Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File: UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier: k/JznduMCr00204eD3kBL2p8CAjFY4RbUlsanMKK+xA=
Subject key identifier: EE:25:7F:DD:F3:D6:00:D2:49:5B:D0:08:7C:E4:97:40:43:E4:39:F9
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 019A2778E6C46E3EF71AACA45E1A90A379E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 21:00:26 +0000
Manifest this update: Mon 27 Oct 2025 21:00:26 +0000
Manifest next update: Tue 28 Oct 2025 21:00:26 +0000
Files and hashes: 1: 8lD2bueF4idx-D9rs-1sCmrE1bc.roa (hash: 5PFrVgW1FYuSvrdoSsMaHDsFf/dnBLjQrH9shdPQWYM=)
2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: PB8ydxAptyDFTUnV06AtSI46/oGAUxfbh4TYDddSxNM=)
3: pobSRqB4Q1gZ4DXOZf4V9pVZrL4.roa (hash: jRPTi+5Lw+W7BzK3Rqd36iIkpmMkM0yVpsHfYrztv94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:e6:c4:6e:3e:f7:1a:ac:a4:5e:1a:90:a3:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Oct 27 21:00:26 2025 GMT
Not After : Oct 28 21:00:26 2025 GMT
Subject: CN=ee257fddf3d600d2495bd0087ce4974043e439f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:aa:1b:0f:53:65:76:b7:0a:d7:76:33:c6:
23:69:d7:5c:4a:29:6d:55:6d:36:35:39:c0:62:9e:
15:63:a2:0c:53:bb:9f:f1:fb:bd:47:14:63:a2:63:
28:50:7b:64:34:18:3a:ae:b4:1c:bc:09:bb:db:4d:
e0:e3:f1:e4:dc:d9:2e:d5:5b:04:07:22:86:4b:bd:
24:b0:cd:16:4f:47:97:46:74:76:18:f7:b8:18:72:
35:47:ba:86:91:cf:91:df:87:65:2d:50:e2:30:20:
4a:b2:3d:2f:e1:a8:ca:ce:44:32:66:55:d1:12:59:
7d:73:cb:53:87:b8:b4:23:e2:e2:a5:85:50:5d:9e:
e3:9c:f2:20:66:74:d5:eb:8d:cc:c8:00:f1:ce:07:
4c:c1:a6:52:5c:7a:37:1c:23:9c:99:3f:df:ca:7d:
81:00:74:92:21:16:68:61:62:79:9f:43:24:48:88:
53:81:25:60:98:49:ce:e5:a3:53:28:a3:01:dc:7f:
0f:28:d6:bb:24:04:c3:f0:90:a0:e7:bb:7c:f1:7f:
b3:b7:c2:fa:ae:08:b2:d8:29:7e:dc:22:ee:50:e5:
96:51:d9:de:08:a1:60:8b:35:65:cd:0e:64:83:57:
03:78:02:73:46:31:35:ea:b4:4b:b5:56:00:14:5c:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:7F:DD:F3:D6:00:D2:49:5B:D0:08:7C:E4:97:40:43:E4:39:F9
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f2:e5:a8:bc:9f:30:73:cb:29:ea:90:9b:ee:e9:f4:7c:6c:
20:9a:fa:43:e7:c1:2e:69:8c:32:c7:22:48:25:04:fc:01:99:
b3:fc:1d:34:a4:86:d8:03:ef:05:65:93:89:59:66:ed:92:08:
55:83:5f:99:ff:09:8a:51:11:b2:61:77:93:30:bd:2d:f9:e2:
2a:88:56:c3:eb:4a:1f:cd:ae:de:8f:62:3e:6a:fa:31:c6:0d:
7f:aa:1c:04:06:0b:67:d4:a4:b1:ff:a2:d7:db:68:f3:58:06:
7c:31:92:d8:c9:15:aa:0f:61:ec:80:38:67:a9:4b:e3:bc:0b:
44:72:81:ab:bf:fc:44:20:b1:6d:31:3a:95:22:10:84:a9:86:
49:58:11:c5:2c:7c:ef:97:d2:a5:fe:cd:45:3c:25:19:0e:27:
a7:e9:86:30:57:6f:43:aa:25:49:59:b7:97:39:71:a5:09:d5:
d4:7a:35:16:de:cf:61:47:65:39:2a:b0:a3:22:a4:db:ae:58:
26:b5:c1:0b:93:ec:e3:60:5e:4f:4e:bc:4c:10:93:51:a7:df:
0e:d3:0e:b8:97:65:3c:09:43:4c:eb:87:28:13:22:59:70:b0:
5e:68:01:a0:31:e1:14:65:c5:ad:37:1b:ed:c7:bd:0f:2d:f7:
c3:83:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:19:41 2025 by rpki-client