Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: DOEjWeAdSHfi50WgiKBkjeoXCjxIijs4XQk83IO9oFk=
Subject key identifier: DC:4E:05:D3:A8:A1:8D:17:B8:A1:68:8D:54:4A:E7:C4:44:FD:FC:3B
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019A096E6E672CE228A9B3737C0581D13871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 0400
Signing time: Wed 22 Oct 2025 01:00:23 +0000
Manifest this update: Wed 22 Oct 2025 01:00:23 +0000
Manifest next update: Thu 23 Oct 2025 01:00:23 +0000
Files and hashes: 1: eKxKng3YrXa1al_k_FMxk62FFXk.roa (hash: qjVORuy1yxJ7dvxNyktASCo2Y9i5FPpM1t2EcBY82MM=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: b4xKsfWtrJ72EGAGEzQujyAMUVikKUsknH/j/8hOQ/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6e:6e:67:2c:e2:28:a9:b3:73:7c:05:81:d1:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Oct 22 01:00:23 2025 GMT
Not After : Oct 23 01:00:23 2025 GMT
Subject: CN=dc4e05d3a8a18d17b8a1688d544ae7c444fdfc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:41:f7:f1:5e:b9:cc:83:de:71:5e:0f:01:
f5:7b:c5:d2:8f:3b:fe:08:20:6d:f0:5c:d1:18:e2:
0e:10:2e:b4:ba:39:21:b0:88:37:26:3b:da:8d:7e:
03:e3:5f:d1:8f:19:54:c6:2d:b3:cd:5f:dd:cc:d2:
a9:13:63:d4:80:58:18:c2:eb:7f:be:cb:02:6e:86:
eb:23:d9:c4:aa:57:ec:e0:19:91:1a:23:b9:40:30:
c0:58:d8:39:7a:92:be:8e:5c:18:1d:fb:b7:49:cd:
38:d0:89:5d:b9:dc:71:91:19:70:78:43:4b:3d:86:
c4:b7:81:50:5f:a2:70:a6:86:92:7b:54:18:bd:67:
5f:f2:fa:d0:c1:28:b4:14:b2:56:1a:4a:a7:28:05:
67:88:2f:62:b5:10:86:52:0c:d3:73:f3:46:c3:ba:
74:12:5f:4d:9b:7c:f1:df:df:3e:1a:af:86:53:5a:
17:71:10:7f:d2:97:aa:82:03:74:cb:ea:b0:44:d1:
ca:c7:99:85:03:64:b6:aa:fa:86:04:7a:fb:3b:75:
3c:8c:d1:81:75:13:39:e1:4c:62:a6:13:83:36:f0:
a0:04:de:52:37:9b:77:11:31:74:a7:2e:bc:c1:aa:
8e:79:ab:66:35:c3:52:34:0f:dd:0f:a7:be:8e:0b:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4E:05:D3:A8:A1:8D:17:B8:A1:68:8D:54:4A:E7:C4:44:FD:FC:3B
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:62:3a:92:5b:28:12:8a:f2:4a:a3:d2:c8:e5:47:7f:69:
dd:79:45:3d:82:60:78:c8:7d:b1:39:b7:77:7c:0a:da:1f:ee:
9c:f0:d8:cd:8d:5f:fe:d8:6b:7e:dd:ff:47:27:5b:4d:e5:ac:
17:4d:09:df:ca:c3:62:1c:c1:28:3e:32:56:99:d3:9e:f4:72:
49:2e:2e:3a:ab:62:cf:8c:85:a1:9e:14:99:90:86:08:30:f8:
85:cb:4f:d7:0a:97:bb:63:19:87:4f:fe:4c:56:ab:4d:66:af:
88:b7:45:89:ca:31:ce:bb:0e:09:b9:cd:bd:93:0c:6f:7d:f9:
0e:c9:6b:aa:70:60:34:fd:b7:fd:58:71:94:54:f3:67:c7:09:
ff:cf:de:e3:34:b4:6e:de:00:65:ea:ce:4b:19:38:74:0b:bc:
f3:d9:6a:c9:c0:e5:97:5a:09:a0:be:f5:cc:e7:77:3a:3f:95:
71:70:4f:1d:0c:d4:81:0f:29:48:41:c7:20:8d:1d:6a:43:2c:
28:d8:aa:68:bc:eb:b6:fe:e3:86:e1:fe:28:31:03:f1:cf:87:
7b:71:b2:69:48:cc:b5:07:8a:53:28:d5:92:98:d8:e7:f9:d6:
76:ac:5f:de:bc:ae:58:9d:e3:8a:b9:3a:b3:ea:b1:2c:44:2a:
6a:fa:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:11:02 2025 by rpki-client