Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File: Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier: j4WRZ7r2lKhJGkXz6UXuf0maVhZJyvaURh7ifGRLai4=
Subject key identifier: 79:7A:D9:3F:33:78:0F:4E:12:F0:FD:59:87:0A:41:E2:7B:4E:B7:AF
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer: /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial: 019A217730207BD90DB84CA35D4FCBCDD55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 17:00:50 +0000
Manifest this update: Sun 26 Oct 2025 17:00:50 +0000
Manifest next update: Mon 27 Oct 2025 17:00:50 +0000
Files and hashes: 1: AZwj0Iuykway_WQBa3ENsQ_JxtA.roa (hash: Q7rNa7RTxQcsrsOIx/wgjhqBI7OG9HoBnLFXa7zfZYE=)
2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: QJN9yyIhYTLREufnT0T50AB1OibrlikgG/G68BcdQVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:30:20:7b:d9:0d:b8:4c:a3:5d:4f:cb:cd:d5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Validity
Not Before: Oct 26 17:00:50 2025 GMT
Not After : Oct 27 17:00:50 2025 GMT
Subject: CN=797ad93f33780f4e12f0fd59870a41e27b4eb7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:f5:2d:75:3a:c4:d5:d3:a1:08:e6:b5:ae:
4e:81:91:9c:20:0c:96:89:b3:e6:ab:99:78:04:00:
97:13:30:8f:d9:aa:8d:99:f4:b3:f2:48:4b:d9:41:
61:fd:b3:40:e5:38:4d:ab:09:13:c7:1b:89:90:3e:
7d:d7:f0:f3:90:4a:87:1b:b2:66:3f:7c:a4:a5:c2:
1d:2e:13:1b:92:4b:d8:cb:a6:7f:d5:d7:b3:31:1c:
54:ba:fd:9c:1d:a2:50:c9:65:c3:11:b2:f2:97:05:
88:c2:38:e7:24:46:82:f5:80:9b:e3:da:08:15:c1:
c8:f2:c8:ee:98:56:9e:dc:17:31:15:e5:21:64:5f:
0c:b1:34:26:9c:a8:a3:af:80:41:cc:6f:50:f3:3d:
8a:83:d3:52:1b:da:d2:58:12:87:f1:0c:0f:41:4d:
46:bd:51:e1:6d:ab:0f:15:29:75:92:15:c2:dc:ba:
57:a9:cb:ea:c8:30:5a:15:99:86:23:55:99:a7:9c:
19:d6:29:dc:e5:95:33:70:a5:98:73:74:71:e2:e4:
f8:17:0e:3d:dc:66:55:0e:cd:c1:0a:b0:0a:b0:d4:
38:da:9f:85:07:6b:67:2a:93:54:a3:24:56:61:b3:
97:28:8e:43:0c:7f:8f:6e:4b:49:c1:96:be:db:ae:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7A:D9:3F:33:78:0F:4E:12:F0:FD:59:87:0A:41:E2:7B:4E:B7:AF
X509v3 Authority Key Identifier:
keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2a:09:43:d7:29:f6:29:da:66:f4:81:2a:0b:59:ed:ea:e1:
a1:24:7a:fd:35:5d:59:31:87:48:c3:75:40:f5:c7:20:ed:de:
8c:9a:27:60:0f:63:19:da:98:c9:4d:a8:c7:72:c2:14:10:3c:
be:f7:17:f6:e6:f1:ba:b1:b1:6a:ee:6b:1c:56:e3:ca:2c:f5:
bd:9b:c1:8c:ee:59:55:5a:af:bf:de:6f:88:52:a9:66:3a:ad:
f9:ef:77:60:76:73:1a:78:de:27:a4:ed:73:b6:a5:e8:06:0b:
94:e7:4a:5b:16:da:e1:7c:f1:e6:91:91:f6:34:7e:60:3b:79:
54:7d:5b:2e:18:61:26:49:ac:04:7f:dc:c8:08:c2:45:c9:38:
fd:c4:ad:0d:a9:9c:dd:de:0c:bd:e4:00:c0:b9:32:5f:51:98:
38:25:39:a9:05:9b:64:33:35:8b:9b:e5:d2:dd:b8:16:43:6e:
49:db:f6:6d:06:fc:d9:fe:57:a4:1e:40:ce:b3:8c:0c:5f:36:
70:42:5e:f2:08:6d:27:88:2e:12:6e:5e:44:5e:55:ba:3b:bd:
d4:ca:8e:20:84:51:c3:b1:aa:49:69:58:2f:a0:83:0d:90:08:
6b:31:e3:f6:8f:3f:0f:8d:6c:3c:27:d5:a4:d8:03:b8:67:b9:
53:46:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:19 2025 by rpki-client