Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File: UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier: K5ESoIJnY++eslsLA0NaPqBK/4ZviB0XCOPG3qw16I8=
Subject key identifier: 5A:22:E0:B7:54:32:63:46:E9:32:BC:CE:33:6C:24:6E:BE:62:52:59
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer: /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial: 019A2854FCB82F5ED3668EA36D4166EC409A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 01:00:49 +0000
Manifest this update: Tue 28 Oct 2025 01:00:49 +0000
Manifest next update: Wed 29 Oct 2025 01:00:49 +0000
Files and hashes: 1: GvWU7eZamVvazZtWUoco1OLF2MQ.roa (hash: 9kEJ/d7rwclzCBcSORu1ByXHG+IDCNPxceZqglg+1Hw=)
2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: 9ru/Bjpg7XEuMzvD7ZN1aqtemjfF6WLSm0gTdcRBq4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:fc:b8:2f:5e:d3:66:8e:a3:6d:41:66:ec:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
Validity
Not Before: Oct 28 01:00:49 2025 GMT
Not After : Oct 29 01:00:49 2025 GMT
Subject: CN=5a22e0b754326346e932bcce336c246ebe625259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:85:e3:95:34:55:05:41:a8:39:a4:3c:1b:
e7:26:44:71:0d:f4:bb:80:7d:10:70:3f:7d:a5:06:
ea:4b:92:fd:72:90:0a:58:0b:19:d4:7d:0c:1c:5e:
f8:11:3b:7b:de:cf:fa:4d:f2:d8:02:c6:21:b0:b3:
94:1b:f1:ad:53:c7:f5:ba:0a:12:69:14:4c:1e:3f:
e0:f1:5f:a7:f2:a9:0f:b4:e5:8d:de:74:c5:8f:9a:
ff:0f:b8:13:3a:2a:4f:a0:db:c3:1a:3e:b6:0f:8a:
73:75:b0:0d:1d:ff:2d:ea:77:d4:49:8c:f1:4d:99:
7c:ac:a6:3b:80:48:11:75:22:21:51:00:f2:8c:ff:
43:01:4e:68:c8:a0:3c:b8:3e:c9:90:ee:78:aa:11:
02:5f:a0:7d:2b:10:bc:3d:60:59:3b:19:c5:77:6d:
d9:a8:ec:f5:7e:59:cf:fc:8d:a4:85:fb:a1:0f:0a:
7a:b4:88:db:f6:cb:8f:9b:82:7b:d5:c1:3a:af:2b:
d8:43:9d:75:50:a1:80:0b:45:83:87:ec:9c:ea:42:
4e:66:e0:26:d1:0b:76:4a:b6:34:3f:6c:f6:78:16:
50:23:cd:d6:fe:e7:c1:82:b2:94:5e:f4:dd:43:05:
4a:d0:08:31:9e:27:ca:be:92:29:72:9d:cc:03:27:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:22:E0:B7:54:32:63:46:E9:32:BC:CE:33:6C:24:6E:BE:62:52:59
X509v3 Authority Key Identifier:
keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4c:19:fe:69:c2:c9:2d:91:0d:2c:22:25:c7:c3:61:0d:65:
e8:66:6e:ed:50:8a:66:c3:13:b1:23:47:e5:35:6e:8c:e2:25:
3a:60:34:1e:96:d5:cd:51:f1:cd:51:3d:ef:cf:cd:dc:29:07:
52:6e:0e:03:50:a2:91:f5:cb:d9:f7:e6:d3:f2:29:e5:52:94:
14:b6:b1:22:3d:a3:ac:c2:8b:ed:68:d9:c6:b8:94:e8:a6:25:
58:e2:8b:8d:95:69:f3:4f:b2:94:be:97:50:5e:b4:52:72:82:
ec:9e:4b:4d:32:88:fd:be:58:42:21:d4:1c:e5:48:b1:f8:f5:
70:98:e5:c9:b6:cf:29:6e:4e:51:a8:c0:0a:c2:3d:37:89:8b:
42:98:24:b1:d1:79:95:f9:72:1b:b9:05:55:84:24:c5:80:3d:
de:01:08:de:d9:a6:90:0f:7e:8d:ba:81:bf:ed:b0:30:97:b8:
84:cc:2a:ff:de:b2:8f:81:ed:21:e4:29:4e:09:ba:94:4d:a0:
b6:bb:3e:75:2e:67:80:37:8d:36:2d:3f:ab:8e:55:0e:e6:f9:
1a:68:6d:94:0b:95:d9:0c:18:3b:9a:e2:4a:cc:7e:b8:95:73:
05:df:86:57:5b:a1:a7:5f:de:b1:b8:b5:64:ed:9e:31:b9:ea:
d9:b8:58:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:46:16 2025 by rpki-client