Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File: uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier: 1qYC10/jvx/Jv4yurgs12x7+BItaibAf8kTmLzxsLuc=
Subject key identifier: 4D:1C:47:E7:B8:17:E3:66:75:16:82:AD:D9:A9:E0:D7:04:71:D0:5E
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer: /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial: 019A2365183245A4F08B666EC61F3189299F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number: 168A
Signing time: Mon 27 Oct 2025 02:00:18 +0000
Manifest this update: Mon 27 Oct 2025 02:00:18 +0000
Manifest next update: Tue 28 Oct 2025 02:00:18 +0000
Files and hashes: 1: oimw25gLGrg8VoA88DA5Qz6cbTs.roa (hash: pg4JhqGSyuBLyWQkEY6EPIiPycbtpRjAMWZIyZYwiWM=)
2: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: tn+Wz2AGCUWQwW7y4Wmtyep/xGi4X3NYQqOZRUXkXlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:18:32:45:a4:f0:8b:66:6e:c6:1f:31:89:29:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Validity
Not Before: Oct 27 02:00:18 2025 GMT
Not After : Oct 28 02:00:18 2025 GMT
Subject: CN=4d1c47e7b817e366751682add9a9e0d70471d05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:41:99:08:a1:b1:5f:cb:a1:04:9a:41:1d:
30:e4:c1:78:80:0b:89:02:b1:5b:9e:e0:a1:13:bc:
05:8c:c4:ff:ef:99:26:da:a5:a7:b5:29:97:98:5e:
83:8e:3e:13:69:48:aa:db:dd:c1:31:3b:33:2a:ee:
8b:dc:3d:6e:41:49:f9:aa:c0:e3:4b:b6:3a:72:f6:
08:db:c5:33:80:f4:fb:1a:3b:78:e5:45:9f:08:08:
3e:47:47:93:e3:e2:eb:b2:66:89:df:f2:a7:e9:60:
c7:8c:c8:6c:21:72:2c:1e:ea:3e:d7:dd:8d:a2:31:
92:49:5b:f7:f1:19:a7:34:c0:87:7c:d6:24:64:56:
57:2a:0d:a4:60:17:6a:35:90:24:f1:96:c0:48:01:
1b:14:c6:b4:ea:42:33:44:6c:4f:c8:bc:69:94:ce:
f2:cb:62:db:58:27:d3:b1:fe:2c:34:00:88:0c:57:
63:19:4a:21:40:e4:8c:59:76:1c:99:c4:78:86:f4:
e8:ef:30:d3:a6:5d:b2:b1:7c:0e:fa:1e:6a:92:5a:
4b:b0:7c:34:a0:c3:36:04:07:13:8a:b0:a6:4b:7d:
e6:e1:fd:d2:97:ad:5e:e5:3f:98:2c:3e:1d:c6:96:
0d:64:46:44:6c:f2:14:93:d4:7c:49:38:4e:89:62:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1C:47:E7:B8:17:E3:66:75:16:82:AD:D9:A9:E0:D7:04:71:D0:5E
X509v3 Authority Key Identifier:
keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:88:59:fe:ef:36:8e:28:9f:84:02:76:fa:48:0b:22:c6:43:
32:a7:c1:95:bc:33:20:d4:ff:ee:ef:d1:3c:6c:fd:ed:3c:76:
d2:f2:3a:eb:a1:3c:72:2e:82:af:6d:7d:3b:dc:f9:f6:18:9a:
5f:20:dd:24:18:48:69:43:51:87:7e:be:7b:ad:10:ac:05:9e:
ce:be:80:41:6e:23:1d:63:65:bc:cb:b6:55:2a:9f:aa:13:22:
aa:76:52:2c:0a:f4:56:2c:95:87:69:c1:9a:49:41:36:5f:2c:
51:04:d9:37:15:79:97:d2:36:da:4f:8e:bd:21:d0:1f:67:58:
7e:3c:4d:b6:c2:c3:db:56:8b:be:03:ce:b4:2d:ab:8c:1e:63:
ca:bb:c2:d8:6e:ad:82:18:0b:9d:1c:86:e7:a6:6a:2a:fc:fc:
6c:26:f1:bb:24:07:56:3c:71:44:71:44:dd:94:46:9e:69:ab:
26:ff:4a:28:af:c2:34:0a:85:77:8a:99:4c:de:d5:6f:ff:63:
15:be:9f:10:82:fc:aa:67:95:2e:1a:84:d0:ad:ba:a3:dd:02:
6a:81:d1:0b:17:6e:0c:05:ce:ca:7e:c8:2c:06:82:58:ba:50:
11:9f:a8:96:5c:23:6f:42:79:43:d6:9b:1b:60:ba:14:ca:37:
86:17:62:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:16:01 2025 by rpki-client