Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: ApcfBuI9DOF2km5AJKzY/6+YJ42YghJiFCLKeBv4mzk=
Subject key identifier: 5E:CB:A8:CF:9A:EC:1D:11:61:7C:D1:80:39:87:EA:C8:1C:A6:13:B7
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 019A35DA6F89EF8F93CBD08EE0952EDA2C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1700
Signing time: Thu 30 Oct 2025 16:01:39 +0000
Manifest this update: Thu 30 Oct 2025 16:01:39 +0000
Manifest next update: Fri 31 Oct 2025 16:01:39 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: OJsoWd5fLbZFLCnKnNOJcgovFVftAUS0pT2dKP77/A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:da:6f:89:ef:8f:93:cb:d0:8e:e0:95:2e:da:2c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Oct 30 16:01:39 2025 GMT
Not After : Oct 31 16:01:39 2025 GMT
Subject: CN=5ecba8cf9aec1d11617cd1803987eac81ca613b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:09:1c:8e:16:28:f6:3d:5c:d3:7a:18:0d:
82:d3:ff:04:d2:1a:f5:e1:3f:bb:f3:a3:ee:05:ad:
20:c2:82:d2:38:2e:9e:2b:9f:07:9b:39:6e:0f:a5:
d3:2b:74:8d:10:d4:f1:e3:c2:05:3b:4b:71:05:bb:
56:9e:c8:74:0a:89:46:14:e8:7f:da:69:d8:b1:b6:
af:54:7c:3e:fc:24:0e:7c:74:2f:2e:69:0a:cd:52:
f1:1b:d9:23:aa:dd:31:5c:c1:bc:76:00:99:b5:5e:
5d:cb:13:d5:0e:98:2a:2a:d4:cb:19:b8:ae:d3:40:
ee:47:9a:21:74:cb:4a:da:26:ce:93:7d:de:ae:93:
ae:1e:c7:86:f9:f6:f1:59:96:ed:c6:e4:6f:62:87:
44:4d:6c:8f:03:e5:40:18:0b:96:b4:c9:f4:dd:f8:
17:24:c4:f7:aa:7f:96:84:0a:9b:44:fb:2c:43:8b:
58:81:ca:c9:4d:68:7f:96:bb:69:58:7a:1a:90:8d:
94:67:d3:1a:ec:3f:68:28:46:e3:69:46:ff:b4:c4:
05:e1:13:52:e3:38:19:1a:66:63:19:62:fe:a0:f3:
d5:bb:72:f8:ab:f9:6a:e9:a2:c7:af:87:63:46:b4:
78:72:2c:a1:c0:16:96:ec:17:21:3f:43:ef:f3:be:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:A8:CF:9A:EC:1D:11:61:7C:D1:80:39:87:EA:C8:1C:A6:13:B7
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:2b:d3:25:55:11:67:72:5c:1b:7a:eb:3a:ae:63:86:d4:9f:
46:7b:64:70:81:cc:ec:ae:24:91:ba:27:8d:b5:90:3c:89:28:
4e:ed:93:d6:5c:67:92:93:d4:af:7c:d9:bf:7e:4a:6d:be:74:
ab:95:87:d0:31:d4:16:8a:7b:f5:4c:98:9b:cb:0f:a7:27:4a:
15:ac:5d:1f:8c:a9:16:44:58:58:1d:2e:22:79:6c:e4:3c:ea:
4e:02:07:3c:6f:3f:a1:dd:0c:71:f4:7b:23:f9:0f:d3:15:42:
19:94:12:94:f3:24:80:c5:3f:88:ec:6a:73:f1:8c:fb:01:32:
b7:34:59:64:d3:98:70:41:8b:91:32:a5:43:ad:79:e8:e8:f5:
91:c9:c2:62:62:af:26:58:e9:1f:98:7e:2e:ee:a0:eb:62:93:
7c:58:86:c1:97:ff:5a:69:a0:81:7a:84:4e:cb:64:85:5f:55:
d0:93:54:cc:fe:9a:9a:56:8a:85:5e:23:c9:e6:c4:a0:00:a1:
d8:cc:1f:cf:b7:6d:25:8c:a8:40:99:8f:11:f6:a7:0e:37:e4:
1c:ed:57:c7:f6:ab:6f:92:be:dc:ed:78:ed:30:87:97:28:f4:
73:0a:7f:80:98:c9:8f:53:61:5f:fb:82:fc:f6:59:6a:78:a3:
4a:d0:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 22:08:56 2025 by rpki-client