Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier: PFJrba/sWJCe0qC4wfkPymKtbQGxvymCG4CpWji2rZA=
Subject key identifier: 5F:A9:02:B3:86:D4:0B:89:2F:81:6D:60:0C:4D:93:FC:59:58:82:B5
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial: 019A7293EBD33D8B78901790C2AF91D1E29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=)
2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: YoQCv68kdACH7u8vqWKOY3Umj8EHvxJfsMUKRbicz4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:eb:d3:3d:8b:78:90:17:90:c2:af:91:d1:e2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=5fa902b386d40b892f816d600c4d93fc595882b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:26:6d:ab:14:d9:83:c5:4c:38:82:b1:d3:
e6:36:08:76:96:a7:4b:62:ea:21:7f:56:5a:50:e8:
67:b0:f7:8f:3d:5f:e3:a3:d7:62:cb:26:16:ed:dd:
87:86:89:b2:4f:b9:fc:71:69:d1:52:2d:51:92:c9:
be:39:97:b1:02:b7:be:f5:43:d0:4f:cb:27:29:e0:
36:8a:7c:73:0a:b8:94:f8:d5:1b:db:00:e6:00:6a:
91:67:41:81:12:27:9b:af:c0:8b:be:54:0a:2b:0c:
8b:cc:89:93:31:a4:b1:62:58:59:ba:f6:e1:b4:79:
ad:d9:50:fe:2d:7d:d0:62:c8:c3:c4:97:fb:1f:78:
fd:14:5b:16:0c:d7:29:85:96:f1:b4:a7:6b:69:4e:
6e:80:9a:21:9a:f5:db:9b:ac:b6:ce:f6:5e:c1:10:
cc:ea:5c:8f:63:5a:8c:22:89:7d:db:93:08:a1:3d:
01:ed:3f:53:1b:77:7f:db:4f:83:6e:a4:83:75:be:
a3:fd:09:27:9b:cd:5b:d1:c5:b3:df:c6:18:b1:97:
f5:12:f6:78:7a:2f:a0:bc:80:c0:d2:d7:38:aa:56:
61:0d:8a:1c:ec:01:54:24:a1:7b:a2:59:4c:a6:fb:
ef:0d:a2:5e:91:90:f0:c2:cd:6a:02:37:4a:bf:3d:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A9:02:B3:86:D4:0B:89:2F:81:6D:60:0C:4D:93:FC:59:58:82:B5
X509v3 Authority Key Identifier:
keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7d:63:d2:50:dd:2b:a0:11:b1:7f:4d:c1:4a:b1:8a:72:b8:
66:b4:6a:d7:c9:e3:78:a2:e5:e2:db:40:29:46:a0:1e:fd:b3:
46:e0:06:38:60:91:6e:57:a2:69:66:01:60:a5:b5:c7:c2:0f:
56:cb:1b:27:60:86:3f:0c:71:8b:c5:40:8e:6f:2d:da:2a:99:
c3:87:7e:f0:ed:5a:c0:5e:ca:91:e5:e2:e7:e6:43:f4:ff:42:
81:5a:1a:34:25:be:e7:f6:e2:b5:46:0e:d4:d1:43:03:5a:d6:
96:f2:ca:66:5e:a1:fa:e2:57:63:ac:3b:4b:f3:7d:21:0d:e0:
ba:f6:de:1f:50:c6:74:05:c5:4e:44:8f:ef:34:ba:a9:a7:66:
3a:3a:f6:58:64:46:45:65:45:84:b3:21:19:50:09:b3:c1:a7:
f1:fc:58:cf:3c:27:58:16:85:a4:b4:90:11:e8:7f:84:23:a5:
87:33:76:e9:47:44:c0:ef:f4:c5:58:3f:db:2e:d0:5d:7b:55:
a5:93:05:9c:35:ed:75:2e:d4:3b:45:e2:00:af:04:c9:71:3f:
9a:4c:1a:57:df:f3:b5:4b:70:3a:18:65:dd:a0:1b:71:5e:76:
14:bd:c4:1c:b5:58:13:6f:40:d1:90:e3:2f:b9:e0:30:04:0b:
a0:c9:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:33 2025 by rpki-client