Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier: AJg5IdXzyckL9xsJuPd4P0EJpsCvVAINIaBVXdH6LoY=
Subject key identifier: 97:D6:D9:98:74:7C:91:89:52:E0:E4:0B:8F:93:63:18:68:89:0A:EF
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial: 0199FCC629B0AD7F758411991D5A77355C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=)
2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: prUHdQx96Zkk7FzgcZsXDtWSkD23C61x4+BhgJmJPXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:29:b0:ad:7f:75:84:11:99:1d:5a:77:35:5c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=97d6d998747c918952e0e40b8f93631868890aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:75:13:b3:45:70:5e:89:a1:4f:a1:94:c4:
82:5c:e8:36:29:eb:8c:49:a7:f5:2c:2c:e0:a3:4a:
16:8a:7e:fc:85:c2:f7:28:83:e6:c6:50:5e:ca:1f:
7f:f7:5e:14:73:e3:29:09:58:b5:d8:a6:f9:b5:82:
c7:f1:e3:7d:3b:a2:31:9e:79:e8:d7:07:ce:e8:1a:
3f:0f:65:5e:55:26:a1:13:39:c2:9e:1a:ca:a5:28:
1d:29:75:6e:87:ce:42:6f:96:b8:5b:b9:0d:ce:71:
a5:4e:42:64:28:07:a0:ad:d2:42:d1:52:5b:15:10:
e9:67:d9:7a:d7:b6:69:d6:aa:ac:92:f5:3b:8c:82:
dc:6b:a8:7b:54:c6:8e:1b:6e:04:6f:f1:10:91:85:
b3:99:1d:a0:fc:79:7a:fb:c5:1b:6e:2e:c1:0b:85:
7f:7d:7c:72:82:e5:ee:1c:73:c1:3e:f7:55:60:a8:
71:26:0e:89:6b:9c:40:c0:f1:04:62:6d:df:a9:fa:
0b:fc:dd:51:f4:1b:8c:31:0c:1c:71:c8:ed:23:23:
3f:b4:f1:c8:e7:50:1e:61:11:43:52:70:3d:80:1c:
b8:9b:26:a6:cb:4d:7e:2f:5e:18:87:e8:55:9b:8d:
0a:9b:d7:60:22:72:09:94:57:c3:6c:ac:a3:e2:1f:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:D9:98:74:7C:91:89:52:E0:E4:0B:8F:93:63:18:68:89:0A:EF
X509v3 Authority Key Identifier:
keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:80:40:cf:da:15:fe:0d:c9:f7:5c:05:b6:e4:68:9f:ac:2a:
61:fc:c8:0f:fd:a2:87:54:3d:02:57:dd:60:f6:4f:53:41:53:
cc:d1:66:ff:75:67:22:db:a5:92:32:b9:ab:7f:6c:da:77:27:
06:38:d4:02:bb:8d:10:e2:8c:02:32:a1:58:db:5d:8c:af:05:
d4:df:1f:1f:f4:a1:3b:b6:96:b1:37:f6:08:27:94:52:b1:68:
31:b1:4d:db:69:e0:55:77:38:05:2a:d2:6d:cd:11:62:d1:01:
57:fd:aa:e1:11:c5:61:09:f2:6c:ef:01:16:b1:c0:a9:80:53:
ff:d6:99:89:ba:1f:fd:96:bf:c3:e3:81:c1:ad:39:57:11:07:
2b:5a:0e:a9:c8:90:be:db:d0:b5:39:b1:05:45:86:b4:17:6f:
fa:3a:77:af:71:d8:b5:2d:77:69:66:47:d5:ba:87:37:f8:8f:
15:1a:e2:e6:af:21:f0:f7:aa:42:5c:81:53:5f:53:34:ba:aa:
a1:28:6c:a4:62:f7:81:62:28:df:86:a8:9f:21:87:4f:8b:da:
87:ff:d0:50:74:67:80:be:62:85:88:4a:c9:ce:91:8a:32:1b:
78:05:68:62:bb:1d:64:39:68:94:d6:1b:c5:22:d5:78:76:28:
bc:b3:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:40 2025 by rpki-client