Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: QDMAkRjm9kYyMBc3h6Mh/DxaQk67HxG0+WGcmG11caU=
Subject key identifier: 94:E5:94:78:C5:70:10:97:00:3C:DF:3B:E0:54:62:0C:8D:63:4C:E2
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019A1EAC89D1BF8302B33C4D68FCCBD0DF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 16FD
Signing time: Sun 26 Oct 2025 04:00:15 +0000
Manifest this update: Sun 26 Oct 2025 04:00:15 +0000
Manifest next update: Mon 27 Oct 2025 04:00:15 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: AJX8ovZwLx23KBAHA62rm7s+MQMEYLPRm1sLB6Up8cE=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:89:d1:bf:83:02:b3:3c:4d:68:fc:cb:d0:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Oct 26 04:00:15 2025 GMT
Not After : Oct 27 04:00:15 2025 GMT
Subject: CN=94e59478c5701097003cdf3be054620c8d634ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:06:11:4a:91:f0:39:2a:d2:bf:69:9c:f8:
87:9f:df:2c:e1:32:45:8e:cf:d1:05:8e:88:dd:6b:
6c:75:e6:ea:b1:1b:ac:52:4e:24:f8:ed:19:a1:db:
22:ce:87:47:b3:9d:4e:04:59:b4:12:16:6a:34:58:
a5:94:9e:c0:cb:4c:13:17:96:db:3b:e9:74:12:31:
04:6b:e6:39:b8:65:a9:72:20:01:56:c1:18:fd:3b:
e1:45:62:fc:cf:25:9b:84:e3:1d:a0:24:58:91:6c:
af:0c:3d:80:56:01:a0:1a:5d:e9:d2:04:e9:67:d3:
6e:85:c0:c8:15:62:cd:ad:dc:f1:48:fc:12:18:db:
f2:12:38:4d:ab:e0:10:2c:a5:fe:df:67:50:10:07:
4c:7c:d5:19:d2:db:cc:ac:18:09:c1:58:2f:aa:1f:
68:db:83:e9:e7:57:ee:7d:dc:f0:a3:6f:5d:3b:30:
13:06:d9:91:c7:42:38:4b:00:82:0a:7b:ca:41:d7:
e8:6b:a3:3e:de:6c:da:8d:3c:d0:21:ef:c7:91:93:
fc:9d:1d:24:72:a9:56:e3:54:42:c7:e9:4f:49:56:
33:10:b5:02:52:d6:23:24:69:e5:51:bc:d0:bb:f3:
08:37:ce:d7:2f:ef:9c:c8:0b:cc:9d:a7:a6:47:b5:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:94:78:C5:70:10:97:00:3C:DF:3B:E0:54:62:0C:8D:63:4C:E2
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a7:70:2b:70:1d:65:8b:39:ab:34:a1:c2:aa:84:fb:af:4b:
1f:51:ed:62:55:46:d1:b6:ab:16:b8:09:db:ad:73:ee:62:4c:
e0:7d:a5:54:d2:68:33:f8:f3:25:9d:0e:44:a0:42:ac:99:75:
71:2a:2f:b1:21:0e:72:32:2d:39:48:d4:24:ae:0a:9d:1b:11:
f8:cf:87:7f:3a:1f:a4:ed:5d:18:75:ed:17:00:a2:ee:db:29:
f1:57:aa:9e:bf:f0:fc:97:a8:3e:6e:48:b8:4c:eb:df:27:26:
22:ca:82:f2:a6:17:b3:75:3c:0c:ca:e9:a0:78:7e:c0:f2:fc:
86:de:3c:d3:13:7f:5d:46:3f:27:16:a1:e2:15:b0:91:38:30:
12:d6:31:d8:5b:5d:73:80:b6:0b:72:4b:a6:5e:ae:b2:e8:fd:
b7:83:0a:e3:ee:c9:37:9d:a3:ef:37:98:5a:49:9d:0c:49:f9:
61:1c:c9:82:ea:87:99:a8:6d:53:2f:22:15:51:28:12:d6:72:
2e:df:09:e3:74:e3:e6:f7:f0:57:be:b4:a3:9d:39:88:f2:de:
18:16:8c:d5:e4:0e:4e:a4:25:a0:7a:cc:8c:89:b5:0e:bd:0e:
f2:0a:dd:d7:27:f8:27:48:47:b7:d0:07:dd:02:6d:d2:6e:e7:
70:ff:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:15 2025 by rpki-client