Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File: uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier: LH3TdnBAGQqNgBObGJq7+nz/BbNuEhQprggeiwMffUw=
Subject key identifier: FE:CD:45:5F:26:1F:EF:3E:57:11:A3:6A:FD:39:88:55:43:87:7E:37
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019A217772B7121C7055D7DB5F64E60B52C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number: 082B
Signing time: Sun 26 Oct 2025 17:01:07 +0000
Manifest this update: Sun 26 Oct 2025 17:01:07 +0000
Manifest next update: Mon 27 Oct 2025 17:01:07 +0000
Files and hashes: 1: 2t371AmA6am_gT2DygfV8oUEot0.roa (hash: jKlYnyLUgDsZbjU8rac27z9vNrX7VaKOYzCWe3mGEeg=)
2: 4h30bA-3Y1NPkPR74l_37u6rDuA.roa (hash: 15ZRW34VHGvAg6aqavimaSzixrDnJDwBfZWzEHDaSjs=)
3: L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa (hash: /qnDyDKLdI8C1LuTXc4GUnjm3lOo1qcuwAVpaz4euq4=)
4: Q-ERh4C_fIreU1kJHqIbiCU1JV4.roa (hash: CvofurTY3xCBBIW91EGU3e0F4XVRnYSMNX8fSyDcopY=)
5: QJSAPDqpWLPGPqLZahtGBL1Ujuo.roa (hash: IJMqi4E1bL4ZCNifjMhzbX4wFKnUH7rkpqt5Br3QiXA=)
6: buytX97WbFAYb_5j2H0YkO5IIjk.roa (hash: MQWcPEUZU7ucZLw/8SXvYxRLcudDsOAUxVnmSK3CJVo=)
7: c5sucgcQquIpGWGiQSZMt4GnWOs.roa (hash: 9es2orL5F+D6U+9tt9UKG+ntn0HPD0je5/rgMX4Np+Y=)
8: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: 7aXfFXZ0WYhLKycG0JGHcaddQuv+SYdzfF6/06kWaJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:72:b7:12:1c:70:55:d7:db:5f:64:e6:0b:52:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Oct 26 17:01:07 2025 GMT
Not After : Oct 27 17:01:07 2025 GMT
Subject: CN=fecd455f261fef3e5711a36afd39885543877e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:29:e9:44:a3:13:51:84:33:d2:a2:93:98:
4e:f9:80:14:ca:6c:36:4b:c8:c0:db:1c:52:c0:ea:
fe:16:f0:b1:11:b4:cd:49:25:62:b7:43:ed:9a:40:
24:5f:d9:56:1c:d5:6e:19:a1:79:9a:d8:4a:2c:cf:
e7:26:48:72:c9:7d:80:5c:8d:80:17:75:d4:e6:1f:
69:4c:d2:c0:56:13:62:c3:19:04:76:c1:a9:56:31:
a5:42:e5:1c:fb:10:da:5c:30:12:e9:b0:39:a9:24:
bc:d4:58:0f:32:31:69:6c:ab:b1:39:31:39:44:c7:
68:05:fa:d0:cf:1e:e7:e3:db:47:c5:15:e3:95:1c:
82:3e:2a:f7:41:7b:43:b8:1e:19:c3:84:bc:ae:b4:
2e:9c:48:77:ab:5f:77:dc:f9:82:d2:34:cd:04:60:
06:b4:d8:bc:ac:9f:e2:94:2a:12:00:b0:34:48:3d:
d7:6c:53:55:d0:f3:92:c6:df:53:53:e0:cb:1f:bc:
0b:57:72:0f:71:ae:a9:80:70:e4:a0:d3:c9:06:72:
e2:05:73:91:c8:1d:37:21:20:38:6b:dd:3e:b5:ac:
a0:0b:66:ba:9d:1d:6d:e3:19:13:16:d7:79:9c:80:
15:95:10:31:30:fd:2d:7c:95:9f:3f:a2:c5:92:df:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:45:5F:26:1F:EF:3E:57:11:A3:6A:FD:39:88:55:43:87:7E:37
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:83:6b:2b:f8:06:a1:bd:6c:15:3b:cf:89:f0:20:df:e4:fb:
09:47:79:22:cb:f8:ed:6e:7f:bf:76:3c:7b:fa:f0:cb:65:e1:
64:09:28:be:cb:3a:02:e9:97:f3:90:8c:bb:ea:c9:85:a7:cc:
aa:27:22:4a:a9:f8:fd:1b:71:74:81:83:79:e3:ed:a7:d4:46:
d0:fd:f0:9a:a1:09:88:87:f9:da:bd:7f:aa:9e:ba:ec:3a:4f:
f1:ed:fd:c7:b0:6d:53:e0:bc:e8:20:7e:8e:17:82:bd:c8:d5:
09:31:0d:90:d5:f6:a9:e9:6a:a9:dd:7a:ac:51:45:0b:6a:07:
fd:b4:0f:bb:23:46:b3:e3:0b:58:74:54:b1:8f:0b:40:94:40:
9b:72:c3:be:c9:71:a8:49:09:64:4b:ce:c5:ea:86:86:26:5f:
47:df:7a:62:0f:a4:4f:c8:28:19:17:9f:aa:84:13:04:c1:19:
b1:c1:5f:fc:ae:45:15:85:88:ba:49:86:75:4c:2f:c3:a5:3d:
fc:e4:7b:c3:a5:35:4a:26:8f:63:cf:40:54:99:67:97:21:98:
92:52:83:28:ef:b7:52:2a:8d:55:7a:43:26:1c:5a:b0:0e:4c:
03:65:5f:a8:64:bd:26:fc:27:3f:50:fd:ef:7b:f0:ee:12:a2:
44:26:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:17:09 2025 by rpki-client