Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier: rkJZCPXV7qXUSuprjlkerDTdrf4Ged02JKptmxKNA0U=
Subject key identifier: 5D:3D:12:0E:51:16:94:3F:5A:7D:83:74:BE:B3:BC:0A:9C:DD:D1:6D
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial: 0199228C71DF52B297CE2DF05B942E331FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:00:53 +0000
Manifest this update: Sun 07 Sep 2025 05:00:53 +0000
Manifest next update: Mon 08 Sep 2025 05:00:53 +0000
Files and hashes: 1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=)
2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: vRUzUlcsPmaZNE6/+cgBICUPpr6CL0+9JySDq2HaUPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:71:df:52:b2:97:ce:2d:f0:5b:94:2e:33:1f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Validity
Not Before: Sep 7 05:00:53 2025 GMT
Not After : Sep 8 05:00:53 2025 GMT
Subject: CN=5d3d120e5116943f5a7d8374beb3bc0a9cddd16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:cc:13:c5:ee:ed:66:5d:37:6d:c0:5a:dc:
fe:29:09:0c:1e:fe:30:b9:54:c8:74:a5:cb:9e:63:
26:43:56:18:b9:70:63:6c:d4:cf:ac:ae:7d:45:94:
b3:77:c8:c7:e2:ec:88:f6:b2:91:76:7c:fb:50:3f:
6a:fb:cb:d9:bf:3a:5c:6b:27:a6:4d:ae:4f:33:44:
b1:70:03:b6:2f:6b:38:b2:77:88:9d:f8:10:b3:2f:
13:09:15:9f:0d:20:57:dc:12:24:76:07:d0:17:82:
c3:84:42:12:f6:d1:4c:c5:8c:38:e9:ce:15:57:04:
12:b9:9e:e9:dd:80:fb:48:2b:03:d7:c1:4b:87:3c:
1c:a2:ec:25:bb:43:69:d3:05:ed:2d:7a:7c:3e:cd:
d7:8b:56:04:98:e3:2d:6f:12:00:b8:0e:6d:a4:2e:
62:b0:5c:7d:77:50:70:ae:0e:b4:45:38:a8:ca:32:
ba:df:ae:be:c3:d1:42:7d:94:05:dc:d4:f7:23:f2:
65:8d:34:b6:df:a8:9c:94:3a:e6:de:3c:b8:45:e0:
03:ca:bf:60:4d:78:02:6b:28:ae:b2:2c:ec:a9:cd:
7f:21:2b:fb:90:a8:7c:dd:af:5f:20:28:5e:41:a9:
06:13:e2:54:0c:19:74:75:a6:77:4d:e9:50:23:ad:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:12:0E:51:16:94:3F:5A:7D:83:74:BE:B3:BC:0A:9C:DD:D1:6D
X509v3 Authority Key Identifier:
keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:07:e5:d6:eb:7a:cd:2a:d4:0c:2e:cb:2c:0b:92:e3:98:b8:
52:14:23:87:4b:73:cd:38:25:6f:fd:e3:fc:38:e8:73:66:f1:
65:94:43:20:a6:48:cd:8a:b4:f9:4b:19:fc:ae:60:a1:62:b5:
97:19:76:83:a4:c3:2b:39:04:91:26:f3:f5:e9:75:30:7f:9a:
70:36:5b:46:87:1a:f4:aa:e5:3a:24:ed:3c:7a:4f:ee:82:8e:
02:79:52:ad:67:26:35:88:04:81:65:b9:a4:86:fb:73:be:bd:
23:9c:31:f0:25:2e:be:e5:5f:73:85:56:e5:18:d4:4a:0b:86:
73:6d:96:35:fb:a0:a9:66:ed:37:d2:f5:ff:ba:7f:95:89:aa:
dd:7f:35:70:19:29:de:aa:6a:84:b6:cf:1e:11:3f:26:10:c5:
8b:35:1a:61:25:2c:8f:fd:24:8b:f9:bc:4b:3d:6f:63:6f:90:
62:2f:b4:3c:a2:87:5e:1b:49:ae:2f:76:95:cd:3d:0f:80:6e:
75:3a:b6:9e:19:ed:d5:b5:ec:4f:70:61:d9:a7:33:c6:3f:d8:
52:a3:d7:78:e4:ed:1c:68:cc:b8:88:57:50:87:d7:dc:5e:33:
e0:15:47:70:57:33:61:f9:6c:26:da:43:a9:b5:34:bb:2c:8a:
8e:72:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:58 2025 by rpki-client