Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File: uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier: LY0tsw7L2eKKEWzFC8sr5xoxjW4P1HfBb375v0c4pbQ=
Subject key identifier: 1F:0D:27:54:24:80:DD:D5:4B:42:D9:81:CB:5D:F9:14:58:DD:D3:D8
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 019A2365710946B50D10A3294CC02310967A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 02:00:41 +0000
Manifest this update: Mon 27 Oct 2025 02:00:41 +0000
Manifest next update: Tue 28 Oct 2025 02:00:41 +0000
Files and hashes: 1: GwSclZbmW8WnUrygOTuyHlhOctc.roa (hash: 90yBE3rANCosAdjpMcBIDjsdlrAf7rrR2qzNpEkH8d8=)
2: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (hash: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=)
3: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (hash: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=)
4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: eFRYhLGJF04YZ0M/lgm+7wiaUBNdhDIWxvWeK6a/hFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:71:09:46:b5:0d:10:a3:29:4c:c0:23:10:96:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Oct 27 02:00:41 2025 GMT
Not After : Oct 28 02:00:41 2025 GMT
Subject: CN=1f0d27542480ddd54b42d981cb5df91458ddd3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:59:65:c8:08:0c:2b:64:35:d6:0b:98:2c:
cf:a5:36:8d:c7:af:f3:ab:c6:5a:c9:53:4c:29:ed:
0a:ec:3f:0c:7f:37:f3:fa:82:ad:2a:08:46:6a:2e:
e6:40:ee:59:29:7b:fd:e4:35:74:d7:97:50:70:23:
e3:b0:e6:d4:aa:93:6f:90:69:f2:ba:0b:19:65:54:
a2:86:d2:c8:d7:61:82:40:ff:16:27:d2:4a:c0:f9:
fa:a4:2a:f1:7c:3a:e3:63:ee:e2:f5:e6:b0:ee:1e:
75:6d:eb:6e:ae:1f:d1:28:6e:ae:b7:7a:58:01:44:
a4:e9:6b:c9:16:7c:12:2f:62:fc:86:d3:82:67:fc:
b6:4d:80:88:31:f7:73:f7:c5:29:98:39:f8:b4:1e:
d1:60:6e:7d:da:11:03:d4:71:a3:32:e3:aa:c2:32:
d8:e8:81:b3:00:c7:50:5f:8f:46:79:04:ff:68:cd:
fc:91:5d:5e:9e:bb:fe:8d:ff:9c:f3:1e:75:6e:1d:
49:69:c7:55:11:bb:97:1b:75:9a:1f:24:40:cd:7f:
a4:57:ff:2e:c8:54:70:71:e3:2f:9d:e1:ea:e6:45:
84:e3:dd:61:df:3b:63:a9:2d:79:ff:7a:06:3a:d6:
0b:d2:e0:b0:ef:10:c3:4f:7e:94:9c:2c:1e:96:f4:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:27:54:24:80:DD:D5:4B:42:D9:81:CB:5D:F9:14:58:DD:D3:D8
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:69:93:40:01:81:d8:90:4c:56:f7:62:b6:3e:d0:1c:a1:17:
39:b4:07:1e:89:f1:2e:26:8a:90:d1:6b:7f:41:23:e2:59:03:
9f:6e:0e:39:d3:8f:f9:5d:18:09:77:a8:e1:eb:e8:ae:3b:65:
bf:68:8c:9a:df:a5:eb:b0:d9:f4:41:c4:8a:15:c5:b7:82:00:
50:69:83:58:c0:c5:c6:ed:0b:c5:c5:99:9a:af:98:6e:6e:c5:
67:c2:ad:b1:9d:5a:71:58:62:78:37:27:3f:0f:78:de:fa:f3:
49:3c:c2:cf:06:61:80:bb:f9:5e:3d:b0:4d:b8:1e:0a:34:71:
41:ae:90:6a:0b:9d:1f:93:eb:04:96:b7:29:05:4a:2e:fb:e4:
36:f8:e3:f2:0b:a0:22:50:ad:c5:da:ff:8e:1c:e2:97:a7:ee:
6d:5c:d9:a1:bb:bc:90:f7:bb:14:91:7d:b5:05:b0:dc:fd:2f:
94:0c:ae:e9:22:d6:d2:47:3d:5f:38:2b:88:7e:ea:7c:e3:f7:
8f:b1:4a:a5:e8:66:5a:f2:bc:d0:4f:6f:23:34:3f:4f:0a:21:
b4:7e:24:1a:72:87:58:c1:d1:76:7e:db:d7:cc:61:da:38:14:
91:c2:e9:17:79:af:c8:96:c5:f2:10:d0:af:46:23:9a:e9:a5:
54:2c:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:52:20 2025 by rpki-client