Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier: 8+tZ7j4Mi490eKFtuuN+xcfXY/v5M9/uSZqNOiKPLro=
Subject key identifier: AA:49:27:D9:8A:04:D4:4B:54:DF:1E:A7:B5:43:F7:C6:F9:76:57:38
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial: 019A2742564E31F30C358E69BFA17F9F0385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 20:00:50 +0000
Manifest this update: Mon 27 Oct 2025 20:00:50 +0000
Manifest next update: Tue 28 Oct 2025 20:00:50 +0000
Files and hashes: 1: PA8CjloTPg-68N7OnvoYD-1oLhk.roa (hash: 4/Ym4G39HmXB13TW6+krF+Wwi7w8FIhxrF2UkWzgLLU=)
2: c26zPerzgVBHPu_vijyV_Oovrl4.roa (hash: Gk43PDLGRAfU27KozR+OSnOsvS5KnMxHT/HJnzP3YQ0=)
3: i_g5q7-hPStlEv1O5n0OZOzfR60.roa (hash: m3x1cS4XhcesKKNznb1VTlqwdh2lVHJU/PvB8L7dB+M=)
4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: CS5rcJz+44u9tnR0ccBw+Lef/JLz2Lmb0F/IM2lpSF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:42:56:4e:31:f3:0c:35:8e:69:bf:a1:7f:9f:03:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Validity
Not Before: Oct 27 20:00:50 2025 GMT
Not After : Oct 28 20:00:50 2025 GMT
Subject: CN=aa4927d98a04d44b54df1ea7b543f7c6f9765738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:de:42:9c:dc:e0:5a:3e:61:21:4d:4b:42:
f1:3b:c7:76:5e:d1:ae:88:68:ee:79:cb:4f:c4:48:
14:8a:62:85:97:af:a4:55:79:24:1b:64:f8:1b:c4:
ce:3a:f2:42:65:41:d9:df:42:63:f2:8f:04:22:58:
f3:7a:2a:2f:c4:5b:40:28:96:96:d1:2a:2c:c8:01:
9e:1d:25:e6:c9:a2:79:e6:f8:d8:5a:3f:3d:6a:1e:
5b:17:18:a9:36:42:aa:0b:97:31:b2:78:29:86:a9:
e3:d4:07:5d:59:6c:4a:f6:bb:8e:d4:7a:e6:78:cc:
e9:fc:6c:e1:98:91:1e:37:8f:b7:65:0e:a2:d0:36:
cf:e1:cb:19:f3:4a:42:f6:3b:92:0d:f5:ff:f4:90:
e0:7b:ba:e3:1c:82:26:91:23:b3:28:3f:5f:5a:d4:
af:bc:4b:25:8b:86:dc:f1:41:e3:57:ec:19:27:36:
98:29:89:16:ae:db:81:57:d3:df:e9:33:ac:47:b9:
eb:77:1b:73:a1:e0:df:b8:d0:46:04:2e:ae:0e:09:
7d:12:6a:59:bb:53:85:c9:ff:05:e8:6c:42:10:80:
cd:5e:a0:48:24:e7:97:48:d4:89:52:d1:17:b6:60:
64:4b:26:73:8c:3f:a5:a4:5e:b5:59:0d:6c:30:1d:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:49:27:D9:8A:04:D4:4B:54:DF:1E:A7:B5:43:F7:C6:F9:76:57:38
X509v3 Authority Key Identifier:
keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1b:d9:0d:ee:1c:82:06:66:e0:8e:62:30:84:d1:84:fe:b2:
53:b1:6f:f3:ce:c3:82:c7:ef:92:5a:65:9d:6f:66:7f:00:47:
5c:da:5b:0a:35:e3:5d:4a:b9:fb:bc:8f:97:8e:23:37:d8:85:
7c:b7:1c:07:ba:00:1b:40:0a:04:c8:c4:78:11:0d:08:11:ff:
4c:8f:fb:50:6e:e1:07:cd:92:0e:ef:8a:b1:72:ec:14:31:35:
a3:0d:e5:16:b4:f5:e4:1e:06:02:19:f1:cc:01:7b:15:04:12:
f0:f1:5e:32:cf:3f:3c:4e:46:88:ba:c1:5c:5e:a3:4b:de:6f:
75:c4:44:a0:58:8c:71:4a:70:86:19:9f:26:ed:48:4a:b9:c4:
3c:54:80:4f:1a:f8:0c:ec:41:65:4d:d5:7d:1a:bc:c6:fd:72:
f9:88:3d:00:c9:5c:79:93:65:9b:47:15:96:88:8d:bd:d5:d5:
d8:58:2a:09:13:cb:4d:bc:08:48:ce:aa:e3:b8:e3:50:93:2f:
08:e6:51:19:ab:61:b8:a9:73:90:3d:da:25:78:73:9a:2e:20:
21:4f:a4:6b:44:34:01:79:81:29:4c:e8:5d:6f:bf:f6:fb:d7:
15:ec:18:76:c3:a8:d8:36:d6:23:89:f1:5d:e0:8a:fc:9f:16:
85:61:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:27:50 2025 by rpki-client