Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File: uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier: FvNL4Cnh5Jq3Q9Ew7tpWXDl75OpJevJqn30TLdxy3t8=
Subject key identifier: 91:56:49:B9:21:CD:71:21:F9:A1:4D:0E:DA:68:A5:D1:0E:5A:B2:55
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019930117CAFA1BD521165E9E652EF8E0224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number: 07AE
Signing time: Tue 09 Sep 2025 20:01:16 +0000
Manifest this update: Tue 09 Sep 2025 20:01:16 +0000
Manifest next update: Wed 10 Sep 2025 20:01:16 +0000
Files and hashes: 1: 2t371AmA6am_gT2DygfV8oUEot0.roa (hash: jKlYnyLUgDsZbjU8rac27z9vNrX7VaKOYzCWe3mGEeg=)
2: 4h30bA-3Y1NPkPR74l_37u6rDuA.roa (hash: 15ZRW34VHGvAg6aqavimaSzixrDnJDwBfZWzEHDaSjs=)
3: L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa (hash: /qnDyDKLdI8C1LuTXc4GUnjm3lOo1qcuwAVpaz4euq4=)
4: Q-ERh4C_fIreU1kJHqIbiCU1JV4.roa (hash: CvofurTY3xCBBIW91EGU3e0F4XVRnYSMNX8fSyDcopY=)
5: QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa (hash: IJMqi4E1bL4ZCNifjMhzbX4wFKnUH7rkpqt5Br3QiXA=)
6: buytX97WbFAYb_5j2H0YkO5IIjk.roa (hash: MQWcPEUZU7ucZLw/8SXvYxRLcudDsOAUxVnmSK3CJVo=)
7: c5sucgcQquIpGWGiQSZMt4GnWOs.roa (hash: 9es2orL5F+D6U+9tt9UKG+ntn0HPD0je5/rgMX4Np+Y=)
8: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: vrGAtFuCs3Ys6yfLo0Uc64Emujw716JLY35X829qlcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:7c:af:a1:bd:52:11:65:e9:e6:52:ef:8e:02:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Sep 9 20:01:16 2025 GMT
Not After : Sep 10 20:01:16 2025 GMT
Subject: CN=915649b921cd7121f9a14d0eda68a5d10e5ab255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:cf:f5:6c:bd:de:08:13:98:07:c0:3f:0e:
c8:aa:a5:14:41:15:38:36:45:46:66:e5:db:1a:b7:
98:1c:3c:04:61:b7:2b:a1:69:f5:7e:b4:82:6d:78:
fe:97:ff:e4:90:94:4a:1a:2a:50:fc:4b:4c:c5:b9:
d2:38:82:19:f3:a1:04:3b:d1:13:ac:ad:7a:dd:02:
f0:2e:57:75:85:3c:d2:48:8b:f7:22:94:ad:82:9f:
b5:1d:19:77:23:72:46:93:aa:c7:44:75:a7:3c:40:
f8:a1:84:2a:5f:90:6e:89:56:c9:1a:b3:65:01:81:
56:b8:74:de:fa:10:6e:80:cb:10:f5:c1:c0:64:bc:
f9:62:c5:01:d8:e6:73:c8:74:d8:57:31:3a:0c:56:
e7:0a:e1:77:a7:05:b7:9d:b5:7e:eb:bb:e9:8a:a9:
b9:2d:36:ff:42:d8:f5:41:8e:79:4a:da:a6:d4:e7:
da:e5:6b:05:1b:67:8a:f6:ae:58:65:cc:11:bd:7e:
20:56:5a:aa:e9:65:c9:f5:55:8e:42:02:d2:24:f2:
d9:52:2c:a8:b5:fb:94:3f:3b:1a:f3:60:71:8a:60:
d8:d7:70:71:34:c9:ec:b9:f7:e4:6b:f1:49:07:22:
1e:53:53:88:cc:52:da:f6:5b:18:f7:2d:08:8c:c2:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:56:49:B9:21:CD:71:21:F9:A1:4D:0E:DA:68:A5:D1:0E:5A:B2:55
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9a:8f:4b:b4:81:6b:b9:81:b4:06:60:3f:44:b6:b1:3e:25:
64:b7:99:b6:e9:6e:de:75:eb:85:cf:df:ac:1f:ad:f3:48:1c:
84:9f:a4:23:7c:82:b8:d5:26:d0:35:cd:df:12:24:55:c5:4e:
c3:bc:e2:61:74:16:36:90:79:25:da:e7:63:65:0f:41:e5:42:
52:46:89:be:62:ae:8a:3c:ab:ca:c0:c9:43:23:27:65:a3:08:
7c:d3:cb:87:87:a9:f7:0e:5e:41:99:6e:bc:d4:c4:ce:e7:dc:
e3:9a:9f:38:4f:98:dc:d9:48:b4:56:42:ad:60:38:24:0b:95:
cb:01:28:d3:9c:e4:01:6c:09:da:26:d1:ce:bf:83:eb:73:75:
04:6c:8f:0f:02:7e:3f:39:06:9c:33:e4:8e:6d:2f:68:0e:48:
79:b7:b3:8c:fa:ca:09:9c:fe:de:5f:db:97:4c:fe:33:76:d7:
38:2c:a5:85:01:76:ed:84:fb:62:e7:1b:82:9b:35:b5:dd:ad:
e5:64:84:22:4b:cb:98:14:b9:aa:35:31:ef:ad:e5:98:72:9f:
27:29:9e:93:98:46:7b:96:37:37:d4:4c:ad:ce:f1:36:45:6b:
d3:88:34:31:85:fd:dc:f4:13:6e:35:28:29:29:a1:7f:03:04:
c9:eb:b4:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwEXyvob1SEWXp5lLvjgIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2
ZjVlM2QwHhcNMjUwOTA5MjAwMTE2WhcNMjUwOTEwMjAwMTE2WjAzMTEwLwYDVQQD
Eyg5MTU2NDliOTIxY2Q3MTIxZjlhMTRkMGVkYTY4YTVkMTBlNWFiMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIzP9Wy93ggTmAfAPw7IqqUUQRU4
NkVGZuXbGreYHDwEYbcroWn1frSCbXj+l//kkJRKGipQ/EtMxbnSOIIZ86EEO9ET
rK163QLwLld1hTzSSIv3IpStgp+1HRl3I3JGk6rHRHWnPED4oYQqX5BuiVbJGrNl
AYFWuHTe+hBugMsQ9cHAZLz5YsUB2OZzyHTYVzE6DFbnCuF3pwW3nbV+67vpiqm5
LTb/Qtj1QY55Stqm1Ofa5WsFG2eK9q5YZcwRvX4gVlqq6WXJ9VWOQgLSJPLZUiyo
tfuUPzsa82BximDY13BxNMnsuffka/FJByIeU1OIzFLa9lsY9y0IjMJ8PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFWSbkhzXEh+aFNDtpopdEOWrJVMB8GA1UdIwQY
MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt
YzUxOTUxNjJlM2JlLzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl
LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApqPS7SB
a7mBtAZgP0S2sT4lZLeZtulu3nXrhc/frB+t80gchJ+kI3yCuNUm0DXN3xIkVcVO
w7ziYXQWNpB5JdrnY2UPQeVCUkaJvmKuijyrysDJQyMnZaMIfNPLh4ep9w5eQZlu
vNTEzufc45qfOE+Y3NlItFZCrWA4JAuVywEo05zkAWwJ2ibRzr+D63N1BGyPDwJ+
PzkGnDPkjm0vaA5IebezjPrKCZz+3l/bl0z+M3bXOCylhQF27YT7Yucbgps1td2t
5WSEIkvLmBS5qjUx763lmHKfJymek5hGe5Y3N9RMrc7xNkVr04g0MYX93PQTbjUo
KSmhfwMEyeu05A==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:51:52 2025 by rpki-client