a:75:f1:2f:ac:00:d9:a2:22:93:
93:fe:f6:4e:04:0b:0a:db:1b:4b:fc:cd:ae:fc:fa:
9e:5c:9c:f2:a2:86:95:73:8a:8a:22:91:83:74:d8:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BE:8F:C6:97:6D:F1:3D:22:34:2A:80:14:A0:5A:63:AF:56:C2:98
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:50:92:03:ae:7e:26:ff:7a:74:41:55:52:96:08:b2:df:bf:
2c:7b:5f:96:ee:0d:bc:d7:4e:18:60:36:57:87:19:19:10:a9:
d7:5b:73:54:12:5c:3d:35:8a:67:38:0e:67:23:5e:0c:59:e5:
55:92:e4:99:e4:94:f4:24:bc:64:90:58:23:b5:5b:5c:10:4f:
ba:38:5b:dc:ce:e4:c4:1b:09:4e:33:96:6f:7e:2e:01:fb:3e:
5f:cb:70:0e:b5:d2:30:bb:87:41:62:74:be:b7:f4:c8:2f:3c:
d3:91:68:d3:32:fe:4b:cf:5c:7d:5c:af:cb:24:3d:c2:6d:47:
b6:0f:5b:74:f5:39:0f:42:13:bc:e4:ed:5c:3e:33:a0:97:f5:
f1:45:8e:fe:57:92:55:f6:ab:e6:83:b3:2f:85:4a:10:57:9d:
9b:e5:19:da:b2:7e:2b:41:2a:74:9d:6f:ce:21:aa:1d:7a:40:
4d:18:f9:ee:36:00:50:a4:ae:cf:02:e3:11:8e:48:a6:ee:d7:
5a:70:74:b7:20:a6:c6:04:a1:06:e0:ea:97:88:a7:3a:21:d4:
c6:d8:f0:82:8b:f8:67:e0:62:9e:4b:14:91:3f:e5:a8:49:a5:
91:0a:8f:32:ac:87:6d:6f:ec:cc:06:2d:c2:5c:ce:07:e9:6b:
54:5b:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:08 2025 by rpki-client