Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: +EzRIc4fkb58FCNSvnZandhvg01lXIzcHiTX559RQ4o=
Subject key identifier: E0:44:EF:7E:5F:8C:9F:39:55:28:A6:AA:14:CC:D7:63:E2:99:0B:6B
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 019A1CBE9496171ABB8107997AA5CD22FB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 19:00:43 +0000
Manifest this update: Sat 25 Oct 2025 19:00:43 +0000
Manifest next update: Sun 26 Oct 2025 19:00:43 +0000
Files and hashes: 1: nvssmzONG7qjvIwamItOLmkUaA0.roa (hash: EEJiS6J16mRVGMMJil5p1RCJmhdzFd3cSiAFjhbQlYI=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: ggl0bMicpPIv/9P2HaULu9XXwuAns/OjOQ3oA7Q2xks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:94:96:17:1a:bb:81:07:99:7a:a5:cd:22:fb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Oct 25 19:00:43 2025 GMT
Not After : Oct 26 19:00:43 2025 GMT
Subject: CN=e044ef7e5f8c9f395528a6aa14ccd763e2990b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:93:86:38:14:66:2f:6b:c3:a9:57:7a:73:
ac:6b:89:7d:be:7b:9c:35:fe:dc:17:c6:ad:21:97:
fa:5e:e4:4e:a9:05:84:6b:eb:1e:eb:96:15:10:55:
60:90:01:f9:9a:39:d5:8f:87:78:05:32:29:2f:91:
72:46:e4:26:55:b2:49:b4:bd:63:63:69:e9:9a:81:
11:41:70:64:2f:8d:b0:de:41:e0:c9:e8:97:2b:86:
db:df:4a:f9:db:1c:ed:c2:36:39:8d:ec:8b:07:12:
f0:bf:fe:84:fc:09:7c:3c:e9:31:ad:e8:b5:ec:d2:
ed:70:39:b2:50:03:a6:0b:3e:e3:d9:73:f2:a3:ed:
7b:f8:6e:44:0b:77:12:e9:e5:9b:e0:22:25:e6:e3:
7a:75:cd:8a:37:3b:a7:32:7d:d4:5a:a5:54:9c:bb:
6e:d7:03:5b:ef:2c:08:0e:0d:d3:e7:ff:b8:93:b9:
94:d4:83:6d:0c:c9:14:05:ba:eb:75:e2:55:ea:54:
94:d8:be:18:12:35:f4:0c:44:11:ad:72:ef:c4:af:
99:8b:ab:57:c1:25:37:1e:9c:15:4d:1e:2a:53:4a:
b3:29:f0:99:0e:d3:67:2e:61:c1:0d:ab:10:35:39:
30:35:29:1a:22:b6:67:2f:57:8e:c3:c2:bc:35:57:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:EF:7E:5F:8C:9F:39:55:28:A6:AA:14:CC:D7:63:E2:99:0B:6B
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c8:66:28:00:87:e0:a0:ba:09:24:bf:29:26:e8:4a:78:24:
3d:db:57:71:10:e0:4c:1b:6a:0a:51:cc:d2:a5:48:c9:ae:00:
50:fc:43:2c:0b:25:a5:8d:f2:39:91:71:f5:de:70:a8:20:84:
6a:e1:1e:5d:1f:8d:38:2c:31:c7:1a:ed:fc:6e:89:08:65:c1:
78:2a:78:c5:8b:72:72:7b:73:ad:9c:7e:8c:e3:bd:a9:b6:fe:
82:75:74:5f:0a:f4:3b:65:47:ac:0b:76:7b:cf:45:5a:0f:4f:
65:1b:06:f9:7f:5a:d0:a0:d2:a8:7b:7c:22:b6:a1:2f:94:42:
44:b1:c9:42:57:1a:88:ea:de:06:7f:6f:fd:12:91:a3:8f:85:
7d:94:b4:c2:cc:dc:19:a9:ae:8b:2e:70:26:67:8f:14:4e:7d:
dc:5c:67:9e:3d:20:38:0d:40:ed:3c:4f:d1:f9:c3:fd:74:54:
75:c5:c8:ba:42:cd:e1:d7:6a:bc:9c:8b:98:ab:28:54:92:66:
d4:9f:b9:2a:79:cd:89:dd:bf:c6:c4:2a:ad:b1:df:84:d2:98:
99:a7:47:25:95:b8:e8:31:ae:a1:71:57:48:8e:8f:c0:7f:b9:
0a:0b:16:d4:e4:8a:27:c2:cd:af:0e:b0:78:18:ff:64:5e:25:
1c:27:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:56:48 2025 by rpki-client