Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: mjjc75UcMlVUnmuLS0S0lNTG5iJSG3QMXJ+PpPH/LAI=
Subject key identifier: 1F:8F:BC:A2:6D:6C:94:CF:4F:1D:9E:06:04:EB:16:9F:02:B0:7B:E7
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 019A1D62EDE15D7F6ECA65AD5675D749E875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 22:00:13 +0000
Manifest this update: Sat 25 Oct 2025 22:00:13 +0000
Manifest next update: Sun 26 Oct 2025 22:00:13 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: wx8DcSH8+0WTkf6UXwVTOT+6Zm2lAMOP7hIi1842RtI=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:62:ed:e1:5d:7f:6e:ca:65:ad:56:75:d7:49:e8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Oct 25 22:00:13 2025 GMT
Not After : Oct 26 22:00:13 2025 GMT
Subject: CN=1f8fbca26d6c94cf4f1d9e0604eb169f02b07be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:2e:12:2d:f4:2d:87:b4:26:57:9b:2b:88:
af:10:09:a2:b0:ea:55:b0:2d:0e:26:fa:36:c0:e0:
2f:75:ae:4b:62:44:ee:7a:96:3e:a9:65:40:51:28:
91:13:8b:db:08:6d:3d:20:dc:f1:52:22:c3:5f:68:
3e:e2:b1:c8:e6:99:6c:45:04:26:6a:de:b3:4f:94:
33:4b:a8:e6:25:2c:29:0a:c2:ae:66:0c:53:7a:1c:
68:37:f0:b3:c9:ab:aa:21:db:47:25:b6:70:8b:e2:
4c:7f:90:5a:c0:7e:4b:e4:3c:b7:8a:16:70:ed:2e:
42:2e:8b:75:49:9b:42:3d:7c:dc:89:ce:2e:65:ae:
40:22:c1:2d:9d:38:2b:17:7b:6b:6b:b0:b7:f4:11:
54:a0:79:4c:99:2e:06:6e:10:e4:24:42:0e:ed:ea:
3f:a1:f0:2e:71:68:01:e9:b3:a4:ea:c5:6f:2c:c2:
af:04:dd:15:db:e6:b7:80:4b:d2:06:ff:fd:1e:f8:
42:4b:ca:da:52:75:8f:d9:7c:8f:6c:ce:e7:ec:79:
5b:48:7a:d2:62:22:94:27:3a:f3:66:f0:30:7c:92:
1c:55:c2:64:3e:78:1c:3a:35:2e:bb:70:d8:b1:a5:
66:3e:94:ab:e1:5d:82:b4:1b:23:7d:35:25:7d:b3:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8F:BC:A2:6D:6C:94:CF:4F:1D:9E:06:04:EB:16:9F:02:B0:7B:E7
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:f6:e5:a6:27:01:19:aa:c7:4a:b9:f2:f1:de:80:7e:65:
26:c6:45:7d:d9:1d:06:73:c4:14:da:e0:6e:d2:07:70:ee:4a:
3e:01:89:ca:ae:ef:55:e3:7d:cd:6a:81:8c:64:bd:c0:3d:db:
f0:22:87:20:0a:8b:08:e3:cb:2e:96:dd:21:68:5e:c8:b3:a2:
34:40:95:ff:fb:df:24:22:db:99:22:93:a6:9d:49:ac:ea:34:
d5:96:ba:1d:a0:bd:7c:e9:1f:69:44:c7:cb:03:bc:00:78:4c:
06:24:78:13:84:fa:7c:f1:0c:32:32:e0:ce:30:e7:00:bd:76:
1c:83:26:61:42:13:3d:36:ab:be:2a:66:c4:2b:fd:9b:90:82:
bc:e0:09:09:73:6c:ff:eb:fa:31:5d:88:12:e1:00:a2:53:36:
de:94:08:15:e3:ec:c8:3f:0b:74:81:dd:ee:ef:2e:04:57:0d:
90:28:43:79:5c:73:00:8d:66:3e:82:86:8e:bb:32:40:90:6a:
fd:3f:23:26:de:3a:fd:78:af:d8:86:1c:c8:74:24:fe:b4:31:
77:ae:4f:e0:c7:72:62:ac:af:98:25:81:42:9c:21:6b:51:09:
08:d1:77:64:7c:5d:b5:5c:dc:ac:78:82:87:74:8b:7d:7f:10:
55:f1:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:31:57 2025 by rpki-client