Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: 5+PKzqMFknEN7eyd6va3JlDelDGIEff9+pMctQmuPqg=
Subject key identifier: 8B:A0:8C:BB:34:00:F6:7B:6F:B0:92:8B:FF:89:4A:0E:B4:C4:ED:E0
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 01994473414BF729193A4DB165B0D74EE859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1683
Signing time: Sat 13 Sep 2025 19:00:27 +0000
Manifest this update: Sat 13 Sep 2025 19:00:27 +0000
Manifest next update: Sun 14 Sep 2025 19:00:27 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: SAzVhouIHghXiP3EQ9x9IC1a7ROmkaZmSfpBjMm/eRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:44:73:41:4b:f7:29:19:3a:4d:b1:65:b0:d7:4e:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Sep 13 19:00:27 2025 GMT
Not After : Sep 14 19:00:27 2025 GMT
Subject: CN=8ba08cbb3400f67b6fb0928bff894a0eb4c4ede0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:f1:54:03:56:f8:3e:ce:50:3e:79:9c:fe:
46:7c:fd:ca:5a:d5:40:df:2e:f4:28:ae:20:67:4d:
9d:34:be:45:64:f5:26:62:16:48:fb:ac:96:92:06:
57:c9:a8:6a:77:68:05:a2:7f:32:76:84:be:ad:6e:
90:30:a5:46:af:37:5d:02:21:ca:af:00:e1:e2:da:
78:6f:db:8a:90:dc:fe:54:17:72:44:7a:9b:3e:78:
d3:3b:d1:26:2f:f6:e2:8c:cf:77:9d:e5:65:c0:d3:
ce:66:47:b0:8e:5e:7c:e9:ff:7e:2a:c1:50:72:9b:
a1:ea:c9:fc:3e:8b:41:8a:1b:ec:04:37:96:b1:f4:
4c:ae:90:2f:bc:33:c1:98:6c:1f:e1:c1:e1:ce:dc:
f6:68:fe:70:47:f7:ba:ab:d3:77:81:31:b0:26:81:
66:b7:db:7f:ec:83:7e:30:d6:6b:1b:d6:ba:41:b2:
84:d5:f0:2e:b6:f0:39:08:5b:81:83:a0:6c:f4:5c:
cc:e0:39:fe:62:fb:08:1d:62:71:22:91:84:17:1d:
2d:e1:ab:93:76:aa:cf:38:25:3f:2c:54:35:4a:56:
a6:32:7e:2c:0c:23:cb:2f:eb:78:f9:4b:0a:cf:60:
92:2f:0e:f5:1e:a4:ed:87:22:e9:69:66:87:48:8f:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:8C:BB:34:00:F6:7B:6F:B0:92:8B:FF:89:4A:0E:B4:C4:ED:E0
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:48:24:fc:55:f7:9b:2d:5a:8f:0e:7f:9a:28:cd:21:f9:3f:
7a:2c:b6:9b:87:31:83:7b:29:f5:05:63:f8:5d:a5:8b:d8:49:
ff:a5:02:f4:5d:2a:95:72:42:85:2e:45:b3:68:ce:ba:3a:6a:
a8:f8:34:5a:f9:4a:7a:96:ff:1c:01:34:b1:b5:3a:d2:26:fa:
c7:33:bd:90:9b:40:f3:9f:93:6d:87:62:4d:92:dd:73:32:07:
18:25:dc:da:3e:a4:f7:43:c2:27:84:38:e4:0c:19:3e:31:e6:
12:50:3a:72:64:49:91:e2:52:af:58:7b:6f:95:bd:cd:b7:4e:
57:f3:60:ae:66:40:52:2b:b5:41:fc:49:17:09:bb:06:5f:95:
da:2d:8d:4a:61:af:27:a7:53:02:cf:1b:b9:7d:bd:10:04:4d:
a8:5c:fd:89:48:1a:9b:60:23:a4:c1:a4:13:ef:33:30:d9:49:
9e:22:91:43:16:49:71:8c:b2:70:f3:d7:4c:3b:0f:68:46:84:
d7:c0:f1:62:a5:57:c9:8f:a6:24:23:17:1c:40:e6:94:fa:66:
77:df:63:e5:c7:ae:f6:3a:64:77:5e:ba:ae:d7:bf:60:bc:f0:
df:93:b8:8e:87:f9:f6:0e:29:64:e4:f9:42:2f:73:a7:fa:eb:
ad:53:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 21:31:32 2025 by rpki-client